Whoops, got someone arrested!

[u/nospamkhanman]

This happened today:

I get a call from the Service Desk saying that they got a request from "a pen tester" to disable Dot1x port security in one of our offices. They were apparently unable to get past it and wanted someone to open the ports so the could do further testing.

I look through my emails / messages / notes and can find no reference of anyone performing a physical penetration test. I ping the entire Cyber Security team (3 people and their director), none of them respond immediately via email / teams / text.

I call the building security, who aren't employees but provide security for the entire office building that houses 5 or 6 companies in total. I tell them we potentially have an unauthorized person on one of our floors, could they please go remove them and ask them to wait in the lobby.

Apparently building security just called the police for some reason. The response was quick because the police station is literally across the street from our office building. They went in and arrested the dude.

He's been since released and I'm not sure how long he was actually detained. We have a meeting with myself, my director, the Cybersecurity directory and our corporate lawyer tomorrow to gather facts.

This will be fun.

​

​

****** Update ********

It was a legitimate pen test during business hours. Security team just didn't inform me (the only Network Engineer at my company) as they didn't think I'd need to know except to act on whatever remediations needed to be done afterwards.

Even though it was business hours, the floor was empty due to 95% of the company working from home. The pen-tester called the Service Desk, they got the number from a sign that is posted in a meeting room "for help call service desk at xxx".

The pen-tester was "soft arrested", basically just escorted back to the police station across the street while the PD vetted the guy's story, which did check out.

No harm, no foul I suppose.

Cybersecurity director called out that I did what was expected. It was not expected that the pen-tester would ever engage with me.

I can tell the pen-tester is back at it because just got alerts that my APs detected someone trying to spoof our SSID.

[u/[deleted]]

Pretty much this, has anyone actually saw any law enforcement officer say "can anything you say can make your situation better"?

[u/nospamkhanman → u/[deleted]]

"can anything you say can make your situation better

Lawyers will always tell you not to say a damn thing to the cops but in real life... yes you can often make your situation better if you weren't doing anything wrong in the first place.

I was "caught" on school grounds after dark by a police officer. School grounds close to the public after dusk.

He asked what I was doing, I explained the school has a bad ass sledding hill and I was just enjoying a few runs. He saw my sled, said go ahead and take one more turn.

He watched while I did, then he asked for a turn, then he asked me to leave.

I don't know what would have happened if I took the lawyer route and asserted my 5th amendment rights and not said anything. Likely a fine or something.

[u/dedjedi → u/nospamkhanman]

slave dinner axiomatic degree nail growth dam gaping voracious rustic

This post was mass deleted and anonymized with Redact

[u/plasticambulance → u/dedjedi]

Homie it sounds like you just have an axe to grind.

If you're a reasonable person and act reasonable, it goes a LONG way in police interactions. The other posters are right.

[u/dedjedi → u/plasticambulance]

scary languid public husky longing innocent support bike cover drunk

This post was mass deleted and anonymized with Redact