News for hackers. Stuff that matters.

A comment on Hackers used Slack to break into EA Games. Parent comment

Re:Hackers used Slack to break into EA Games by throwawayboise on Friday June 11, 2021 @04:07PM (#27477827)
The one time I locked myself out hard at work and had to go "in person" for a password reset, I had to show ID even when the person who was resetting my password knew me by sight. And this was well over a decade ago.

And in all but the smallest companies I've worked for, you needed a card swipe at the door (or an escort) to pass from public to internal areas.

This is just really, really basic physical security stuff.

[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by maccard on Friday June 11, 2021 @04:34PM (#27478128)
That might be true at some companies, but has not been my experience at 3 different companies.

> And in all but the smallest companies I've worked for, you needed a card swipe at the door (or an escort) to pass from public to internal areas.

And once you're past the barrier of those internal areas, you're unlikely to be questioned in all but the most strictly controlled places.

[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by throwawayboise on Friday June 11, 2021 @05:02PM (#27478445)
In my case, everyone is supposed to be visibly wearing their company ID, on a necklace/lanyard or something like that. However even if challenged without one, "oh sorry, I left my ID at my desk" is likely to work. However everyone but brand-new employees is a least vaguely familiar to everyone else, so I'm not sure how easily a complete stranger would be able to move around.
[ Parent | on HN ]