This is cache of http://feeds.feedburner.com/~r/GrumpySecurityGuy/~3/206755218/. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.
My Review of Tiger Team
2007-12-27 00:27:16 by Bill in Grumpy Security Guy
 

That was not what I expected but that is mostly due to my definition of penetration test being way too narrow.  Tiger Team ends up being a “It Takes a Thief” knockoff with a tech twist. In my book that makes for some good TV. I really enjoy “It Takes a Thief” which is basically two reformed thieves breaking into peoples houses. I always thought it would be cool to do that with businesses, since really most homes have pretty weak defenses. Clearly it was a great idea since that is what Tiger Team does.

If you are looking for the latest cutting edge computer hacking techniques you are not going to get them in this show. The computer angle is only mentioned in passing and in very general terms. This makes sense because most people watching this are not going to understand or even care. They do use some good tech hacks though. They plant a remote control trojan in Episode 1 and in Episode 2 use a wireless cam and get into the customers servers by posing as PC repair people.

Otherwise it is a throughly entertaining lesson in the frailties of physical security. They break into some insanely security conscious places ( a super high end jewelry store and a rare auto dealership) and make out with the goods. This is a real wakeup call for everyone and pretty much mirrors what I said in my pen test vs assessment post.  Not many organizations can withstand a  direct focused attack, either physical or electronic on there resources.

I hope to see some more of these, they are a blast to watch.

Post from: Grumpy Security Guy

My Review of Tiger Team

 
 
 
 
 
 
TOP SEARCH
Expand / MinimizeClose Widget
  •  
RECENT SEARCH
Expand / Minimize
  •  
RELATED VIDEO
Expand / Minimize
SecurityRatty FAQ
Sergey Zarubin, 31yo
CISSP, CCSP
Moscow, Russia