Hacker News Reader

Comment by patio11 | Hacker News Reader

Getting into the building is a simple matter of putting on a business suit and tailgating after an employee. Every company who has ever had a security meeting has a rule against tailgating... and it is observed precisely nowhere.

After you're in, just look like you're supposed to be there. "Excuse me, I'm here to have a meeting with Tim and I'm in a bit of a rush. I really hate to ask this but I left my presentation at home and I don't know if the presentation laptop will have Internet: will you mind if I quick use your computer to go to Gmail and download it to my USB key?"

Relatedly, a white man in a business suit could probably get about as far as the door of the Japanese equivalent of the Oval Office before getting questioned for the first time. I am not confident that he would be stopped.

View on HN

>Getting into the building is a simple matter of putting on a business suit and tailgating after an employee.

Well I've only worked in one "corporate" environment, UK gov. There was no chance to get in without a pass, despite seeing the same security guy every day for 3 years one would still get stopped. All passes were checked, even coming back from the canteen. Temporary passes required a manager to walk to the entrance and sign you in on a day pass. Public access areas were separate areas without connection to the IT network, leaving your computer unlocked when you're away from your desk was not allowed - like I said this was the lowest level security.

I still think that getting computer info via social engineering would be quite easy over the phone (at least when I was there). But we did get new SIP style phones just before I left and I think caller display would rule out a lot of chances for attacks.

There was a 1st level clearance area with a daily-code door, clearance checks for everyone (including the tea-trolley pusher) security cameras in and out and a receptionist/security person on duty opposite the door.

What you're describing appears to be that places without security protocols don't have security.

Not only that, holding doors open for people is a well established custom in many countries and taken to be the polite thing to do. And of course, no 'bad' person ever wore a suit.

The two media companies I've worked for (Fairfax and News) both have manned security gates that will snap shut if someone tries to tailgate. They seem to work quite well; I've been caught by them when going through after another person too quickly.

Reply on news.ycombinator.com