They make it look so complicated in the movies. Detailed covert operations with the intent to hack into a casino’s mainframe preceeded by weeks of staged planned rehearsals, but I’m here to tell you it’s much easier than that.
This is my story of how I had 20 seconds of complete access to The Venetian Casino’s data center, and lived to tell about it.
Now, before I go on, I must apologize to all of the hopeful future visitors of The Venetian Hotel and Casino in Las Vegas. I have a feeling that security will get tightened down following this story. So, let me set the stage. I was asked to attend the HP Technology Forum in Las Vegas to blog about the event and cover it via Twitter. Part of the agenda for the blogging attendees, and the media, was a tour of The Venetian Hotel and Casino’s Data Center. I jumped at the opportunity. I always enjoy customer data centers since it gives me the chance to view what “real people” are doing. Once we landed at the Sands Hotel and Casino, I was fortunate to be part of the first group of 15 or 20 people so we hiked over to the hidden area where the data center was located. Well, it wasn’t really hidden, just a door that said, “Employees Only.” We rode up an elevator one or two floors and came out into a desolate barren hallway that gave the appearance of a hospital. The hallway made a few turns and we came out into a set of office cubicles. On the other side were the double doors leading to the data center. No metal barred doors, no retina scans, no lasers – just two plain doors leading into the data center. I should’ve know this was a sign of things to come.
* 3 Major Data Centers: Las Vegas, Singapore and China
* 500 physical servers in Las Vegas (very little virtualization)
* They use pure Ethernet (IP) for the machines in Singapore; a mix of Serial and IP in Las Vegas
As we entered the data center, I quickly realized The Venetian was a Dell shop. Did I mention this was a tour hosted by HP? After inquiring about the large numbers of Dell servers, the CTO of The Venetian Casino, Steve Vollmer, made it clear that they do use a wide variety of manufacturers for their servers, however they are 100% HP Networking. Usually when you are given a customer tour by a vendor, like HP, it’s an ALL VENDOR customer – meaning they have HP everything but this was a “real customer data center” tour. Kudos to Michael Thacker and the HP Public Relations team on finding a real customer with a mix of vendors’ gear. Which leads me to how I got left behind.
I’m a server guy – networking gear is out of my expertise, so while the rest of the media and bloggers were interviewing Mr. Vollmer, I started wondering around taking pictures (no video allowed.) I noticed that all of the physical servers (Dell, IBM and HP) were using the on-board Ethernet adapters only. Very interesting. It was mentioned that the casino machines are simply computers, so it makes sense that all of the communication is IP based. As I wondered around to the last aisle of racks, I came across an HP BladeSystem! Very cool. I thought they were stuck on old, aging equipment, but here stood the royal crown (INSERT angelic sounds and bright light here). Sitting right above it was a Dell M1000e Blade Chassis. Wow – these guys are true to being a multi-vendor customer. As I was wiping up the drool off the floor, I heard the door slam to the Data Center. NOTHING but the whirl of server fans and A/C air blowing around. Now my first thought was that I was the last person and I’m about to get pulled out by the Network Admin who was on the tour with us. I turned the corner to find no one. I was alone!
You’ve got to be kidding me. Surely I’m not standing in a Las Vegas casino’s data center BY MYSELF – but I was. Now, many things ran through my head – so many movies have been made about breaking into casinos and here I was in the heart of millions of electronic dollars. I’d like to be able to conclude this story with some amazing details on how I logged onto the casino servers and transferred money to my offshore account but I can’t. a) I’m a good person. I don’t steal, lie or cheat and b) I didn’t have a USB key on me. The reality is, once I realized I was alone I knew I had to get out of the data center as quickly as possible, so I looked up at the overhead camera, gave a smile and walked out the double doors to quickly catch up to the group heading back downstairs.
There’s a few lessons to be learned here:
1) Real customers use a mix of vendors for their hardware – not just one vendor
2) Always carry a USB key with you – you never know when you need it
3) Don’t waste your time breaking in to a casino – just tour their data center with a large crowd
That’s my story. Now I just hope I don’t get any calls from the F.B.I…
Disclaimer: airfare, accommodations and some meals are being provided by HP, however the content being blogged is solely my opinion and does not in anyway express the opinions of HP.