I happily claim (or admit) to be a Hacker. Being a hacker who has become responsible for corporate network security, I was not surprised by much in Kevin Mitnick's "The Art of Deception" even though many found the "social engineering" techniques in this renowned hacker's book to be shocking.
I had a great opportunity to exercise my social engineering skills against an Internet Service Provider we recently signed up with. You see, they sell a router box to connect your computer network to their Internet connection, but they absolutely refuse to provide you the password to configure the features of the router box. There is a "terminal service" that operates at a certain address on the router that lets you configure the router box after you enter a password. We use a lot of features that need to be configured, so this is really not a very good situation for me not to know the password even though I understand that they want to avoid less clueful technical folks mucking up their router box and calling for support.
In the old days (2001 is the old days when you talk of computers, I suppose), it was easy because you could just press a button on the box and it would allow you to log in with a number printer on the bottom of the router and you could do a little trick to read the password right out of the router's configuration. Now, it you press the button, the router resets to a default configuration and, even though you can retrieve the proper configuration, the password is now encrypted and not readable in the router's configuration. In theory, this makes retrieving the password impossible. Even though you can reset the unit and assign your own password, you can never know or keep the provider's password, so they'll eventually catch on and that might be bad.
A hacker, however, knows that nothing is impossible where people are involved, so here's what I did... I reset the router and assigned my own password. I configured the router to provide its configuration service on address 2323 instead of the usual address 23. I then told the router that I wanted to provide a service on address 23 on my server on the connected network. The result was that connections to address 23 that would usually configure the router would instead go to my server. I then installed a simple program that asked for the password, saved it, and acted as if it was a wrong password, asking the user to try again.
Then for the social engineering... I called the Internet Provider and explained that we suddenly couldn't get on the Internet even though the router had all the right status lights on. Just moments after I started talking to the tech, I noticed a connection to my server and a password was entered. Sure enough, he was trying to check the configuration of the router and typing to my program instead.
The password was pretty good; something you wouldn't guess like "tw8279ty", but good passwords obviously are not the biggest part of good security. After that password didn't get him what he was after and while I chatted with him about the "Internet problem", he entered over a dozen other passwords which I presume were the entire range of passwords they use on various equipment. He eventually admitted he was having trouble and I told him that I was the night technician (wince it was 12:20am) and didn't want to do anything without talking to the day technician and he was relieved that someone would call and talk to someone else so he didn't have to figure this problem out. A win/win situation, especially for me.
So remember, if you're a technical person, design security so that it people can't or won't be the biggest hole, and, if you're not a technical person, remember that you can't rely on a technical solution for security, you must be mindful and involved with security yourself. By the way, the first two of our locations are already up and running with their new super-configured router boxes.
LOVE the Cowboy Junkies and hope you feel better soon
thanks again for all your hard work on our system....pretty zippy
I should have demanded server update porn or something...
feel better.