Slashdot Log In
Penetration Testing TV Series Coming
Posted by
kdawson
on Tue Dec 18, 2007 11:50 PM
from the tiger-team dept.
from the tiger-team dept.
ChazeFroy writes "CourtTV (TruTV) has a new series starting Dec. 25 at 11 pm called 'Tiger Team.' It follows a group of elite penetration testers hired to test organizations' security using social engineering, wired/wireless penetration testing, and physically defeating security mechanisms (lock picking, dumpster diving, going through air vents/windows). They do all of this while avoiding the organizations' various security defenses as well as law enforcement. The stars of the show also did a radio spot this morning in Denver." Wonder how they socially engineer away the presence of a camera team in the air vents.
Related Stories
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Sounds a bit like... (Score:4, Funny)
Re:Sounds a bit like... (Score:5, Funny)
They would have a field day with the title alone
Parent
Next up in the cable technology space... (Score:4, Funny)
Sources familiar with the development of the units indicate that the cable integrity is calculated through an internal "fulfillness meter" each box has that is dynamically calibrated to the thrusting force of initial cable insertion by the owner.
The audio tones are said to become louder as the internal weight of the portion of cable inserted decreases on a linear scale.
New owners feel the new design could be a boon to children, who lacking a cohesive concept of proper cable pairment, had difficulty before in detecting the causes of abnormal video problems with the units.
Parent
Re: (Score:2)
The audio tones are said to become louder as the internal weight of the portion of cable inserted decreases on a linear scale.
I suppose both pitch and volume modulation go hand in hand. That would result in a richer, more natural sound.
New owners feel the new design could be a boon to children, who lacking a cohesive concept of proper cable pairment, had difficulty before in detecting the causes of abnormal video problems with the units.
You know how funny noise can keep kids amused for hours? The last thing I want is a 4y old playing with home entertainment devices.
If you're antropomorphizing, might as well go all the way. It would be more useful to have a "hey!" sound if you put it in the wrong place, but it's hard to detect before it is fully inserted.
Set-top box (Score:5, Funny)
- Mrs. Nesbit
Parent
All I have to say is (Score:5, Funny)
Parent
Re:All I have to say is (Score:5, Funny)
Parent
How times have changed. (Score:5, Funny)
Funny, when I did that they called it B&E - sigh.
Re: (Score:2)
Re:How times have changed. (Score:4, Interesting)
BISHOP: It's a living [imdb.com].
BANK EMPLOYEE: (looks at check, hands it to BISHOP with sympathetic expression) Not a very good one.
Parent
Re:How times have changed. (Score:4, Funny)
Yes, because you got caught. :)
Parent
First 50 seconds on Youtube (Score:5, Informative)
Re:First 50 seconds on Youtube (Score:4, Funny)
Parent
The next new show... (Score:2)
COPS meets Tiger Team. I see a great need.
Re: (Score:2)
Re: (Score:3, Funny)
I thought.... (Score:4, Funny)
Re: (Score:2, Funny)
Penetration testing? (Score:2, Funny)
Re: (Score:2)
Reverse engineering? (Score:5, Funny)
nested humor (Score:5, Funny)
Then I realized that this is Slashdot, and most of us couldn't get laid if it was our jobs. (badum pum. ah-thankyou) Score:2, Funny or Score:2, Insightful.
So uh.... I could totally be that Number 4 inspector!
????
Profit!!
Re:nested humor (Score:5, Funny)
Parent
Ssssshhh!!! (Score:4, Insightful)
If my job is so fucking cool can I have a raise (Score:2)
That's not the IT-reality show *I* want to see... (Score:4, Interesting)
Steve Ballmer, a stack of chairs, and Larry Page. Oh, and a couple of bottles of tequila. And handguns.
Darl McBride, twelve inches of hosepipe and a bottle of fireants - lube will be optional.
Who else wants to see Mark Burnett or Jon de Mol pick this up and run with it?
Boss is in on it (Score:5, Insightful)
Not very surprising, but what does surprise me is that the site owners are letting CourtTV broadcast to the world that their facilities are insecure.
- RG>
Re: (Score:3, Insightful)
The easy way in (Score:4, Funny)
Aha! Out of that list, looks like "going through...Windows" will be the fastest, easiest way to breach security.
Re: (Score:2)
I liked it better (Score:2)
seal team ftw
TV - can it sink any lower (Score:2, Insightful)
May not be too realistic... (Score:2)
Also there are numerous legal issues. For example, instructing people publicly to do this may be illegal in the first place and open you up to liability of somebody uses the methods shown to commit a crime. Also, companies will not agree to have their vulnerabilities shown in public.
I therefore predict that this will only show well-known attack techniques against very common vulnerabilities, but nothing of real infor
This has been up for one hour and one minute... (Score:2)
Cameras would make it easier. . . (Score:5, Insightful)
Ok, airvents yes, but social engineering would probably benefit from these cameras. A secretary might not stop a guy in an IT suit walking out with a computer, but you think he/she'd be more likely to stop a guy carrying out a computer while he's talking to a 3 man camera team with boom microphones etc. "Hey, where are you going with that computer?" "Oh, I'm John from tech co, is having me lead this team from around about IT in the modern world." (turns to camera) "One thing paramount to security is patching your systems, this machine here has been exhibiting bizzare behavior on the network, most likely due to spyware and that is why it has been removed from the network to undergo analysis in the IT lab." Really, I think the hardest part would be getting the crew to go along with whatever quick responses you give to anyone who really questions you. It only takes 1 guy that acts a bit suspicious and unsure to ruin the whole thing.
Damn html. . . (Score:2)
Re: (Score:3, Interesting)
While I'm sure this makes for good TV and all... (Score:3, Insightful)
It actually kind of reminds me of a segment in Weird Al's movie "UHF".... "Today boys and girls, we're going to learn to make PLOO-TOE-NEE-UM. Out of common, household items."
Pretty standard stuff (Score:5, Informative)
Wonder if this is different from what I have alrea (Score:3, Insightful)
Probably this will follow the same format, but include other techniques as well.
What people do not realize is that with the world of spam, people hardly ever target one premisis and then see what the best opportunity is, but rather look for the best opportunity and then see to what premesis it is connected.
Re: (Score:2)
There's a lot more to it than just rummaging through the trash.
When you're going for sensitive information and not just things like parts, common sense dictates that you pick your targets carefully and have a plan for executing the dive (though most of the following would apply to diving for equipment as well):
Knowing which dumpsters and containers are more than likely to have sensitive information.
Knowing how to get in and out of the area without ge
Re:Season 2? (Score:5, Informative)
Parent
Re: (Score:3, Funny)
tazer the geek (Score:3, Funny)
Re:Season 2? (Score:4, Interesting)
Parent
Re: (Score:3, Informative)
Re:Season 2? (Score:4, Insightful)
Parent
Re:Season 2? (Score:5, Interesting)
Before they would do any kind of network scanning, database testing, or even attach one of their laptops to the network, they would require a face-to-face meeting with the entire board of directors and senior management. The meetings would be video taped and documented, and all sides would sign the agreement stating the entire scope of the work, and work wouldn't start until after the video tapes and legal documents were safely stored off-site and reviewed. They required the head of legal council to affirm on video and in a signed document that the company was aware of the testing to be done, and held the pen-test firm free of any liability (I don't remember the exact British legal term they used).
It was good they got this level of protection for us, I've heard many stories from ex-pen testers about being hired by the supposed head of IT, only to discover the CTO was unaware of the agreement. Even having a signed document from someone in the company isn't good enough in the short term if the company turns around and bites you. One friend was driven out of business by court costs despite a signed document, his company just didn't perform due-diligence on the authority of the IT director. Another friend was blamed for hacking and destroying the main database, before they had even arrived on site to plug into the network. While they were still in the IT directors office looking for a working network jack, the DBA accused them of hacking and destroying the main data base. They didn't get paid for that job, they just walked away when the IT director didn't side with them.
I don't do security pen-testing any more, most companies who hire pen-testers do so in place of either writing a policy, or implementing it. They want pen-testers to break things so they can get more budget, and that's it. Even asking up front for the basics like a list of equipment or range of IP addresses shows most companies don't know their own inventory. Pen-testers then become scapegoats, often with associated criminal complaints.
The video clip commercial looks downright scary. This show has the potential to turn public opinion into laws preventing any kind of security consulting, whether it's something simple like a paper audit of a security policy or a complex review of network configuration. You just know this show is edited for maximum Rambo/DieHard/IndianaJones effect because preparation and meetings are boring.
the AC
Parent
Re:Season 2? (Score:4, Funny)
Great for those pesky situations when you need the CEO's password in a hurry - 35 seconds [independent.co.uk] should do it in most cases.
:P
Parent
Re:I can't wait. (Score:5, Informative)
Parent