Social-Engineer.Org started the idea for this years CTF without really knowing how much fear it would build into people and organizations. From the beginning we have published our goals, rules and ideas to help squelch the fears of those who think our intent is malicious.
While it is true that social engineering will involve some deception as well as obtaining information about these companies, the information the contestants are trying to obtain is innocuous, NON-FINANCIAL and NON-PERSONAL. At no time will we allow a contestant to make a call that will compromise a company or person’s financial, banking information or identity.
Despite all of our efforts to notify the public that we are not out for malicious gain it seems like this message is not getting through to many in the security industry. For example, we have come across an email sent out by a large security firm to all their nationwide customers warning them about the CTF.
This email is posted below:
(more…)
