Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> "Problem #0: Security did not search his bag on entry, thus allowing him to bring rapelling equipment to a software sales meeting."

Realistically, what sort of security guard would actually stop him when they found the climbing gear? Unless they receive some special training, they'd be looking for weapons. The climbing gear would probably raise their eyebrows, but could easily be explained away ("I'm going to my climbing gym later this evening").

Relying on security guards to consider the possibility that their guest might be planning on repelling from the roof down into a secured floor doesn't seem practical.



The security guards were brutal at Intel in the 80's. You had to sign a waiver that gave Intel permission to keep anything you were carrying on your way out. They did it too (confiscate things they felt shouldn't leave the building). Most people were smart and just left everything at the desk.

That said, these days with phones and laptops being nearly attached to the wrists of folks it would be a very hard policy to enforce. Google's solution was conference rooms that were outside the security perimeter and had bathrooms outside the security perimeter as well. That worked pretty well and would have defeated this particular attack.


I lived in a different world for so long that my default behavior is to make sure my phone and laptop are in my car when I go into someone's building.

Larger defense contractor facilities have those types of conference rooms as well.


Even that could be accounted for. If you have 'questionable' items, security could ask that you leave them at the front desk, and you can pick them up on your way out.


I'd deliver that gear to the roof by quadcopter the night before.


Simple solution to a simple problem.


Problem #5


At this point they'd have to start worrying about bulky clothing as well. It was hot outside in this instance, but in cooler weather/climates you'd need to go full TSA-mode on everybody entering the building.

That's practical for some installations, but not many.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: