Workplace smoking bans may be good for workers' health, but could open the back door to hackers.

In a recent social engineering test undertaken by UK-based security consultancy NTA Monitor, a tester was able to easily gain access to a corporate building through a back door that was left open for smokers. Once inside, the penetration tester was able to easily bluff his way into a meeting room, claiming the IT department had sent him. Even without a pass, he gained access unchallenged and was then able to connect his laptop to the firm's VoIP network via a telephone connection point.

NTA Monitor technical director Roy Hills comments: "It used to be that companies 'left the back door open' in terms of internet security. Now they are literally leaving their buildings open to accommodate smokers.

"Once inside a corporate building, an attacker can use social methods on employees to gain access to restricted areas and information unless a rigid staff pass system is in place," he added.

Smoking will be banned in all indoor public spaces in the UK in July 2007. In many other European countries, such as Spain, workplace smoking restrictions have already been applied. ®

Related stories

• Hoax: German IT boss sacks three non-smokers (14 January 2008)
• UK gov advisor proposes 'licence to smoke' (23 October 2007)
• UK VPN security is outstandingly mediocre (8 August 2007)
• Employers should follow the Scots' lead on vehicle smoking ban (7 June 2007)
• Cigarette break saves US woman's life (19 April 2007)
• Harassed employees: dispute resolutions are failing (5 April 2007)
• Dispute resolution procedures are failing, says DTI (26 March 2007)
• Dismissal scam spam targets medical centre (3 November 2006)
• Mitnick gets hit by Pakistani crackers (22 August 2006)
• BT stubs out smoking (21 February 2006)
• Book review The Art of Intrusion (26 January 2006)
• Scotland takes big stick to smokers (10 November 2004)