Capt. Sigerson (12/20/2011)

---

Another issue for technical types is that we sometimes have to deal with managers who don't fully (or even partially) understand what we do or what we're even talking about, but will do anything to avoid admitting their ignorance in front of their workers. I've observed that managers who lack IT expertise, and can't manage IT workers from the basis of shared knowledge of the work at hand, will often posture more aggressively

Elliott Whitlow (12/20/2011)

---

If you want to read about real world applications of social engineering, read Ghost in the Wires by Kevin Mitnick. This guy would be considered the SUPREME social engineer. I would also suggest the book Deception by the same author which is more of a self-help book for security..

CEWII

Elliott Whitlow (12/20/2011)

---

If you want to read about real world applications of social engineering, read Ghost in the Wires by Kevin Mitnick. This guy would be considered the SUPREME social engineer. It also gives good insight into how these kinds of attacks work.. For a little company they aren't so useful, as soon as you get bigger though and have people spread around and don't know everybody, you are definitely ripe for the attack. And I agree, once you get past the short wall of natural suspicion people are very willing and happy to help.

I would also suggest the book Deception by the same author which is more of a self-help book for security..

CEWII