It was around 12:30 a.m. on Seung Ha (승하) ArchivesWednesday morning, and Justin Wynn and Gary Demercurio were in a bit of a tight spot. Specifically, the two were being arrested on the third floor of Iowa's Dallas County courthouse.
But Wynn and Demercurio weren't there to steal the only evidence linking them to some unnamed crime. Rather, reports the Des Moines Register, the two had been hired by the state court administration to attempt to obtain "unauthorized access" to court documents using "various means."
The two men work as physical penetration testers, or pentesters, for the cybersecurity company Coalfire and were simply doing their job. Unfortunately, that message somehow got lost in translation.
Specifically, the Registerreports that the state court administration now claims it "did not intend, or anticipate, those [security testing] efforts to include the forced entry into a building."
What is and is not off limits — something typically referred to as in or out of scope — during both digital and physical pentests is often a hot-button issue. That the scope of an engagement is often carefully negotiated ahead of time makes sense. After all, you wouldn't want the security company you hired to test your payroll system kidnapping your CEO and demanding he hand over the digital keys.
Coalfire's website includes a detailed penetration testing section, enumerating the various services offered by the company and detailing what a pentest entails.
"Throughout the engagement, we provide ongoing status reports, immediate identification of critical risks, and knowledge transfer to your technical team," reads the company's site. "At the end of the process, we ensure you have a complete understanding of the exploitable vulnerabilities in your environment and recommended remediation strategies."
Physical penetration is a common practice, and is not outside of the industry norm. One such pentester, who goes by Jek Hyde on Twitter, often details her various escapades online with the permission of the targeted client (her Twitter account is worth a follow).
All of this seemed to be lost on the local law enforcement, however. Both Wynn and Demercurio have been charged with possession of burglary tools and third-degree burglary. A $50,000 bond adds injury to the insult of being caught on the job.
But hey, at least the Dallas County courthouse now knows that its alarm system works.
Topics Cybersecurity
Snapchat opens to outside apps with Snap Kit developer platformChris Pratt’s 9Grimes is here to actually make you feel good about owning a MacSupermassive black hole eats up and destroys hapless star passing byJason Momoa is very, very wet in new 'Aquaman' picturesArtificial 'earthquake' detected in Mexico after World Cup goalEvery artwork to look out for in Beyoncé and JayShut the f*ck up, Marco Rubio'Transference' isn't your typical gaming experienceEvery artwork to look out for in Beyoncé and JayWarner Bros. is cracking down on unofficial Harry Potter festivalsStephen Hawking's voice beamed to a black hole lightChris Pratt’s 9Man casually rocks up to 'Incredibles 2' dressed as Frozone, yells the perfect quoteApple to add lifeAndroid users will soon be able to text on the webGoogle Maps removes Uber feature for booking rides without leaving appBitcoin and ether rally on SEC announcementHTC U12+ review: A good phone if you can deal with the fake buttons'Ocean's 8' lack of conflict is the most important part of its fantasy Digital wall aims to protest Trump with 1,926 miles of immigrant art Indonesia destroyed a tiger statue in shame after memes savagely mocked it What went wrong with the Boeing Starliner launch Treat yourself to Elon Musk’s weirdest tweets of 2019 BBC interview kid is a bonafide star and the internet absolutely loves it Your smartphone is probably being tracked—and it's not hard to figure out who you are Police interrupt students' group chat in the most spectacular way Netflix's 'The Witcher' nails that distinct 'Witcher' feeling: Review Australia just had its hottest day ever... two days in a row New 'Ides of Trump' campaign will inundate Trump with critical postcards 11,000 hand American Airlines now offers non These cute little succulents look like bunnies throwing up the peace sign The tech we lost in 2019: RIP iTunes, MoviePass, and AirPower 'Wattam' Review: A life Another Trump phone security fail Mark Hamill brutally shuts down Trump staffer in 1 tweet Utility truck driving down a highway with its bucket extended is a real nail biter Facebook unveils plan to fight interference in 2020 Census Netflix's 'Don't F**k with Cats' examines killer Luka Magnotta: Review
2.5023s , 8199.9609375 kb
Copyright © 2025 Powered by 【Seung Ha (승하) Archives】,Prosperous Times Information Network