Physical Security and Pentesting

Welcome!

Welcome to [email protected]! This community was created to replace r/physec, which has permanently gone dark since 12 June 2023 in protest of Reddit's API pricing change.

As our title indicates, we're here to talk about physical security (keeping physical objects and spaces secure from people not authorized to be in them) and physical penetration testing (learning how malicious parties exploit weaknesses in physical security, and having trustworthy people use those methods against physical security systems to improve those systems). This includes the development of individual skills; security equipment, systems, and practices; and the wider industry as a whole.

Please ask meta questions about this community in the comments of this post.

Frequently Asked Questions

Aren't you just teaching people how to do crime?

Rogues are very keen in their profession, and know already much more than we can teach them. — Alfred Charles Hobbs

Criminals already know to do crime. They don't need our help. We need to understand how criminals break in so that we can develop effective countermeasures. Security research is necessary to uncover vulnerabilities that manufactures have missed or willingly ignore. Too often is "security through obscurity" used as an excuse for hiding problems instead of fixing them.

How do I get a job in physical pentesting?

Great question. We'll let you know if we figure it out. The industry is small, new, and does not have a well-developed entry pipeline. Career discussion is encouraged here.