
Broad smiles, good suits and fake IDs test security in new dimensions
Feature "Go to this McDonald's," Chris Gatford told me.
Gatford instructed your reporter to visit the burger barn because he practices a form of penetration testing called "red teaming", wherein consultants attack clients using techniques limited only by their imagination, ingenuity, and bravado.
He wanted me to break the burger-builder to probe my weaknesses before he would let The Register ride along on a red-team raid aimed at breaking into the supposedly secure headquarters of a major property chain worth hundreds of millions of dollars.
I've failed that test but stayed cool, so Gatford decides he's happy to have me along on a red-team raid, if only because red teams seldom face significant resistance.
Sometimes it's high-visibility tradie vests, hard hats, or anything that makes a security tester appear legitimate.