[xevenofhearts]

To be completely honest, I've never tested this, but I think it's plausible. My idea is to load a key logger onto a USB drive, then set it to auto run the application once the USB is plugged in, and start logging. Social engineer them into using this USB, say, to give them a picture, or some report that you couldn't email because it was too large. If they're on OS X, it might ask them before they run it, but if you guide them through it, they'll probably think allowing it is harmless. Casually leave, "forgetting" your USB. They'll probably forget about it too, and keep it chillin'. Feedback please?