Read the article further. When the police called the phone number on the document, the person on the other end denied that they were authorized to be in the building.

▲

rainonmoon 2 hours ago | parent [-]

But I’m responding to the notion that they should’ve had signed documentation with the scope with them. They did. The fact that their own company hung them out to dry by not informing everyone on that list is not the pentesters’ fault.

	▲	bink 25 minutes ago \| parent [-]
		I wasn't trying to suggest they did or didn't have the right documentation. I honestly don't know. I was just explaining how we normally operated. The idea that the emergency contact wouldn't answer, or even worse deny we had authority seems impossible to me... At least if you're doing things the way we did.