Tiger Team : Court TV on Dec 25th

[Chris]

Re: Tiger Team : Court TV on Dec 25th

I just watched both episodes and I thought they were great. Especially the second (Jason's of Beverly Hills).

xor, I can't agree 100% with you. First, gloves. Who cares, they aren't trying to avoid an investigation. They are going to walk right back in and say 'we are the guys that broke in' so what's the point of trying to obscure your fingerprints?

Next, the computer stuff. Pyr0 can correct me if I am wrong, but my guess is that they provide a complete report to the facility afterwards. This would include information such as letting them know what they collected and the ramifications of having collected that information. In this case they were only looking to prove that they were in the facility and had the ability to remove inventory. If they had actually stolen the vehicle and had essentially removed all trace of the VIN it would be time consuming at best, difficult at worst for the dealership to recover the VIN so that it could be reported to the police. By that time, a real thief could have removed/stripped the VIN. These are the types of things that don't get shown in a show like this, but would be valuable information for the actual after action report that the client receives.
Finally, we are seeing weeks of planning and hours of actual work condensed into 24 minutes. You aren't going to be able to show everything that was done/had to be accomplished for the penetration to succeed.

Again, Pyr0 can let us know if I am off base there. Overall I thought both shows were great and hope more get produced.

[xor]

Re: Tiger Team : Court TV on Dec 25th

I liked the 2nd show better. You are right it is very condensed. A hour would be better to fill in more details. A place like the jewelry store should have been using token & knowledge based access; card plus keypad. The safe should also be a combination of biometric plus keypad. In addition to 24/7 external human video monitoring. Both places should be using some type of off sight document manage system like Iron Mountain that included digitization and encryption of all paper documents.

xor

Maybe they can do a longer web version with more details. I would watch it.

Actually keeping the car and waiting to see if they noticed it mite have been a better test of staff and management alertness. If they get in they should get to keep what items the business offers. :)

[jur1st]

Re: Tiger Team : Court TV on Dec 25th

I've heard rumblings of the show for quite some time now and I must say that I was impressed. I watched the show with some friends who knew nothing about it and they loved every minute of it and wanted to know when more would be coming out.

One thing that they seemed to get right was showing how much information could be taken outside of simply cars or jewels. Many small businesses don't even grasp what information they have on hand, let alone how easy it would be to take without their knowledge.

It's easy to quip about security from a couple thousand miles away but when you meet with a client who is trying to make payroll month to month off site document management is well beyond the realm of their comprehension.

So many organizations lack funds to implement advanced security measures, let alone hire a pen-testing team to conduct an audit. If most organizations just took a couple of tips from either of these episodes they would be much better off.

Once again, great stuff and hopefully future episodes will extend to a full hour.

[TheCotMan]

Re: Tiger Team : Court TV on Dec 25th

Heh-heh. Pretty funny in several spots...

Note the Tee Shirt, black with white letters: "IamInfoSecSellout"
Nice. That had to be intentional. :-D

Notice the red-shirt with backpack, radio and gear (Luke)? Does that style of clothing remind you of any group of people at Defcon?
Heh-heh. (Probably not intentional, but it would be funny if it was.)

There are some gaps that are probably not interesting enough for mainstream consumption...
For example, how was access gained to the side-stairwell? (Did I miss that part?)
I remember the audit of the elevator access, but not the side stairwell.
Perhaps information like this was left out if it was not something that was in the purview of the company that paid for the service, and oustanding security issues are not supposed to be broadcast. (This would make sense, as any known vulnerabilities that are broadcast would devalue the service they perform, and may invalidate insurance policies.)

Now I am wondering, as a child, how many of these people saw, "Sneakers," and said, "that's what I want to be when I grow up."
Next questions, which one of them would be Mother, and who would be Marty?

Anyway, I was entertained. If more [episodes] were made, I would watch them.

[Pyr0]

Re: Tiger Team : Court TV on Dec 25th

I am going to read through all of these and will post responses over the next couple of days. For those of you commenting about details please remember two things:

1. They filmed us for over 96 hours to create a 22 min. show. We are on camera the entire time we did these jobs. There are tons of details that are lost in translation, and we also don't have any control over the editing process, commentary, or music :) we only get to do a quick tech review to make sure they haven't botched things up when they do the edit.
(BTW: I felt that they did a good job editing overall - and most of my issues were related to the voice over / commentary)

2. This show has to hit a very wide audience, and trust me my producer is WAY TIRED of hearing me say "SHOW MORE TECH". Your comments are awesome keep them coming and please be sure to CC' (email) Court TV / TruTV to let them know what you think.

To answer a few of the questions above:
We do deliver a detailed report for every contract that we complete, this write up includes very detailed listings of all activities performed and provides both a gap and risk analysis related to the findings. The report is filled with risk mitigation advice and recommendations. A majority of the jobs we do are done because companies have business or legal requirements (HIPAA/SOX/GLBA/ISO) to ensure that they are properly protecting themselves and their clients against the risks that threaten their business. Hacking, social engineering, and physical are maybe 20% of what goes on during a full risk assessment. And as you can imagine, majority of our clients (GOV, MIL, F100) won't ever been seen on tv or they will be censored to a point were you won't be able to tell where we are or who we are working with.

Right now everything is still in the air so your support is needed and appreciated.

One last thing - I don't log in as much as I should here so feel free to contact me at Pyr0@Pyr0.net

[DJ Jackalope]

Re: Tiger Team : Court TV on Dec 25th

Hey wait, i see the companion book to Tiger Team here... The Finished Reports.

[TheCotMan]

Re: Tiger Team : Court TV on Dec 25th

I am going to read through all of these and will post responses over the next couple of days.

Excellent.

...please be sure to CC' (email) Court TV / TruTV to let them know what you think.

Found an online submission form:
Form to Mail Gateway (guessing)
I left them a comment, using, "mys gud unglish scrills," (my good English skills) to politely ask for for more episodes.

One last thing - I don't log in as much as I should here so feel free to contact me at Pyr0@Pyr0.net

Once DT sets up the new mail server, you can, "subscribe to a thread," and then get an email message the first time someone replies to each subscribed thread, until your next visit. You can also enable (if not enabled right now) an email trigger to send email to your forum-registered email address if you get a Forum PM.

Forum users: I would not consider a separate thread per episode to be spamming either-- it would help to organize thoughts specific to each show, and not lead to one big thread for everything. If I see multiple threads per episode, I'll probably just merge them per episode, so it is easier for users. (We have Whitesword announcements limited to one thread each. If discussion about that increased, we would likely do the same there, and break them into one thread per episode too.)

[DaKahuna]

Re: Tiger Team : Court TV on Dec 25th

I enjoyed both episodes and plan to show one or both at the next annual IT Security Summit that my company has every year. In the mean time, I am going to send all the members of the IT Security Advisory Council links to trailers and on-line versions of the episodes so they can watch at home, in case they missed the original airing. (we restrict access to external streaming media and don't believe I have permission to host copies on an internal media server).

Pyro: Good job .. I especially like the dropping of the backdoor thorough the USB drive. Something that I keep highlighting to folks - be very careful what you take and from whom.

[DJ Jackalope]

Re: Tiger Team : Court TV on Dec 25th

Pyro: Good job .. I especially like the dropping of the backdoor thorough the USB drive.

I laugh so hard because Lizzie says, "THANK YOU!" after she does it.


Hmmmm sounds like there is a possiblity that Tiger Team got picked up:

http://weblog.infoworld.com/zeroday/...urity_goe.html

[shrdlu]

Re: Tiger Team : Court TV on Dec 25th

Pyro: Good job .. I especially like the dropping of the backdoor thorough the USB drive. Something that I keep highlighting to folks - be very careful what you take and from whom.

I loved it. Every single second. My personal favorite moment was "Wait...you cloned my card?"

The whole thing brought back memories. It almost made me sorry to be retired. Almost. I'm off now, to brave the the CourtTV Message Boards (thanks, Cot, for posting the link). I need more Tiger Team episodes.

[TheCotMan]

Re: Tiger Team : Court TV on Dec 25th

I loved it. Every single second. My personal favorite moment was "Wait...you cloned my card?"

The whole thing brought back memories. It almost made me sorry to be retired. Almost. I'm off now, to brave the the CourtTV Message Boards (thanks, Cot, for posting the link). I need more Tiger Team episodes.

The link is misleading. It reads like a forum, but acts like a form to mail gateway.
(Sorry, if I misrepresented that.)
I did find the real boards for courttv:

http://boards.courttv.com/

[DJ Jackalope]

Re: Tiger Team : Court TV on Dec 25th

The link is misleading. It reads like a forum, but acts like a form to mail gateway.
(Sorry, if I misrepresented that.)

That's it, you're fired, AND you have a blog entry.

[TheCotMan]

Re: Tiger Team : Court TV on Dec 25th

That's it, you're fired,...

Heh-Heh, hrm. heh-heh, Whoah!
Fire-d! FIRE-D!, FIRE-D!!!
That is like cool and stuff!
BurgerWorld sucks and stuff anyway.

AND you have a blog entry.

Yeah, I know. I had to test the new blog software that DT bought for us. I thought about auto-repeating the same content day after day, but that was too much work. ;-)

OB: CourtTV forums, appear to use a manual user confirmation, similar to ours, but instead require mods to add your account.
Also, http://boards.trutv.com/ will probably be the TruTV board URL. Right now, htauth is requested, but the dialog says is it coming soon.

[xor]

Re: Tiger Team : Court TV on Dec 25th

Hey Cotman just get me to post a bunch of times and you won't be able to tell the difference :). I hate typos, I am the typo king. :)

xor

[TheCotMan]

Re: Tiger Team : Court TV on Dec 25th

On topic, related to this topic:
Is Nicolas Cage a major Hollywood star?
(Bleeps can be fun.)

Hey Cotman just get me to post a bunch of times and you won't be able to tell the difference :). I hate typos, I am the typo king. :)

xor

I often spot my own typos when I re-read my posts later, and then I edit them away.

(Hint: The edit button persists for 24 hours after a post, unless a thread is closed, or the forum is locked or the account is no longer available.)