just read this article pretty clever hackers
http://www.washingtonpost.com/wp-dyn/content/article/2005/05/19/AR2005051900711.html
http://www.washingtonpost.com/wp-dyn/content/article/2005/05/19/AR2005051900711.html
How hackers hacked Paris's sidekick
- Thread starter jam3582
- Start date
Social engineering isn't really "clever", it's just another way to get information from people instead of computers. We all do it. We are all capable of it.
Like when you ask a guy at EB to "just this once" take multiple copies of the same game, even though they said they weren't supposed to.
That's what these guys did, they got a TMobile employee to break the company policy and tell them something the company, as a whole, tells the employees not to tell anyone.
To read more about Social engineering, look into getting Kevin Mitnick's "The Art of Deception"
http://www.amazon.com/exec/obidos/tg/detail/-/076454280X/qid=1116538208/sr=8-1/ref=pd_csp_1/102-1823989-5712935?v=glance&s=books&n=507846
Like when you ask a guy at EB to "just this once" take multiple copies of the same game, even though they said they weren't supposed to.
That's what these guys did, they got a TMobile employee to break the company policy and tell them something the company, as a whole, tells the employees not to tell anyone.
To read more about Social engineering, look into getting Kevin Mitnick's "The Art of Deception"
http://www.amazon.com/exec/obidos/tg/detail/-/076454280X/qid=1116538208/sr=8-1/ref=pd_csp_1/102-1823989-5712935?v=glance&s=books&n=507846
[quote name='Scorch']Her password was her dog's name.. her login name was her first initial and last name...[/QUOTE]
Where does it say that? All I see is this:
"Later, using their own Sidekick phone, the hackers pulled up the secure T-Mobile customer records site, looked up Hilton's phone number and reset the password for her account, locking her out of it. Typical wireless devices can only be hacked into by someone physically nearby, but a Sidekick's data storage can be accessed from anywhere in T-Mobile's service area by someone with control of the account. That means the hackers were at that point able to download all of her stored video, text and data files to their phone."
Where does it say that? All I see is this:
"Later, using their own Sidekick phone, the hackers pulled up the secure T-Mobile customer records site, looked up Hilton's phone number and reset the password for her account, locking her out of it. Typical wireless devices can only be hacked into by someone physically nearby, but a Sidekick's data storage can be accessed from anywhere in T-Mobile's service area by someone with control of the account. That means the hackers were at that point able to download all of her stored video, text and data files to their phone."
bread's done