+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Social Engineering (https://sinister.li/Forum-Social-Engineering)
+--- Thread: Future of SE in your opinion (/Thread-Future-of-SE-in-your-opinion)
Pages:
1
2
Future of SE in your opinion - Green314 - 07-17-2020
I would like to know your personal opinion about this technique in the future.
- Will SE still last for long time?
- Will it remain still easy in next years?
- What will are the most used methods in future?
- What will the major threats be against SE in order that it become a well-known method thus company will protect their assets form SErs?
These are some of my personal answers:
- I think that SE will never really die.
- I think not. I can't explain why but my opinion is that in the next 20 years SE will always require a particular care about privacy, experience and ability to lie correctly.
- I think that DNA will last still for max 5 years. Then it will be impossible to perform such method again. I think that a that time FTID or similar technique, which fake the shipping address might work well, still with flaws.
- Ultimately those users that are newbie and careless about the success of their SE, they just do it, without thinking or similar silly behaviours, easy to been catch and talkative enough to explain to someone who works on the company how they have done the SE. This would make the company investigate and become smarter about this business (I really like call SE in this way) and make the company think about possible countermeasures for avoiding or at least decrease the possibility of SE's succeed.
It would be also curious and funny to have a look on this thread in the next years.
I expect your personal thoughts.
RE: Future of SE in your opinion - Fastera - 07-17-2020
Interesting points. I don't think there will be a time without SE. Perhaps less with easy refunds such as empty box or wrong item. The art of social engineering will evolve with the measures put in place by the companies.
Easy is relative, I find it easy-ish to do Amazon but outside of that I feel like everything is too big or too hard for me. Of course that pushes me to explore even further and learn even more. Perhaps for the experienced SEer there will always be an easy SE to do, for the apprentices everything might seem hard.
I cannot tell what methods might become the norm in the future. I would say again it would depend on the measures put in place by the companies. It is likely new methods will come around and older ones will be disregarded but time will tell. As mothered likes to say "it depends on the nature of the item"
It would take a long time for private businesses to try and push laws that would give them legal right to cancel your claim if they suspect it is unlawful. That is even without considering that you are innocent until proven guilty or the fact that it could very well be a real claim, human error is inevitable. However they may be able to have T&C that give them flexibility if they suspect such behaviour, give them more time to analyse the situation and documentation they have or even send the inquiry to another team with more experienced customer service agents. As for protecting against specific methods that is completely possible. I am aware that Argos UK have CCTV that monitors what is put in each shipping box therefore wrong item method simply does not work. If other companies do the same then this method will disappear quickly.
RE: Future of SE in your opinion - mothered - 07-17-2020
Put simply, human manipulation has been around for centuries, and will continue to serve SE'ers Indefinitely.
RE: Future of SE in your opinion - Jay875 - 07-23-2020
(07-17-2020, 10:32 AM)green314 Wrote: I would like to know your personal opinion about this technique in the future.
- Will SE still last for long time?
- Will it remain still easy in next years?
- What will are the most used methods in future?
- What will the major threats be against SE in order that it become a well-known method thus company will protect their assets form SErs?
These are some of my personal answers:
- I think that SE will never really die.
- I think not. I can't explain why but my opinion is that in the next 20 years SE will always require a particular care about privacy, experience and ability to lie correctly.
- I think that DNA will last still for max 5 years. Then it will be impossible to perform such method again. I think that a that time FTID or similar technique, which fake the shipping address might work well, still with flaws.
- Ultimately those users that are newbie and careless about the success of their SE, they just do it, without thinking or similar silly behaviours, easy to been catch and talkative enough to explain to someone who works on the company how they have done the SE. This would make the company investigate and become smarter about this business (I really like call SE in this way) and make the company think about possible countermeasures for avoiding or at least decrease the possibility of SE's succeed.
It would be also curious and funny to have a look on this thread in the next years.
I expect your personal thoughts.
Its impossible to completely stop SE but Faketid will definitely be patched by next year I think. It would have lasted far longer if people didnt decide to leak it.
RE: Future of SE in your opinion - Johnngnky - 07-23-2020
With the increasing concern of privacy, more and more companies are trying to collect as much data as possible with everyone. This would make social engineering difficult.
But we will adopt that as well, I think the act of SEing will carry on until the end of society. Just not using the same methods.
RE: Future of SE in your opinion - mothered - 07-23-2020
(07-23-2020, 06:35 AM)Johnngnky Wrote: With the increasing concern of privacy, more and more companies are trying to collect as much data as possible with everyone. This would make social engineering difficult.From a technical standpoint, yes.
However, It doesn't change the gullibility and vulnerability of those who're susceptible to exploitation- which Is the traditional mindset of "every Individual".
RE: Future of SE in your opinion - Green314 - 08-18-2020
I am just trying to SE a pair of earphones without not having it.
I figured out that that kind of earphones had not just one serial but actually 4. One for each earphone, one for the charging box and the last one for the product itself.
This makes me think that in the future they: 1) make it possible, easy for the companies and less cost to block devices remotely when declared broken, lost, stolen etc.; 2) the procedures of trying to SE an item not physically having it will be more difficult. Think about it, nowadays each tech device has an app thus when somebody opens a topic in the assistance about the product the representative might ask you to confirm it's you that it truly asking for help from a rep and not somebody else (the SEr), What would be the cost for them doing this? Nothing, just to implement a system like the 2FA. It would be easy and effective from them to avoid us doing SEs without having the products.
You would be instantly flagged, don't you think?
It's just a thought but I think it will be this way, or at least I would do it if a were a company.
RE: Future of SE in your opinion - Defeat - 08-18-2020
It's really hard to tell, idk if I have a good answer for those questions.
RE: Future of SE in your opinion - Green314 - 02-26-2021
I would like to hear your opinion about this guy:
0) How much old is this practice called Social Engineering with regard of companies?
1) How many SErs there were 10 or 20 years? Or at least how many do you think there were?
2) In which year companies started to think users might take advantage of the warranty of a product / start refunding?
3) Compared to 10 years / 20 years ago, how much do you think SErs are increased? Let's say when you start they were x, how many 10 years later, 20 years later and now in terms of x?
4) What are your prediction for the future about the amount of SErs around?
RE: Future of SE in your opinion - Green314 - 03-05-2021
(02-26-2021, 05:31 PM)green314 Wrote: I would like to hear your opinion about this guy:
0) How much old is this practice called Social Engineering with regard of companies?
1) How many SErs there were 10 or 20 years? Or at least how many do you think there were?
2) In which year companies started to think users might take advantage of the warranty of a product / start refunding?
3) Compared to 10 years / 20 years ago, how much do you think SErs are increased? Let's say when you start they were x, how many 10 years later, 20 years later and now in terms of x?
4) What are your prediction for the future about the amount of SErs around?
Bump.