Buscar en Mind w/o Soul

lunes, agosto 11, 2008

Ingeniería social - cómo estar sobre aviso

Social engineering warnings. Comentario slashdot comment

Meta Moderation
Some warning signs that you may be subjected to social engineering:
- The person starts using your first name without you having ever met.
- The person refers to an authority figure in a jocular/friendly way, in order to make you draw the conclusion that the authority figure knows and trusts this person.
- They will try to appeal to your vanity. E.g. they may imply that they called YOU because you're so friendly and helpful. Ask yourself whether, if it really was this urgent, they would be calling you instead of those whose job it is to deal with this sort of situation. If you believe for one second that it's because of your demeanor, you're not only stupid but vain too.
- They mention a common foe. "You know how accounting is..." Yeah, everyone knows that accounting are bastards to anyone not in accounting, in every company in every country. That doesn't lend credence to you being on the same side.
- They mention an interest of yours. "I had planned to take my son fishing this weekend, but I guess I'll be working, trying to fix this". Why would they tell that to a stranger? (Especially if you have a sticker saying "BITE MY BASS" on your car.)
- If face to face, the person smiles a lot. Nothing disarms suspicion as easily as a smile.

No hay comentarios: