1.7M views · Feb 13, 2012 · 40:47 · 2 HN recommenders · 5 mentions · discussed 2017–2021
Jayson E. Street's DEF CON 19 talk shows photos from real security engagements where he was already inside client facilities, illustrating how social engineering and physical intrusion can cause huge losses. For each attack he also explains what defenses would have stopped him.
Why Hacker News points people here: It is a repeat pick in 'favorite tech talk' threads as a funny, eye-opening look at how easily physical security and people can be bypassed.
“The absolute funniest tech talk I've seen”HN comment, 2021
“Jayson E. Street: Steal Everything, Kill Everyone, Cause Total Financial Ruin!”
Listed as a favorite tech talk
Jayson E. Street: Steal Everything, Kill Everyone, Cause Total Financial Ruin! this video Van Albert and Banks: Looping Surveillance Cameras through Live Editing link Ken Thompson: Reflections on Trusting Trust link And of course, Simple Made Easy, Wat, etc.
“The absolute funniest tech talk I've seen”
Funniest tech talk the commenter has seen
The absolute funniest tech talk I've seen "Steal Everything, Kill Everyone, Cause Total Financial Ruin!:" this video
“refers to as the "jedi wave”
Talk that names the jedi wave technique
This something that the speaker in the famous "steal everything, kill everyone..." [1] defcon talk refers to as the "jedi wave" and makes similar remarks about. I think it's a great name. [1] this video
“you see red team pros talk about how the whole apparatus melts before the gentlest of social engineering”
Red team pros show security melting under social engineering
All of that sounds impressive, until you see red team pros talk about how the whole apparatus melts before the gentlest of social engineering- this video I'd also be concerned with leaking of mass amounts of records at once due to a security lapse on servers where it's a bit easier for grossly inadequate protections to lurk unnoticed- link I think I've read that Google doesn't even store the original recordings, but distorts them randomly to make them unrecognizable but still intelligible by their models. That seems like a pretty reasonable way to protect people, provided they're informed and there's no link back to the original account.
Example of pen testing physical company security
They do do that, if I understand correctly. Penetration testing handles the physical security of the company. [DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin! ]( this video ) Social Engineering [Hacking the Wetware: Compromising Companies with Social Engineering]( link )
