Coalfire Comments on Penetration Tests for Iowa Judicial Branch

Re:Coalfire Comments on Penetration Tests for Iowa Judicial ... by mike_d on Thursday September 19, 2019 @01:05PM (#21018205)

I know physical testers who will carry a fake "get out of jail free card" that lists their own people as the point-of-contact so they can highlight the lack of verification as a weakness. If it does get verified they have a "backup" real one.

It is possible they attempted this and the police were none too happy being lied to.

[ Parent | on HN ]

Re:Coalfire Comments on Penetration Tests for Iowa Judicial ... by danShumway on Thursday September 19, 2019 @01:17PM (#21018340)

It's not possible in this case, unless the news source above is misreporting the story.

> "I advised them that this building belonged to the taxpayers of Dallas County and the State had no authority to authorize a break-in of this building," Leonard wrote in the email.

> Leonard wrote that he then called the state employee to tell him his contractors had been arrested and that he didn't have the authority to authorize this.

If Leonard had called their point-of-contact and it had been fake, it would be weird for him not to lead with that detail.

[ Parent | on HN ]