~/talk

Social Engineering: Hacking People

Talkat SQLBits 2024 · 2024-03-19..03-23· [security]
links:none on file
slides:none on file

People are the weakest link: historic scams include Frank Abagnale’s $10M con and a 2007 $21M diamond heist, modern tools include Metasploit and the social engineer toolkit, and a GitHub project called keap can infer keystrokes from a microphone. High‑success tricks: USB drops hit ~90%, “hot woman” approaches claim ~100% success on men and ~60% on women. Prevention: regular people training (allocate ~20% of security budget), 2FA, shred documents, lock workstations.

AI-written summary · about

  1. 0:00Introduction
  2. 2:15Attack vectors and human flaws
  3. 9:46Profiling targets
  4. 13:42Phishing and URL deception
  5. 18:43AI blackmail risks
  6. 23:01Elicitation and rapport
  7. 29:06Body language and anchoring
  8. 34:27Advanced tactics and success rates
  9. 39:10Physical security costs
  10. 42:20Prevention and budgeting
  11. 47:03USB and air-gap risks
  12. 49:11Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.