Archive for the Physical Security category

July 8th, 2008

Door “Fail” from FailBlog

Posted in Physical Security by Johnny

Door Fail

Thanks for the link, CP!

March 5th, 2008

Exposed keys… as risky as exposed badges

Posted in Physical Security by deviant

Johnny’s skill in turning quick photographs into replicated credentials is well-known in the hacker world. Through covert tactics or good old social engineering, he can make a snapshot of someone’s badge and later replicate a duplicate suitable for getting him past many of the initial layers of a facility’s security.

The exact same principle can be applied, in fact, with locks and keys. Imagine this… you’re near someone else’s desk and you see their keys laying in plain view. A camera-equipped mobile phone and some pocket change is often all you need to completely compromise physical security in a big way. Believe it or not, the loose tolerances in many locks make it possible to generate copies of keys from blurry, low-res images.

A typical file cabinet

You spot a keyring laying on a desk. Dig a quarter out of your pocket and place it next to the keys. Using nothing more than a cell phone camera, snap a picture of these items. There are plenty of ways to make that action next to unnoticeable. Even leaving the quarter there afterwards may not raise much suspicion. Someone may pocket it without batting an eye.

Keys laying exposed

More