One of the biggest security weak spots in all systems is the user. Yes, there are many complicated processes for attacking networks and cracking password files, but why bother with that when you can simply ask an inside user for their network credentials? I'm just getting caught up on email so have just read Bruce Schneier's December cryptogram which highlighted a great article by Paul J Zak called How To Run a Con. While this article is specific to traditional con men and their marks, this same logic can be applied to how easy it is to social engineer data out of so many users. We want to trust people, and most of all, we want to be trusted, too. Interesting reading!
The Easter WOW Factor
-
Easter cakes, this is your week to shine! WOW US!
::awkward pause::
Ok, new plan:
Continue avoiding eye contact and hope for the best.
Am I seeing thi...
A recent XKCD comic illustrates another weakness: http://www.xkcd.com/538/
ReplyDelete