12 karma · joined June 4, 2020
>>Life is too short to waste time fighting against yourself
Str8 facts
These buildings also change hands, whether between family members, or just outright sales, more so if a unit in the building is currently for sale, someone could access the building by showing interest, not even with the real estate agent but just telling the doorman you have a viewing. You wouldn’t have to hack the elevator at all and I doubt this perpetrator did. It would take a pretty vigilant doorman to stop this/determine the identity and purpose of all visitors.
Most of the doormen are there to provide additional services to the residents, like having a cab waiting when they are on their way out and other small conveniences, not so much as gate keepers especially since 99.99% of the people entering are no cause for concern.
So the issue is likely a combination of insufficient training for staff and dated methods for verification (for example, allowing people to verify via a PIN number over the phone, but not limiting the number of attempts before being locked out of the account, allowing brute force to be a viable (and successful) attack method.
Some attackers have taken advantage of the fact that some providers don’t have 24/7 support (don’t have the reference just remember reading about it being used to hack prominent crypto figures in social media, T mobile specifically if I can recall correctly) so they start the attack just before support hours end, giving them access to the account and then the down time to execute the attack (usually non-business hours) without the victim being able to do anything about it since they can’t get a hold of anyone once they notice they’ve been compromised (as the physical stores are closed and phone support unavailable until next morning). That is if they even notice as they could be asleep.
Proceeds to articulate how to meditate successfully and the benefits of doing so(albeit avoiding over-use of the word itself), then suggests you download an app ( by an app I mean their app) to facilitate this
Hm
[0] https://www.vera.org/publications/price-of-prisons-2015-stat...
That being said if you don’t feel like your skills are being acknowledged, you’re not learning new skills while on the job (unlikely in a start up but possible) or that the leap to the next step seems to great at your current job, you could just leave when you do feel ready and have learned enough, seeking your next job at the next level above your current. In the interim try to work with your engineering manager As much as possible to learn from them.
I guess they can’t figure out how to charge enterprise clients more than the common folk or stand-alone security researchers not backed by a company. This also has the unintended consequence(or perhaps intended, since it is the source of the content people are paying for) of concealing the behavior of malicious actors. Either way, I can almost say with certainty, that I don’t think people were upgrading to Pro for any of their other features.