Our goal is to change the way people think, making them own a personal security policy that carries over from their personal life to their professional life.
Malicious social engineers never hold contests, never do press releases and never warn the world they will be calling, and they also never have rules. To some extent, we feel that our goal has been advanced already by this discussion, and we hope that with the information we will gather during the CTF we will be able to assist many companies to becoming more secure.
The other day I had a pizza delivered to my home using my Visa. When the pizza arrived, however, the driver refused to give it to me unless I either gave him my social security number or let him write down my driver’s license number. I refused because of identity-theft and general privacy concerns. I offered to show him my driver’s license and the Visa card I’d used to order the pizza, but he said he had to write down one or the other number.