I never imagined I would begin my blog with a sub-par post like this, but whatever.
Today I was visiting my friend Cody, and even though he doesn’t have the Internet—because everyone knows the Internet is just a fad—it was still pretty fun. We ended up playing his Wii and watching about three movies. Two of them sucked, but I kinda liked this one called “Wedding Crashers”. Yeah, it’s been out forever, and I’ve also watched it before today, but I’ve never really payed attention to it until now. For those of you who have never seen the movie, it’s basically about these two guys that go to weddings with one intention: to sleep with the ladies. Anyway, what’s so cool about the Crashers is that they have their own set of rules they’re suppose to follow by, and these rules allow them to achieve their goal.
It’s actually a lot like social engineering.
No, they didn’t try to get any secret passwords so that they could hack their way into the Pentagon’s computers, nor did they pretend to be with the Corporate Office of McDonalds so they could get a free cheeseburger. But by using ever-so-subtle techniques, they managed to fool not just the women they slept with, but everybody in the whole entire wedding. They simply acted like they were where they belonged—they didn’t have to use any verbal form of persuasion—and by doing so none of the true guests questioned their integrity. By playing the part, they tricked an entire room full of people into tricking themselves, and that is social engineering in its most pure level.
So where am I going with this post?
Well, I really just wanted to give the readers of this blog a chance to understand that social engineering isn’t very well-defined, but at the same time it doesn’t have to be. Just because somebody acts like they’re the best thing sense Frank Abagnale doesn’t make them any less of a script kiddy. And remember that guy who sits alone in the back of the classroom? He probably has every phone number on Paris Hilton’s sidekick by now. Social Engineering—like all forms of hacking—is an art and the true masters of this art are not the ones sitting in the principle’s office or the police station because they got caught telling a lie to somebody. And they also aren’t the ones that got away with lying. To learn how to hack the human takes time, effort, and a love of the practice.
And just have fun with what you do.