Penetration Testing TV Series Coming 209
ChazeFroy writes "CourtTV (TruTV) has a new series starting Dec. 25 at 11 pm called 'Tiger Team.' It follows a group of elite penetration testers hired to test organizations' security using social engineering, wired/wireless penetration testing, and physically defeating security mechanisms (lock picking, dumpster diving, going through air vents/windows). They do all of this while avoiding the organizations' various security defenses as well as law enforcement. The stars of the show also did a radio spot this morning in Denver." Wonder how they socially engineer away the presence of a camera team in the air vents.
Sounds a bit like... (Score:4, Funny)
Re:Sounds a bit like... (Score:5, Funny)
They would have a field day with the title alone
Next up in the cable technology space... (Score:4, Funny)
Sources familiar with the development of the units indicate that the cable integrity is calculated through an internal "fulfillness meter" each box has that is dynamically calibrated to the thrusting force of initial cable insertion by the owner.
The audio tones are said to become louder as the internal weight of the portion of cable inserted decreases on a linear scale.
New owners feel the new design could be a boon to children, who lacking a cohesive concept of proper cable pairment, had difficulty before in detecting the causes of abnormal video problems with the units.
Re: (Score:2)
The audio tones are said to become louder as the internal weight of the portion of cable inserted decreases on a linear scale.
I suppose both pitch and volume modulation go hand in hand. That would result in a richer, more natural sound.
New owners feel the new design could be a boon to children, who lacking a cohesive concept of proper cable pairment, had difficulty before in detecting the causes of abnormal video problems with the units.
You know how funny noise can keep kids amused for hours? The last thing I want is a 4y old playing with home entertainment devices.
If you're antropomorphizing, might as well go all the way. It would be more useful to have a "hey!" sound if you put it in the wrong place, but it's hard to detect before it is fully inserted.
Re: (Score:2)
May the little hamster make your wheel go "squeek! squeek!" now.<VBEG>
Set-top box (Score:5, Funny)
- Mrs. Nesbit
All I have to say is (Score:5, Funny)
Re:All I have to say is (Score:5, Funny)
How times have changed. (Score:5, Funny)
Funny, when I did that they called it B&E - sigh.
Re: (Score:2)
Re: (Score:2)
It just wasn't by the company I visited.
Re:How times have changed. (Score:4, Interesting)
BISHOP: It's a living [imdb.com].
BANK EMPLOYEE: (looks at check, hands it to BISHOP with sympathetic expression) Not a very good one.
Re: (Score:2)
Not being caught by the cops is something that they shouldn't play around with. Even if they aren't using guns in their actions, there have been quite a few instances where someone thought a keychain, flashlight or a pimped out wallet was a gun and the cops opened fired Now with thin
Re:How times have changed. (Score:4, Funny)
Yes, because you got caught. :)
First 50 seconds on Youtube (Score:5, Informative)
Re:First 50 seconds on Youtube (Score:4, Funny)
Re: (Score:2)
The next new show... (Score:2)
COPS meets Tiger Team. I see a great need.
Re: (Score:2)
Re: (Score:3, Funny)
Re: (Score:2)
I kinda doubt it....not many hackers run around in wife beater t-shirts and mullets.
Re: (Score:2)
Re: (Score:2)
We all know they are quasi skateboard punks with the unix bible under their arm and rich kids rebelling from their daddies lack of efectione.
Re: (Score:2)
On the bright side, some of them might actually smell better after dumpster diving.
I thought.... (Score:4, Funny)
Re: (Score:2, Funny)
Re: (Score:2)
Penetration testing? (Score:2, Funny)
Re: (Score:2)
Reverse engineering? (Score:5, Funny)
nested humor (Score:5, Funny)
Then I realized that this is Slashdot, and most of us couldn't get laid if it was our jobs. (badum pum. ah-thankyou) Score:2, Funny or Score:2, Insightful.
So uh.... I could totally be that Number 4 inspector!
????
Profit!!
Re:nested humor (Score:5, Funny)
Number 2 (Score:2)
Ssssshhh!!! (Score:4, Insightful)
Re: (Score:2)
I mean, this is sensationalist TV. I doubt they'll focus on a lot of puzzle work and the long hours of patient observation to find the flaws in their security setup.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
If my job is so fucking cool can I have a raise (Score:2)
Re: (Score:2)
That's not the IT-reality show *I* want to see... (Score:4, Interesting)
Steve Ballmer, a stack of chairs, and Larry Page. Oh, and a couple of bottles of tequila. And handguns.
Darl McBride, twelve inches of hosepipe and a bottle of fireants - lube will be optional.
Who else wants to see Mark Burnett or Jon de Mol pick this up and run with it?
Re:That's not the IT-reality show *I* want to see. (Score:2)
Re:That's not the IT-reality show *I* want to see. (Score:2)
Re: (Score:2)
+4, Insightful !? (Score:2)
Ok, it might have changed but that is what it said just now when I read it. That is funnier than the comment!
Boss is in on it (Score:5, Insightful)
Not very surprising, but what does surprise me is that the site owners are letting CourtTV broadcast to the world that their facilities are insecure.
- RG>
Re: (Score:2)
Re: (Score:3, Insightful)
Re: (Score:2)
Re: (Score:2)
You're right, because there's absolutely no way to edit recorded footage these days. Otherwise, shows like this would be possible without a bunch of fake trickery.
The easy way in (Score:4, Funny)
Aha! Out of that list, looks like "going through...Windows" will be the fastest, easiest way to breach security.
Re: (Score:2)
I liked it better (Score:2)
seal team ftw
TV - can it sink any lower (Score:2, Insightful)
May not be too realistic... (Score:2)
Also there are numerous legal issues. For example, instructing people publicly to do this may be illegal in the first place and open you up to liability of somebody uses the methods shown to commit a crime. Also, companies will not agree to have their vulnerabilities shown in public.
I therefore predict that this will only show well-known attack techniques against very common vulnerabilities, but nothing of real infor
Re: (Score:2)
What you could lose of course is goodwill. I mean, would you trust a company that has been shown on national TV to be insecure? In other words, all those companies that we'd love to see penetrated and shown as insecure would never ever even consider participating in this.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
This has been up for one hour and one minute... (Score:2)
Cameras would make it easier. . . (Score:5, Insightful)
Ok, airvents yes, but social engineering would probably benefit from these cameras. A secretary might not stop a guy in an IT suit walking out with a computer, but you think he/she'd be more likely to stop a guy carrying out a computer while he's talking to a 3 man camera team with boom microphones etc. "Hey, where are you going with that computer?" "Oh, I'm John from tech co, is having me lead this team from around about IT in the modern world." (turns to camera) "One thing paramount to security is patching your systems, this machine here has been exhibiting bizzare behavior on the network, most likely due to spyware and that is why it has been removed from the network to undergo analysis in the IT lab." Really, I think the hardest part would be getting the crew to go along with whatever quick responses you give to anyone who really questions you. It only takes 1 guy that acts a bit suspicious and unsure to ruin the whole thing.
Damn html. . . (Score:2)
Re: (Score:2)
Re: (Score:3, Interesting)
Re: (Score:2)
It takes a thief? (Score:2, Insightful)
While I'm sure this makes for good TV and all... (Score:3, Insightful)
It actually kind of reminds me of a segment in Weird Al's movie "UHF".... "Today boys and girls, we're going to learn to make PLOO-TOE-NEE-UM. Out of common, household items."
Re: (Score:2)
Reminds me of the wonderful nature shows (Score:2, Flamebait)
This show is so obviously faked, or it would be completely boring for the average person to watch. Who wants to watch someone forging credentials and walking around with a clipboard. No way they could do their job with a full camera crew behind them (Well, they could do it once... make fake cr
Re: (Score:2)
>
Don't know how I feel about this (Score:2)
Oh No! (Score:2)
Be more careful, Slashdot.
I aleady posted a comment, now I'm posting another (Score:2)
Pretty standard stuff (Score:5, Informative)
Typical slashdot replies but (Score:2)
TV (Score:2)
Like any "reality show", they show at best a recreation of actual events.
They will (Score:2)
Comment removed (Score:3, Insightful)
Incorrect tag (Score:2)
How to make a camera crew "invisible" (Score:2)
Wonder how they socially engineer away the presence of a camera team in the air vents.
"We're filming here."
Re: (Score:2)
There's a lot more to it than just rummaging through the trash.
When you're going for sensitive information and not just things like parts, common sense dictates that you pick your targets carefully and have a plan for executing the dive (though most of the following would apply to diving for equipment as well):
Knowing which dumpsters and containers are more than likely to have sensitive information.
Knowing how to get in and out of the area without ge
Re: (Score:2)
I think it is a sport here [newsminer.com].
Re:Season 2? (Score:5, Informative)
Re: (Score:3, Funny)
tazer the geek (Score:3, Funny)
Re:Season 2? (Score:4, Interesting)
Re: (Score:3, Informative)
Re:Season 2? (Score:4, Insightful)
Re: (Score:2)
Brian
Re: (Score:2)
Aside: WTF is going on with these HP dropdown flash ads filling up half my screen when I'm trying to type?
Re: (Score:2)
Re: (Score:2)
People who believe that reality shows are not scripted and shot with multiple takes, likely believe pro wrestling is real too.
Have you been following the writer's strike. One of the things the writers want is for their work on reality s
Re: (Score:2)
Penetration testing is a big industry. Lawyers on both sides of the contract OK these things before they get signed.
Re: (Score:2)
In practice... well, you get to see a lot of prisons for a night. How many bosses can be reached to verify those papers during your "work hours" (read: after the usual work hours)?
Re:Season 2? (Score:5, Interesting)
Before they would do any kind of network scanning, database testing, or even attach one of their laptops to the network, they would require a face-to-face meeting with the entire board of directors and senior management. The meetings would be video taped and documented, and all sides would sign the agreement stating the entire scope of the work, and work wouldn't start until after the video tapes and legal documents were safely stored off-site and reviewed. They required the head of legal council to affirm on video and in a signed document that the company was aware of the testing to be done, and held the pen-test firm free of any liability (I don't remember the exact British legal term they used).
It was good they got this level of protection for us, I've heard many stories from ex-pen testers about being hired by the supposed head of IT, only to discover the CTO was unaware of the agreement. Even having a signed document from someone in the company isn't good enough in the short term if the company turns around and bites you. One friend was driven out of business by court costs despite a signed document, his company just didn't perform due-diligence on the authority of the IT director. Another friend was blamed for hacking and destroying the main database, before they had even arrived on site to plug into the network. While they were still in the IT directors office looking for a working network jack, the DBA accused them of hacking and destroying the main data base. They didn't get paid for that job, they just walked away when the IT director didn't side with them.
I don't do security pen-testing any more, most companies who hire pen-testers do so in place of either writing a policy, or implementing it. They want pen-testers to break things so they can get more budget, and that's it. Even asking up front for the basics like a list of equipment or range of IP addresses shows most companies don't know their own inventory. Pen-testers then become scapegoats, often with associated criminal complaints.
The video clip commercial looks downright scary. This show has the potential to turn public opinion into laws preventing any kind of security consulting, whether it's something simple like a paper audit of a security policy or a complex review of network configuration. You just know this show is edited for maximum Rambo/DieHard/IndianaJones effect because preparation and meetings are boring.
the AC
Re: (Score:2)
Re:Season 2? (Score:4, Funny)
Great for those pesky situations when you need the CEO's password in a hurry - 35 seconds [independent.co.uk] should do it in most cases.
:P
Re:I can't wait. (Score:5, Informative)
Re: (Score:2)
Re: (Score:2)
Not quite, it was an anagram of "Too many secrets".
But yes, it was SETEC Astronomy