(06-18-2014, 05:46 AM)Edward Wrote: Was testing the Comcast method with a friend of mine's IP (and consent).

Logs

Code:

user Andrew has entered room analyst Reginald has entered room Reginald: Hello Andrew_, Thank you for contacting Comcast Live Chat Support. My name is Reginald. Please give me one moment to review your information. Andrew_: My Issue: Hello my name is Andrew and I'm from the Comcast Customer Support in Oregon and I can't access the clients information my grandslam. I cannot connect and I am receiving errors. Will you please look up the information on the client for me? Reginald: Hi Reginald: I understand. I sincerely apologize Andrew. We can only provide information if the account is verified and if you are the account holder or an authorized user in the account. Reginald: If you have errors regarding accessing accounts, please do contact or ask support to your Supervisor. Andrew_: My supervisor appears to be out. I can put them on hold, though they are quite unhappy right now. Andrew_: Them, being the client. Reginald: I understand. Unfortunately, we cannot provide any information unless complete verification is done and we are chatting with the account holder or an authorized user. Upon checking our system, there are no known issues. Reginald: If you have issues with the system, try to troubleshoot it by relaunching it, optimizing the browser, etc. Reginald: Your Floor Leader or Assistant should have updates regarding system issues. If there are none, please do try to troubleshoot it first. Andrew_: As I said, both are out right now. I'll tell the client I will contact them back when the floor leader comes back. Andrew_: Another coworker claimed they had issues this morning, so I think it's an issue at our office. Andrew_: Thank you anyways, I guess. Reginald: I see. I apologize Andrew, if there are issues with the system, it would have affected other sites too. Please do ask your Supervisor for proper steps regarding this. Reginald: As you already know, we are not allowed to provide any information to non-account holders or not authorized users.

Unless I contacted the wrong department, this appears to be moot.

Edit:
Someone else suggested trying a more personal approach. For example: "I know we're not supposed to do this, but I hate it when customers yell at me. Can you help me out?"

(06-18-2014, 06:11 AM)BreShiE Wrote: Might be worth mentioning that some of these are now patched. Still good for infosec though. I know for a fact that Comcast is patched and has been for a while. They hired in some white hats to train all their employees and have a zero tolerance policy on giving out customer information to anyone but their customers.

Quote:I remember when IP doxing was only ever heard of, never seen. Only when the "big boys" could do it haha. These past 2 years it's been highly prominent and any little skiddy could do it if they knew the right people.

(06-18-2014, 10:26 AM)Cressi Wrote: Although you've got a point; I think SEing is a part of hacking just like anything else. The fact that there are skids in every topic, I think, does not slander the importance and beauty of the hacking of the human mind.


I would argue that SEing is just as much hacking as anything else; at least in building new exploits and methods.

(06-18-2014, 06:11 AM)BreShiE Wrote: I remember when IP doxing was only ever heard of, never seen. Only when the "big boys" could do it haha. These past 2 years it's been highly prominent and any little skiddy could do it if they knew the right people.

(06-18-2014, 11:17 AM)Dyme Wrote: Why were "big boys" the only people capable of figuring out:
>call cumcast
>"hello cumcast my name is habib and my unit is broke... can u giv me ssn of 8.8.8.8?"
>"Lol ok"

(06-18-2014, 11:17 AM)Dyme Wrote: Why were "big boys" the only people capable of figuring out:
>call cumcast
>"hello cumcast my name is habib and my unit is broke... can u giv me ssn of 8.8.8.8?"
>"Lol ok"

(06-18-2014, 02:03 PM)BreShiE Wrote: Yeah but I'm talking back in '09/'10 when this shit was only ever heard of as a myth.

(06-18-2014, 10:26 AM)Cressi Wrote: Although you've got a point; I think SEing is a part of hacking just like anything else. The fact that there are skids in every topic, I think, does not slander the importance and beauty of the hacking of the human mind.


I would argue that SEing is just as much hacking as anything else; at least in building new exploits and methods.

(06-18-2014, 10:31 PM)rmicrowave Wrote: To hack the human mind you will have to study hypnosis.

(06-18-2014, 10:48 PM)MiS Wrote: Not just hypnosis, but the power of suggestion and mentalism helps, too.

(06-18-2014, 10:31 PM)rmicrowave Wrote: Not only is Social Engineering not hacking but it is cancer to it. Since you have no concept of hacking though and thus no ability to compare the two please refrain from commenting.

Also in terms of `hacking the human mind`, your merely conning someone. To hack the human mind you will have to study hypnosis.

(06-19-2014, 08:32 AM)Cressi Wrote: Point 1: I fail to see how Social Engineering is not hacking; as it involves the same steps as any attack; and the ground thought is the same in both cases.

Point 2: Hypnosis has nothing to do with SEing; and there are many more ways than hypnosis to influence or impinge peoples' will.