[PLUG-TALK] Social Engineering Q&A

[alan]

On Tue, 10 Jul 2007, Michael Rasmussen wrote:

> I'm in a security class this week.  Yesterday we talked about social engineering.
> A spirited discussion revolved around this question.
>
>  The CEO of the organization needs to get access to data immediately.
>  You definitely recognize her voice, but a proper request form hasn't
>  been filled out to modify the premissions. She states that normally
>  she would fill out the form and should not be an exception, but she
>  urgently needs the data.
>
> Is this a social enginnering attack?
> True or False

True.

-- 
"ANSI C says access to the padding fields of a struct is undefined.
ANSI C also says that struct assignment is a memcpy. Therefore struct
assignment in ANSI C is a violation of ANSI C..."
                                   - Alan Cox