Social Engineering via Video

by Bernz

We live in a world where video and film cameras create a certain attitude.

Watch the news one day.  A camera and a reporter shoot a story.  Every time a pedestrian walks by, they turn to the camera, make a stupid face, and grin.  They are happy for those three seconds of background exposure.  To me, this is an idiotic attitude, but it also represents a tear that can be converted into a chasm of a security hole.  

If someone told you sincerely, "I'm gonna put you in a movie," you'd be happy.  You'd get your big dose of mass communication fame and fortune.  Actually, we probably would think he's an undercover cop and move out of state.  But we're a weird bunch and we can't assume everyone's a paranoid little f*ck.

What this brings me to is that almost everyone in the world loves the camera.  This is a security flaw, believe it or not, that can be exploited to a great degree.

What Do You Need?

First things first.  You need a camera.

I would prefer Hi8, but an old 8 mm would do just fine.  It must have sound and a relatively clear picture.  Lots of videotape and batteries are good.  You'll also want a boom mic and a friend to carry it for you.  Like all social engineering, professional appearance is what matters most of all.

Next, you need credentials.  You can't just walk into your mark's office and say "I'm gonna take video."  The fact that you have a camera and a sound guy is great and lends quite a bit to your appearance, but you need an edge.  Hence, the film student.  Almost every state has a college with film students in it.  Finger accounts at these colleges.  A great majority of colleges use student ID numbers for logins.  Use a desktop publisher and whip up some fake IDs on card stock.  If you can't do this on your own, someday I'll get off my ass and make templates.  Make sure the names correspond to your sex.  If you've got a beard and your "name" is Jennifer, I don't think you'll be taken seriously.

Entrance

You have your alibi for your appearance and your equipment.

Go to the front office and talk to whoever it is that lets you in.  Point the camera at the security guy.  Tell him your film students or even better, news interns, shooting documentary footage on local (fill in company or governmental position here).  Security guards are not noted for their intelligence, nor are they noted for good pay and fun lives.  Any chance to be on American or even (name a county here) television will make them cooperative.  They'll probably give you clearance if they can.  If you have to keep up subterfuge to get in, do it.  I can't instruct you on that as it differs from case to case.

A boss might have to confirm this.  Even if it is a government place, chances are it's a Dilbert-esque environment.  The bosses are moronic and the workers are dim and without energy.  The boss will let you in to pro-mote his office (and himself).  Anyone in any corporate structure desires to advance much further.  A good report on local news can definitely help that out.  That one-eyed god on your shoulder can enlighten any environment though.  Cameras bring an odd sense of wonderment to those being filmed.

If you're going to use the news scam, wear your fake IDs on the outside, like a real press person.