SE

Search for:


Archive for October, 2011

The Power of Nonsexual Touch

Wednesday, October 19th, 2011

touch pic The Power of Nonsexual TouchOften when we think about Social Engineering we think about manipulating individuals by speaking to them. We think of talking the call center employee into doing our bidding or posing as a delivery representative and talking our way onto the facilities. We rely on our eyes and ears as we navigate the world but we often forget about, or don’t give enough credit to, the power of nonsexual touch. Let’s explore the role of nonsexual touch in communication and see how it can benefit the Social Engineer.

Research shows how simple touching can increase compliance, helping behavior, attraction, and can be used to signal power. Even the slightest touch can influence the way someone thinks about you or perceives the situation. Knowing how touch can influence your target is vital information every Social Engineer should be familiar with.

A 2003 study from the Université de Bretagne-Sud in Vannes, France showed that a simple light touch on the arm increased the likelihood of strangers helping an individual from 63% up to 90%.  Similar techniques can be used to increase compliance. As an example, a study by Willis and Hamm asked individuals to sign a petition. 81% of those touched signed the petition compared to 55% who were not touched. A second and similar study asked people to fill out a questionnaire. Simply touching the individuals asked to take the questionnaire increased their compliance from 40% to 70% – How would you like those results on your next social engineering pentest?

(more…)

Social Engineering Poll – Endearment vs Authority

Sunday, October 9th, 2011

right and wrong decisions Social Engineering Poll   Endearment vs AuthorityYes, it has been a long time since we had a social engineering poll.  But we are ready to release the results of one of most successful so far, as well as start a new poll.

Endearment vs Authority

This poll as based on two different stories.  The first showed how the principle of endearment and how it may be used by a malicious social engineer.

The second story involved a social engineer employing the authority principle.  By simply carrying a clipboard and acting in charge could a social engineer manipulate people into giving up valuable data?

These two scenarios where presented with a third option that neither of them would work.  How did the results turn out?

(more…)




SE Polls

SE CTF

Brad Smith