Socially Engineering Myself into High Security Facilities
In my office complex, we have a bunch of security guards who _check_ badges of people who enter the building (My building houses about 8-9 companies). If you don&#x27;t have a badge then the guard calls the office you claim to be part of to ensure you have access, and then issues a temp badge.<p>A couple months ago, I forgot my badge at home, but didn&#x27;t want to go through the hassle of getting a temp badge, so I flashed my driver&#x27;s license at the guard (which is roughly the same size as my ID badge) and he simply waved me through.<p>I told my colleagues this, and since then we have a silly game where we try to get in using ridiculous cards. Most recently, we have people who have flashed blood donation cards (a card that acknowledges that you donated blood on so and so date), a credit card and a folded bookmark and successfully gotten into the complex.<p>While this is a running joke, really goes to show how lax manual security can be (Especially because once you are on my floor, you can easily tailgate your way into my office).<p>TL;DR Most of our security systems work on implicit trust more than anything else.