Explore a thought-provoking conference talk on information security and social engineering tactics. Delve into topics such as red team operations, employee empowerment, and insider threats. Learn about real-world security fails, including CIA lobby incidents and the importance of proper identification procedures. Discover the challenges of dual-factor authentication and password sweeps. Gain insights on leveraging social media profiles for security purposes and understanding the impact of phishing attacks. Examine the role of metrics in security and the concept of power users. This 53-minute presentation from ShowMeCon 2019 offers valuable lessons for security professionals and enthusiasts alike.
Overview
Syllabus
Intro
I PWN thee
Red Teams
Information Security
Employee Empowerment
CIA Lobby
Security Fails
Dual Factor Authentication
Security Procedures
Insider Threats
The Fail Burrito
How to ask for identification
Password sweeps
Social media profile
Phishing
Metrics
Power Users