logo
logo

Stealing, scamming, bluffing: El Reg rides along with pen-testing 'red team hackers'

avatar
James Mcgaugh
img

Broad smiles, good suits and fake IDs test security in new dimensions

Feature "Go to this McDonald's," Chris Gatford told me.

Gatford instructed your reporter to visit the burger barn because he practices a form of penetration testing called "red teaming", wherein consultants attack clients using techniques limited only by their imagination, ingenuity, and bravado.

He wanted me to break the burger-builder to probe my weaknesses before he would let The Register ride along on a red-team raid aimed at breaking into the supposedly secure headquarters of a major property chain worth hundreds of millions of dollars.

I've failed that test but stayed cool, so Gatford decides he's happy to have me along on a red-team raid, if only because red teams seldom face significant resistance.

Sometimes it's high-visibility tradie vests, hard hats, or anything that makes a security tester appear legitimate.

collect
0
avatar
James Mcgaugh
guide
Zupyak is a free B2B community content platform for publishing and discovering stories, software and businesses. Explore and get your content discovered.