TA26 – Social Engineering

Talking Anthropology

This episode focus on a phenomenon called social engineering. This form of hacking deals with the highest layer in IT-Security, the human being, also known as “user”. I spoke with logan from the social-egnineer podcast about his work as a penetration tester, the risks of social media and social proof.

topics:

• penetration testing and security audits
• history of social engineering
• risk of social media exploitation
• stay secure through paranoia, education and responsible usage
• history of logan
• NLP, NHR and Mikroexpressions
• science in the field of Social engineering

links:

• Social-Engineer.org (including resources and podcast)
• Book Social Engineering: The Art of Human Hacking on Amazon and Wiley
• Homepage of the book Social Engineering: The Art of Human Hacking
• WP: Social Engineering
• WP: NLP
• WP: NHR
• WP: Framing (social science) (psychology)
• Blippy – Tool to announce your credit card purchases
• Creepy – Tool to analyse gps data in Fotos
• Newsletter with the social engineering report on a blippy user
• Report about Social Engineering on DefCon18
• WP: Mikro Expression
• WP: Joe Navarro
• homepage of Joe Navarro
• Great Acting Class DVD

Literatur:

• Mitnick, Kevin and William Simon (2002) The Art of Deception: Controlling the Human Element of Security. Indianapolis, IN: Wiley.
• Hadnagy, Christopher (2010) Social Engineering: The Art of Human Hacking. USA, IN: Wiley.