Re:Coalfire Comments on Penetration Tests for Iowa Judicial ...
by mike_d on Thursday September 19, 2019 @01:05PM
(#21018205)
I know physical testers who will carry a fake "get out of jail free card" that lists their own people as the point-of-contact so they can highlight the lack of verification as a weakness. If it does get verified they have a "backup" real one.
It is possible they attempted this and the police were none too happy being lied to.
Re:Coalfire Comments on Penetration Tests for Iowa Judicial ...
by danShumway on Thursday September 19, 2019 @01:17PM
(#21018340)
It's not possible in this case, unless the news source above is misreporting the story.
> "I advised them that this building belonged to the taxpayers of Dallas County and the State had no authority to authorize a break-in of this building," Leonard wrote in the email.
> Leonard wrote that he then called the state employee to tell him his contractors had been arrested and that he didn't have the authority to authorize this.
If Leonard had called their point-of-contact and it had been fake, it would be weird for him not to lead with that detail.
Re:Coalfire Comments on Penetration Tests for Iowa Judicial ...
by malka on Thursday September 19, 2019 @12:56PM
(#21018095)
Unsurprisingly, cops are assholes
Re:Coalfire Comments on Penetration Tests for Iowa Judicial ...
by mxuribe on Thursday September 19, 2019 @01:05PM
(#21018201)
It isn't only that - there are both good and a$$hole cops...But, it seems in the U.S. there isn't a consistent governance of law enforcement across all levels of government, nor across the whole geography of the nation...leading to some (many?) cops abusing their power.
Re:Coalfire Comments on Penetration Tests for Iowa Judicial ...
by kerng on Thursday September 19, 2019 @12:57PM
(#21018107)
It's not good enough to have an authorization- you need to have authorization from the proper stakeholder!
That is the dispute here.
Re:Coalfire Comments on Penetration Tests for Iowa Judicial ...
by walshemj on Thursday September 19, 2019 @04:14PM
(#21020258)
The downside of having such balkanised (in that some many individual entities have their own police force) police service I suspect.
Re:Coalfire Comments on Penetration Tests for Iowa Judicial ...
by metalliqaz on Thursday September 19, 2019 @12:57PM
(#21018105)
There is going to be a lawsuit and Iowa is going to settle.
When this story first broke, there was speculation that, "this is why you carry a get out of jail free card." But if this story is true, the testers did everything right, and the deputy just decided to jail them anyway.