Proceedings Of The Marine

WIN 2015

Proceedings magazine is a communication tool for the Coast Guard's Marine Safety & Security Council. Each quarterly magazine focuses on a specific theme of interest to the marine industry.

Issue link: https://uscgproceedings.epubxp.com/i/436751

Contents of this Issue

Navigation

Page 27 of 94

25 Winter 2014 – 2015 Proceedings www.uscg.mil/proceedings Using lingo helps create trust, because the person sees who- ever uses the lingo as being one of them or understanding them, so is more likely to trust that person. By nature, human beings want to be helpful. By default, when someone claiming to be of authority asks us to do something, we want it to be authentic. When we fnd any evidence at all that it is, we naturally cling to it and we feel relief. Why Did This Work? So, why did the operator do what I asked? First, I knew the "lingo." TSPS was shorthand for the operator's position (Traffc Service Position System), so "TSPS Engineering" sounded legit. Pressing the "No AMA" key assured that the call would not be billed. This knowledge allowed me to speak with confdence and to sound convincing that I was who I said I was, so the operator trusted me and did what I asked. Hacking 101 Using social engineering increases security attack effectiveness. by MR. ROn sChnell Adjunct Professor of Computer Security Nova Southeastern University Information Systems In 1982, I was 15 years old, attending a boarding school in Massachusetts. A good friend of mine was a well-known hacker who taught me how to use social engineering to gain access to protected systems, obtain secret information, and even cause people to per- form actions that they should not have. As hackers (or friends of hackers) do, I wanted to show my classmates how it was done. They gathered around the dorm payphone as I lifted the receiver and dialed "0" for operator. In those days, there were actually people at consoles helping you with phone calls, answering questions, or even interrupting a phone call in case of an emergency. The call went something like this: Operator: Operator, can I help you? Ron: Yes, this is Bob from TSPS Engineering. I need to run a test on your station. Operator: Um, okay sure. Ron: I need you to type the following on your console: KP, two zero one, five, five, five, three, eight, four, nine. Operator: Okay Ron: Okay, now I need you to press ST and please go "No AMA" on that, alright? Operator: Yes, sir. A second later, I was connected to a number in New Jersey — for free. At the time, that call would have cost me several dollars, but I didn't even put a dime into the phone. acidgrey / iStock / Thinkstock

Articles in this issue

Links on this page

Archives of this issue

view archives of Proceedings Of The Marine - WIN 2015