RE: Social Engineering

["Ryan Chivers" <rchivers () comcast net>]

That movie was very well done...  but many parts were unbelievable.
Nevertheless it is one of the best little films that "no-one knows about".

If I remember correctly, Mitnick claimed to be from Sun Microsystems on that
call.

IF Tsu ever did work for Sun, he might have possibly had access to their
private IntraNET.  That is where presumably he went to find out if the
person claiming to be from Sun actually was.  (Think employee
directory/phone extension listing)
 
To my knowledge, there is really no other way to check something like that
unless you are already on the "inside" of an organization.



> -----Original Message-----
> From: coder [mailto:elite.coder () ntlworld com]
> Sent: Friday, December 30, 2005 1:07 PM
> To: security-basics () securityfocus com
> Subject: Social Engineering
>
> Hello everyone,
>
> I am currently planning on writting a thesis on social engineering, I have
> been fascinated with this subject since I watched Hackers 2/Takedown and
> read Kevin Mitnick's book.
>
> Now before I fully take on this idea, what products currently exist to
> minimize/prevent social engineering? If anyone saw Hackers 2/Takedown,
> Tsutomu Shimomura used a program that could tell him if the person on the
> phone actually exists in a company, does this sort of software exist?
>
> Sorry, if this is in the wrong mailing list, but I didn't see a "Social
> Engineering" mail list ;)
>
> Thanks
>
> ~Davie Elliott
>
>
>
> --------------------------------------------------------------------------
> -
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Tailor your education to your own professional goals with degree
> customizations including Emergency Management, Business Continuity
> Planning,
> Computer Emergency Response Teams, and Digital Investigations.
>
> http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------------------
> --


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------