A hacker's mom broke into a prison and the warden's computer

Post by jessaustin » Thu, Feb 27, 2020, 11:01 PM UTC

throwaway3157 wrote: post #78

jessaustin wrote: post #68

Earlier quoted context omitted.

That wasn't a good look for their employer, "Coalfire", and not only because no one answered when they got their jail phone call. How did Coalfire not notice that the target was owned by a completely different entity than the organization that signed the contract?

> How did Coalfire not notice that the target was owned by a completely different entity than the organization that signed the contract? The courthouse was owned by who? The sherriffs? I thought the ownership was okay, but it was the over-eager law enforcement that refused to budge because they weren't informed.

Post by aaomidi » Thu, Feb 27, 2020, 11:33 PM UTC

milesvp wrote: post #28

aaomidi wrote: post #13

Earlier quoted context omitted.

Is it wrong that I find it a terrible thing that people aren't allowed computers with internet or cellphones in prison? How do we expect people to join back to society when they can't use literally the number one most important thing? Maybe give them phones with no cameras and monitoring of use, but just nothing seems very inhumane.

I saw a youtube video recently about the extensive use of cell phones to play old school runescape. Like it’s everywhere in every prison in the last couple of years. People not only play it but also use it’s currency for real world trading. Apparently violent behavior is down wherever people are playing. I’d love to find corroborating evidence for this, because I find it completely facinating.

Post by sybarita » Fri, Feb 28, 2020, 12:07 AM UTC

prostheticvamp wrote: post #10

bilekas wrote: post #9

This is a great article, and one of the obvious but brilliant advice from the write up is : > Don’t blindly assume. I know I would be way more willing to allow a pleasant lady of mature mothering age and demeanor than a middle aged guy. Its the stereotypes we subconsciously build up unfortunately.

In the same vein: It’s not young thugs that come in to medical centers trying to score painkillers; it’s middle-aged suburban moms. The former know where to buy on the street. It’s the latter that think of trying to lie to their doc. But in practice we tend to be more suspicious of the former.

Post by throwaway3157 » Fri, Feb 28, 2020, 2:02 AM UTC

jessaustin wrote: post #81

throwaway3157 wrote: post #78

Earlier quoted context omitted.

> How did Coalfire not notice that the target was owned by a completely different entity than the organization that signed the contract? The courthouse was owned by who? The sherriffs? I thought the ownership was okay, but it was the over-eager law enforcement that refused to budge because they weren't informed.

They had a contract with some office in the state government. The courthouse is owned by a county, as most courthouses in USA are. Later the fig-leaf of "they use a state-administrated computer program there" was constructed so as to limit the injustice inflicted on two humans, but county buildings are no more owned by the state than state buildings are owned by the feds. And yes, stipulated, the sheriff is an asshol…

Post by jcims » Fri, Feb 28, 2020, 4:36 AM UTC

vsareto wrote: post #79

jcims wrote: post #74

Earlier quoted context omitted.

I blame it on the security industry because we are terrible at communicating, but your idea of how this works isn't aligned with reality. Think of it as a dumbed down version of the current staffing situation with healthcare. We have a huge talent gap, but that doesn't mean we put fresh grads to work on surgery. Pen tests and red teaming are about both skills and decision making, both of which have very high potentia…

OSCP has too high of a fail rate to only demonstrate very basic skills, it's a bit more than that (if so, that puts CISSP, CEH, etc. way futher down yet you see those as job requirements all the time). There are plenty of people without it and employed still doing pentesting. This was my reality, I don't know how actually going through that situation qualifies it as anything but reality. This is another thing: people…