Summary
Highlights
Hank discusses initial reactions online regarding the Louvre heist, with some calling the criminals 'idiots' and others criticizing the museum's security. He initially leans towards the criminals being clever, noting their strategic approach to target items with intrinsic value and operating during the day to use crowds as a cover.
Hank introduces Sherry Davidoff, a security expert and friend, who specializes in physical penetration testing. She confirms that the thieves' method of operating during the day with high-visibility gear is a known tactic to appear less suspicious, and acknowledges the historical context of the Louvre as an ancient fortress redesigned for accessibility rather than modern security.
Sherry highlights the criminals' intelligence in executing the heist quickly and targeting items with inherent value (like jewels that can be melted down) rather than priceless, unsellable art like the Mona Lisa. She also notes the thieves' exploitation of the museum's known security weaknesses, particularly the Apollo Gallery, which had been breached before.
The discussion covers the cleverness of conducting the heist during museum operating hours. This tactic forces security to prioritize the safety of visitors over stolen artifacts, creating a distraction. Sherry and Hank discuss the historical context of security responses, contrasting past approaches with modern concerns for human life.
Sherry explains that the Louvre had undergone multiple security audits, and the announcement of upcoming overhauls might have prompted the criminals to act swiftly. She draws parallels between physical and cyber security, describing the bucket truck as a 'zero-day exploit' and predicting increased vehicle security measures at major landmarks.
The conversation shifts to the post-heist phase, including the apprehension of two criminals through DNA evidence. Sherry notes that modern forensics will impact criminal behavior, likely leading to faster escapes and more immediate dismantling of stolen items to make them untraceable, such as cutting gems or melting metals.
Sherry identifies key security failures, including the placement of valuable jewels in the vulnerable Apollo Gallery despite previous thefts and the lack of robust vehicle security. She emphasizes the inherent trade-offs between accessibility, aesthetic appeal, and security in public spaces like museums, and the limitations of relying solely on guards.
Sherry clarifies the distinction between security audits (methodical reviews) and penetration tests (actual attempts to breach security). She suggests that while the Louvre conducted audits, a penetration test might have uncovered the specific vulnerabilities exploited in the heist. She also highlights the alarming leak of a security audit report, indicating deeper internal issues.
When asked how he would rob the Louvre, Hank humorously proposes using his large online following to orchestrate a 'swarm' attack, overwhelming security with a coordinated crowd, creating a diversion, and then returning the stolen items to their countries of origin. Sherry finds the idea brilliant, acknowledging his 'superpower' of followers.