rozabJul 2021Strongly recommends
Deviant Ollam's talks are always first class. I also love this one, about physical pentesting in general: ▶ this video
in “List of Special Elevator Modes” · View on HN
I'll Let Myself In: Tactics of Physical Pen Testers
I'll Let Myself In: Tactics of Physical Pen Testers on HackerTube: recommended by 5 Hacker News commenters across 5 separate months, 2018–2021.
Wild West Hackin' Fest
Open on YouTubetalk · evergreen
Deviant Ollam, head of a physical penetration testing team, presents tactics for getting into buildings, from bypassing door levers with a wire to defeating bank doors. He argues that physical security is often surprisingly weak.
Why Hacker News recommends it
HN recommends it as an entertaining overview of physical pen testing, and cites it when threads discuss how easily doors and locks are bypassed.
- people recommended it
- 5
- separate months
- 5
- strong recommendations
- 1
- discussed on HN
- 2018–2021
“Deviant Ollam's talks are always first class.”
What HN commenters said
9 Hacker News comments link this video. Each one links back to its thread.
jimpudarMar 2021Recommends
This is nowhere near being viable for real world use. Far more concerning is how easy it is to bypass most physical security measures. Forgetting about how easy it is to pick open most locks, many doors aren't even installed properly in the first place. Check out this YouTube video [0] to see what I'm talking about. [0] ▶ this video
in “Phone app can figure out the shape of your house key by listening to you use it” · View on HN
magicalhippoNov 2020Recommends
Reminded me of this talk. So many silly things leading to easy access. "I'll Let Myself In: Tactics of Physical Pen Testers" ▶ this video
in “DIY Smart Doorbell with a Raspberry Pi” · View on HN
jodrellblankJan 2020Recommends
The internet brings a much bigger attack surface than local people who can reach a front door, and home users access the same openssh as companies do, but companies (can) afford stronger doors. "Most people's home doors can't withstand a hit from a sledgehammer" -> "we shouldn't talk about cryptographic weaknesses in case someone abuses them" is a stretch, the comparison does break down. [1] is a fun YouTube video about physical pen testing; one example at 13:45 in the video, the presenter is walking home from a bar, walks up to a locked high street bank, spits a mouthful of beer through the gap in the doors, triggers the presence sensor on the inside which lets people out, and the door opens and lets him in. [1] ▶ this video
in “The first chosen-prefix collision for SHA-1” · View on HN
jstriebNov 2019Recommends
Simple physical penetration testing tactics are easy to learn and apply widely. These skills can be a quick way to have better security awareness, and can be a fun party trick. For example, many of the techniques listed in this (<1hr) video: ▶ this video
in “Ask HN: What's the most valuable thing you can learn in an hour?” · View on HN
josefxNov 2021Cites it
Going by a presentation from a professional pen tester lock picking is usually far down on their list because there are easier ways to open many doors without picking the lock. ▶ this video Someone who wants to get in is probably already on his way out while LPL is only halfway through with the lock.
in “Saintcon: Lock Picking Lawyer Keynote” · View on HN
Show 3 more comments
isbvhodnvemrwvnFeb 2021Cites it
They don't even need to be internet-accessible, physical security is often weak as well. Surprisingly relevant: ▶ this video
in “Hacker increased chemical level at Oldsmar's city water system, sheriff says” · View on HN
dotancohenAug 2019Cites it
All those cabinets use the same key across cities as well! Otherwise FEMA and other services would be unable to function. For the same reason all LEO handcuffs use the same key, so that any officer could release any handcuffed individual. Edit: Some googling for links let me to this video, which seems relevant: I'll Let Myself In: Tactics of Physical Pen Testers ▶ this video
in “A Boeing Code Leak Exposes Security Flaws Deep in a 787's Guts” · View on HN
KonnstannDec 2018Cites it
>Wait, what? I can't find anything about door levers having this kind of security risk. I specifically remember this talk: ▶ this video at around 18 minutes in he shows one of his employees(?) use a long bit of wire to pull the lever and open the door in a matter of seconds.
in “Dear Developer, the Web Isn't About You” · View on HN