<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>MIPRO Unfiltered &#187; social engineering</title>
	<atom:link href="http://www.miproconsulting.com/blog/tag/social-engineering/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.miproconsulting.com/blog</link>
	<description>MIPRO Consulting on PeopleSoft, Business Intelligence and General Nerdery</description>
	<lastBuildDate>Wed, 08 Feb 2012 23:00:24 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>The Economics of Advice</title>
		<link>http://www.miproconsulting.com/blog/2010/01/economics-advice/</link>
		<comments>http://www.miproconsulting.com/blog/2010/01/economics-advice/#comments</comments>
		<pubDate>Tue, 05 Jan 2010 19:53:16 +0000</pubDate>
		<dc:creator>Jeff Ventura</dc:creator>
				<category><![CDATA[Business]]></category>
		<category><![CDATA[Culture]]></category>
		<category><![CDATA[management]]></category>
		<category><![CDATA[Opinion]]></category>
		<category><![CDATA[advice]]></category>
		<category><![CDATA[economics]]></category>
		<category><![CDATA[psychology]]></category>
		<category><![CDATA[relationships]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[trust]]></category>

		<guid isPermaLink="false">http://www.miproconsulting.com/blog/?p=1022</guid>
		<description><![CDATA[Tyler Cowen with some propositions about the economics of advice and how advice relates to understanding fellow humans a bit better: 1. You don&#8217;t know what a person really thinks until you hear his or her advice. Along these lines, if you really want to know what a person thinks, ask for advice and he [...]]]></description>
			<content:encoded><![CDATA[<p></p><p><a href="http://www.marginalrevolution.com/marginalrevolution/2010/01/the-economics-of-advice.html" target="blank">Tyler Cowen with some propositions about the economics of advice</a> and how advice relates to understanding fellow humans a bit better:</p>
<blockquote><p>1. You don&#8217;t know what a person really thinks until you hear his or her advice.  Along these lines, if you really want to know what a person thinks, ask for advice and he or she will open up.</p>
<p>2. In philanthropy there is a saying: &#8220;Ask for money and you will get advice.  Ask for advice and you will get money.&#8221;</p>
<p>3. There are many exacting scholars who should be locked in a room, asked for advice of various kinds, and forced to speak into a tape recorder with no edits allowed.  The advice-giving mode mobilizes insights which otherwise remain dormant, perhaps for fear of falsification or ridicule or of actually influencing people.  All of the transcripts should be put on The Advice Website, with an open comments section, to limit the actual influence of the advice.  Some famous people would be revealed as foolish in critical regards.  The contents would be most interesting as non-advice and the site would carry a government warning that the advice is not to be taken seriously.</p>
<p>4. Often we do not trust people until we hear their advice.  We suspect in any case that they wish to control us, and until we know what they have in mind, we remain wary.  Sometimes it is necessary to give advice &#8212; even pointless advice &#8212; to establish trust.</p></blockquote>
<p>Naturally, these guidelines don&#8217;t apply to medical advice, and it&#8217;s probably a good idea to invest a bit more due diligence in <a href="http://www.marketwatch.com/story//money-for-nothing-2010-01-05" target="blank">someone who writes for a living</a>.</p>
<p>Nonetheless, as business communications get more human every day, perhaps the astute entrepreneur, executive or salesperson might consider engaging colleagues at this entirely different level to open some new conversational and relationship doors.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.miproconsulting.com/blog/2010/01/economics-advice/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Change Blindness</title>
		<link>http://www.miproconsulting.com/blog/2009/12/change-blindness/</link>
		<comments>http://www.miproconsulting.com/blog/2009/12/change-blindness/#comments</comments>
		<pubDate>Tue, 15 Dec 2009 13:50:30 +0000</pubDate>
		<dc:creator>Jeff Ventura</dc:creator>
				<category><![CDATA[Nerdery]]></category>
		<category><![CDATA[Science]]></category>
		<category><![CDATA[cognition]]></category>
		<category><![CDATA[experimental psychology]]></category>
		<category><![CDATA[perception]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[social experiments]]></category>

		<guid isPermaLink="false">http://www.miproconsulting.com/blog/2009/12/change-blindness/</guid>
		<description><![CDATA[Absolutely fascinating: Dinotopia artist James Gurney posted this video about a &#34;change blindness&#34; experiment. 75% of the participants didn&#8217;t notice that the experimenter who bent under a counter was replaced by a different person. Says Gurney: &#34;Here&#8217;s proof that most of the time we look but don&#8217;t see.&#34; I think Matisse said something to the [...]]]></description>
			<content:encoded><![CDATA[<p></p><p><a href="http://www.boingboing.net/2009/12/14/change-blindness-exp.html" target="_blank">Absolutely fascinating</a>:</p>
<blockquote><p><em>Dinotopia</em> artist <a href="http://gurneyjourney.blogspot.com/2009/12/change-blindness.html">James Gurney</a> posted this video about a &quot;change blindness&quot; experiment. 75% of the participants didn&#8217;t notice that the experimenter who bent under a counter was replaced by a different person. Says Gurney: &quot;Here&#8217;s proof that most of the time we look but don&#8217;t see.&quot; I think Matisse said something to the effect that he didn&#8217;t really see things unless he was painting them.</p>
</blockquote>
<div style="padding-bottom: 0px; margin: 0px; padding-left: 0px; padding-right: 0px; display: inline; float: none; padding-top: 0px" id="scid:5737277B-5D6D-4f48-ABFC-DD9C333F4C5D:41e548cd-6b21-4a97-beba-cdaa77215df8" class="wlWriterEditableSmartContent">
<div><object width="425" height="355"><param name="movie" value="http://www.youtube.com/v/38XO7ac9eSs&amp;hl=en"></param><embed src="http://www.youtube.com/v/38XO7ac9eSs&amp;hl=en" type="application/x-shockwave-flash" width="425" height="355"></embed></object></div>
</div>
]]></content:encoded>
			<wfw:commentRss>http://www.miproconsulting.com/blog/2009/12/change-blindness/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Heads-up: IRS Spam Now in the Wild</title>
		<link>http://www.miproconsulting.com/blog/2008/07/irs-spam/</link>
		<comments>http://www.miproconsulting.com/blog/2008/07/irs-spam/#comments</comments>
		<pubDate>Wed, 02 Jul 2008 17:38:08 +0000</pubDate>
		<dc:creator>Jeff Ventura</dc:creator>
				<category><![CDATA[Nerdery]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Web 2.0]]></category>
		<category><![CDATA[email scams]]></category>
		<category><![CDATA[irs spam]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[scams]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[threats]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[viruses]]></category>

		<guid isPermaLink="false">http://www.miproconsulting.com/blog/?p=35</guid>
		<description><![CDATA[Must be the season for social-engineering spam, because if you thought this was bad, get a load of what just showed up in my inbox: This is a well-done ploy on many counts: it appears to be from the IRS, implicates my employer, looks official, and logically follows tax season. The attachment, a Word DOC, [...]]]></description>
			<content:encoded><![CDATA[<p></p><p>Must be the season for social-engineering spam, because if you thought <a href="http://www.miproconsulting.com/blog/2008/06/24/dns-spam/" target="blank">this</a> was bad, get a load of what just showed up in my inbox:</p>
<p><img src="http://www.miproconsulting.com/blog/wp-content/uploads/2008/07/irs-spam.png" alt="IRS spam.png" border="0" width="380" height="406" /></p>
<p>This is a well-done ploy on many counts: it appears to be from the IRS, implicates my employer, looks official, and logically follows tax season.  The attachment, a Word DOC, was opened without incident on my Mac, but the document showed an embedded object foreign to my operating system (OSX Leopard), so there was no issue.</p>
<p><a href="http://www.spamstopshere.com/blog/2008/04/04/an-official-looking-e-mail-from-the-irs-may-be-a-virus/" target="blank">Deeper research</a> shows that it quite possibly might be a trojan horse that installs a virus; if you read the comments in the previous link, you&#8217;ll see different delivery mechanisms.  Some are PDFs, some ZIP files, some DOCs.  Regardless, it seems as if the object, regardless of its wrapper, installs some sort of malicious payload.</p>
<p>Be careful.  This ploy was clever enough to get past SpamAssassin, so I&#8217;d guess most antispam definitions don&#8217;t have this one in their tables yet.</p>
<p>If you&#8217;ve received anything like this, post it below so others can understand what&#8217;s floating around out there.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.miproconsulting.com/blog/2008/07/irs-spam/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>In This Morning&#8217;s Inbox: Clever Domain Name Spam</title>
		<link>http://www.miproconsulting.com/blog/2008/06/dns-spam/</link>
		<comments>http://www.miproconsulting.com/blog/2008/06/dns-spam/#comments</comments>
		<pubDate>Tue, 24 Jun 2008 14:16:37 +0000</pubDate>
		<dc:creator>Jeff Ventura</dc:creator>
				<category><![CDATA[Business]]></category>
		<category><![CDATA[Marketing]]></category>
		<category><![CDATA[Nerdery]]></category>
		<category><![CDATA[Web 2.0]]></category>
		<category><![CDATA[dns spam]]></category>
		<category><![CDATA[internet]]></category>
		<category><![CDATA[scams]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://www.miproconsulting.com/blog/2008/06/24/dns-spam/</guid>
		<description><![CDATA[I found this waiting for me in my inbox this morning.  Fun! Dear CEO, We are a domain name registrar centre in HongKong.and in charge of the registeration in Asia.We have something important need to confirm with your company. We received a formal application from a company called &#8220;sa-lar yun Investment Corp&#8221; applying to register [...]]]></description>
			<content:encoded><![CDATA[<p></p><p><span class="drop_cap">I</span> found this waiting for me in my inbox this morning.  Fun!</p>
<blockquote><p>Dear CEO,</p>
<p>We are a domain name registrar centre in HongKong.and in charge of the registeration in Asia.We have something important need to confirm with your company.</p>
<p>We received a formal application from a company called &#8220;sa-lar yun Investment Corp&#8221; applying to register</p>
<p>Internet  trademark:</p>
<p>Miproconsulting</p>
<p>Domain names:<br />
miproconsulting.asia<br />
miproconsulting.biz<br />
miproconsulting.cc<br />
miproconsulting.cn<br />
miproconsulting.com.cn<br />
miproconsulting.com.tw<br />
miproconsulting.hk<br />
miproconsulting.net.cn<br />
miproconsulting.org.cn<br />
miproconsulting.tw</p>
<p>in China and also in Asia on Jun. 23. 2008.</p>
<p>During our auditing procedure we find out that the alleged &#8220;sa-lar yun Investment Corp&#8221; has no trade mark, Intellectual property, nor patent even similar to that word. as an authoritative registration organization, we have the duty to inform you this matter. If you do not know this company,  we doubt that they have other aims to buy these domain names. Now we have not finished the registration of  sa-lar yun Investment Corp yet, in order to deal with this issue better, please let someone who is responsible for trademark or domain name contact me as soon as possible.</p>
<p>Best Regards,</p>
<p>Hayee<br />
Auditing Department<br />
SK Holdings, Ltd.</p></blockquote>
<p>This is clever and it took a bit of time to figure out the pathology.  But there is one, and it&#8217;s interesting.</p>
<p><span id="more-24"></span></p>
<p>This approach is obviously personalized to the owner/manager of a commercial Internet brand and hints at risk to our online trademark (<em>miproconsulting</em>) due to a foreign application being made for our trademark name in country-specific flavors (.asia, .biz, .cc, .cn, .com. cn., .hk, etc.).  Being the nice foreign domain registrar they are, the sender of this message, SK Holdings, is asking us if we want to do business with them and secure all of the <em>miproconsulting</em> variants listed below so that we can protect our Internet brand from this foreign applicant.</p>
<p>Isn&#8217;t it nice that someone halfway across the globe is looking out for our best interests?  Makes me want to do business with them <em>right away.</em></p>
<p>There are <a href="http://www.firetrust.com/en/blog/chris/domain-name-scams" target="_blank">many versions of this floating around the web</a>, most of which have Chinese senders.  Seems they&#8217;re really advancing their <a href="http://en.wikipedia.org/wiki/Social_engineering_(security)" target="_blank">pretexting</a> game.  Hooray.</p>
<p>If you&#8217;ve stumbled across this yourself, paste a copy of the email you received in the comments.  Like other spam of this ilk, there are likely countless variants out there.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.miproconsulting.com/blog/2008/06/dns-spam/feed/</wfw:commentRss>
		<slash:comments>119</slash:comments>
		</item>
	</channel>
</rss>

