door locks: locks are bad, and doors are awful
door locks: locks are bad, and doors are awful
Sure, and how much time do you have, alone in someone else's office, sitting down at their desk to steal info?
First part of the article is about having been shown around by "Mary" and her boss, and then being with other employees, when did the pentester have the time to access network, lockpick doors, etc.?
Just because she skipped over some unimportant parts of the story doesn't mean she didn't have plenty of time after being shown around the building to accomplish her objectives. She does address this, too:
> I took FOREVER looking around this office space, and eventually they said their goodbyes because they had to go back to work. They had a strict policy of escorting visitors. But I had been seen walking around with trusted insiders so no one questioned me.
> I was free to take my time. I made myself at home. My main objective at this site was to weasel my way into private corner offices.
She didn't skip anything, the quote is this one, however (earlier in the article):
>I was given complete and unaccompanied access to the facility where I stayed for several hours.
That is "building #1", the parts you quoted are related to "building #2".