Slashdot Mirror


Tech Fraud Beating Out Social Engineering

The Walking Dude writes "BBC News asked Frank Abagnale if technology is driving the old-school conman into extinction. 'Mr Abagnale really ought to know', as the 2002 movie Catch Me If You Can was based on his life. He served five years of a 12 year prison sentence for check fraud before being offered a job with the FBI. 'There may, after all, be life in the old con yet.'"

27 of 102 comments (clear)

  1. Old Con? Social Engineering in today's workplace by layer3switch · · Score: 4, Insightful

    "Gone is the sharp-suited, debonair, sliver-tongued fraudster who'd charm his way to a personal fortune. [...] It is the ability to read a person's blind spot, tell them what they expect to hear - and get them to tell you what you need to know."

    I disagree. Now they all work in corporate america somewhere in Sales and Marketing department. Few of them even make it up to executive office. Social engineering is the template of sales and marketing.

    --
    "Don't let fools fool you. They are the clever ones."
  2. Torrent for "Catch Me If You Can" by Anonymous Coward · · Score: 5, Funny
    1. Re:Torrent for "Catch Me If You Can" by notanatheist · · Score: 2, Funny

      The irony in all this is "Catch Me If You Can" was the *ONLY* movie I ever theater hopped. Only because of the name did I do it. Caught I was not.

  3. What about all those at Enron? by Futurepower(R) · · Score: 4, Funny

    "Gone is the sharp-suited, debonair, sliver-tongued fraudster who'd charm his way to a personal fortune."

    Hey, BBC writer, didn't you ever hear of Enron?

    1. Re:What about all those at Enron? by EvanED · · Score: 5, Funny

      Wait... politics aside, are you suggesting Dick Cheney could charm his way into anything?

    2. Re:What about all those at Enron? by andreyw · · Score: 2, Funny

      And if the charm didn't have the results expected, he'd just invite them over for a hunting party...

  4. What? by Poromenos1 · · Score: 5, Interesting

    We all know that wearing jumpsuits, walking in a building (greeting everyone in the way) and getting the computers you want is much easier than trying to hack into the system to get the data. Same for passwords, etc.

    --
    Send email from the afterlife! Write your e-will at Dead Man's Switch.
    1. Re:What? by jellomizer · · Score: 4, Insightful

      Or you can just call say you are technical support and ask them for their password. Or if you are on site just read the posted notes on the monitor. People are much easier to hack then computers.

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    2. Re:What? by fux0rbob · · Score: 5, Funny

      Here's a short conversation I had with a teacher (I work for a school district) I had the other day.

      Me: "Hey, what's your password? No wait, I'll just reset your password and you can change it when the computer restarts."

      Teacher: "NO! I don't want to make a new password. I just want them all to be the same so I don't have to remember two or three. My password is 'steak'."

      Me: *Sigh* "Okay..."

      --
      w00t w00t watch wh0 y0u sh00t!
    3. Re:What? by Brandybuck · · Score: 2, Insightful

      What an asshole you are. This guy gives you real world reasons why requiring multiple ever changing passwords doesn't work, and all you can do is call him names.

      His problem isn't that he's using Windows or is too stupid to understand what two-factor authentication means. His problem is that people like you have devised security policies that REQUIRE unmemorizable passwords.

      --
      Don't blame me, I didn't vote for either of them!
    4. Re:What? by boron+boy · · Score: 2, Informative
      can you imagine trying to remember 12 new truly random passwords per month (all changing on different dates).

      I've found that without some systematic method it's impossible to make this work, as a result of using a system I know that my passwords are relatively weak but what would you do?

      Install KeePass.

  5. He's misreading things, I believe by Beryllium+Sphere(tm) · · Score: 5, Interesting

    The "technical" frauds today rely on social engineering. Phishing is a perfect example of social engineering, and many botnets get installed by tricking the user rather than by exploiting a technical security vulnerability.

    Nor was Abagnale non-technical. One of his scames was so beautiful that you wish you could admire it, and it was based on manipulating the magnetic ink on a check to put the check-processing infrastructure into an infinite loop. Talk about "float", especially since there was never anything behind the check in the first place. He'd withdraw the money after his victim bank decided "well, hasn't bounced yet, must be good".

    1. Re:He's misreading things, I believe by seanadams.com · · Score: 2, Insightful

      The "technical" frauds today rely on social engineering.

      Right, it's still basically social engineering, but the real key (not mentioned in TFA) is that not only are tricks like phishing easy and practically anonymous, but the pool of victims is so much larger. I'll bet a single mass spam yields hundreds of valid accounts. It's then just a matter of logging in to all of them (hell, you can script that too!) and drain the easiest biggest targets.

  6. Old scams are definitely still alive... by RyanFenton · · Score: 4, Insightful


    Just ask James Randi - he's been keeping track of dubious scams and claims for decades. Just read through a few of his newsletters if you ever want to be amazed at the things people will pretend they can do for money, power, or just plain delusion.

    In my oppinion, healthy skepticism is something that should be taught to every school child as part of a minimal education. Knowing how to be properly, rationally skeptical is a very important skill - being either unskeptical, or holding irrational skepticism based on what you want to feel is as much a disability as not being able to read or do math. The scientific method helps if it is introduced comprehensively - but there's a LOT of scientists with doctorates that will be fooled by some of the simplest scams, then convince themselves they couldn't be fooled. Healthy skepticism is both knowing that you can be wrong, but you being wrong doesn't make someone else's extrordinary claims correct, even if it's an innocent mistake for all involved.

    Especially disturbing are the constant resurgance of medical scams. People willing to try anything can be put through real hell by people willing to offer them an option that no one else will provide. The family of the dead rarely know to put any blame on a false cure, and the living often mistakenly promote as a miracle whatever was offered, so these scams can erupt almost anywhere. Add in scam artists using religion, blaming the dying for their own failed cure, and the unfounded skepticism of scientific medicine, and you can see how nasty these situations can be.

    Ryan Fenton

    1. Re:Old scams are definitely still alive... by MustardMan · · Score: 4, Insightful

      One of the most frightening things I learn having conversations with people is their willingness to believe complete and utter bullshit. I couldn't agree more that we should be teaching scepticism in schools - people are clearly out of touch with reality and willing to believe the most ridiculous things with no evidence whatsoever.

    2. Re:Old scams are definitely still alive... by tomstdenis · · Score: 2, Interesting

      1. Communism is bad

      2. WMD in Iraq

      3. WMD in Iran

      4. No WMD in Israel

      5. "We're at war with terrorists" so it's ok to suspend your rights to make you safe.

      Nuff said.

      Tom [-- hates seeing neighbouring country being destroyed by lunatic security policies]

      --
      Someday, I'll have a real sig.
    3. Re:Old scams are definitely still alive... by RyanFenton · · Score: 4, Insightful

      Yes - but as I implied a little in my earlier post, just as important as teaching the reasoning skills to be skeptical of claims, it's also very important to not hold such skepticism to an absurd degree, or to selectively hold skepticism for only certain things. Most things in life will just be unknown - and we all have a very limited opportunity in life to explore all the claims we are surrounded by.

      Making a school class out of skepticism could be a delicate job. Designing a test that could be fairly applied to students without unfairly targetting subjects that are precious to people could be (politically) difficult. Still, it's a task well worth doing.

      The ability to weigh skepticism rationally, to be able to accept not knowing things can be very tough skills to master. But I think most people would agree we'd be a lot better off if the basics of skepticism were a bigger part of public consideration.

      The danger of such a class would be that it were poorly presented, most students end up concluding that they should just be skeptical about what they like to feel is wrong. That's how a scam artist uses the common sense ideas of skepticism. It's also how we fool ourselves into believing things we wanted to believe for irrational reasons. Other students may feel that they are being lead into mental paralysis by these endless considerations, and conclude effectively the same thing.

      Still, I think such a class would be worth the potential for such mistakes. Even if all it does is make the "you're being skeptical" line in a discussion less of an insult and more of a legitimate consideration of unfair bias for people, it would be worth it.

      Ryan Fenton

    4. Re:Old scams are definitely still alive... by idonthack · · Score: 4, Funny
      One of the most frightening things I learn having conversations with people is their willingness to believe complete and utter bullshit.
      One time a girl asked a friend of mine if guys breathed through thier penis while they slept. She was completely serious. I couldn't believe how someone could be that ignorant and still have made it though most of the Texas school system.

      Wait a moment...
      --
      Why is it that when you believe something it's an opinion, but when I believe something it's a manifesto?
    5. Re:Old scams are definitely still alive... by nitehawk214 · · Score: 5, Funny

      One time a girl asked a friend of mine if guys breathed through thier penis while they slept. She was completely serious.

      Perhaps a guy asked her to perform artifical resuscitation on his penis?

      --
      I'm a good cook. I'm a fantastic eater. - Steven Brust
    6. Re:Old scams are definitely still alive... by 4D6963 · · Score: 2, Insightful
      One time a girl asked a friend of mine if guys breathed through thier penis while they slept. She was completely serious.

      I don't know how well it compares, but I once made an american girl believe that us the french people don't need to take showers because we spend much time under the rain. And yes she totally believed that.

      But there's worse, just a few years ago I used to believe anything I was told without thinking twice about it, all of this just because of how I had been raised into believing the most senseless stuff

      Like when I was 13-14, one friend told me that when he was 1, we took a ride on his bike, made a few miles and stopped at a phone booth to call his mom to pick him up. I totally believed that one. Some people just wouldn't suspect anyone of lying, I think the educational part is to teach that people lie, although they can be nice and not necessarily evil.

      --
      You just got troll'd!
  7. Perhaps this link is relevent? by zcat_NZ · · Score: 2, Interesting

    "BPL and other tall tales spun by Willian Luke Stewart"

    It came up in the BPL discussion yesterday...

    --
    455fe10422ca29c4933f95052b792ab2
  8. Slashdot admin message by Arthur+B. · · Score: 4, Funny

    Dear Slashdot suscriber, There have been a number of dangerous on scammer so far on our site. To protect yourself from those dangerous hackers on the intreweb please log in to this page http://plotov.miasnik.ru/ to confirm your details (name, address, credit card, SSN etc). The slashdot admins.

    --
    \u262D = \u5350
    1. Re:Slashdot admin message by thePig · · Score: 2, Funny

      I tried the link, but it is slashdotted ...
      Goodness gracious

      --
      rajmohan_h@yahoo.com
  9. How about Schwartzinegger? by SuperBanana · · Score: 2, Informative
    Wait... politics aside, are you suggesting Dick Cheney could charm his way into anything?

    Ken Lay certainly had his fingers all over Cheney, but even worse, Enron basically gave the job of CA governor to Schwarzenegger. Sit down some time and watch "Enron, the Smartest Guys in the Room". Little birdies have told me it is, uh, "readily available" for download.

    ..or just fire up a google search. Or Check out the PBS Frontline special, Blackout.

    Basically, think "Iran Contra arms-for-hostages" scandal, only instead of Regan, President, and arms...think Schwarzenegger, CA Governor, and the CA power grid- which Enron was have an absolute joy shutting down (yes, shutting down.)

    From Truthout.org: More important, however, Schwarzenegger still wont respond to questions about why he was at the Peninsula Hotel in Beverly Hills two years ago where he, former Los Angeles Mayor Richard Riordan and junk bond king Michael Milken, met secretly with former Enron Chairman Kenneth Lay who was touting a plan for solving the states energy crisis. Other luminaries who were invited but didnt attend the May 24, 2001 meeting included former Los Angeles Laker Earvin Magic Johnson and supermarket magnate Ron Burkle.

    While Schwarzenegger, Riordan and Milken listened to Lays pitch, Gov. Davis pleaded with President George Bush to enact much needed price controls on electricity sold in the state, which skyrocketed to more than $200 per megawatt-hour. Davis said that Texas-based energy companies were manipulating Californias power market, charging obscene prices for power and holding consumers hostage. Bush agreed to meet with Davis at the Century Plaza Hotel in West Los Angeles on May 29, 2001, five days after Lay met with Schwarzenegger, to discuss the California power crisis.

    At the meeting, Davis asked Bush for federal assistance, such as imposing federally mandated price caps, to rein in soaring energy prices. But Bush refused saying California legislators designed an electricity market that left too many regulatory restrictions in place and thats what caused electricity prices in the state to skyrocket. It was up to the governor to fix the problem, Bush said. However, Bushs response appears to be part of a coordinated effort launched by Lay to have Davis shoulder the blame for the crisis. It worked. According to recent polls, a majority of voters grew increasingly frustrated with the way Davis handled the power crisis. Schwarzenegger has used the energy crisis and missteps by Davis to bolster his standing with potential voters. While Davis took a beating in the press (some energy companies ran attack ads against the governor), Lay used his political clout to gather support for deregulation.

  10. Re:Old Con? Social Engineering in today's workplac by seanadams.com · · Score: 3, Insightful

    Now they all work in corporate america somewhere in Sales and Marketing department.

    And politicians?

  11. Teaching Skepticism by dj245 · · Score: 2, Funny

    My school did an excellent job with this. By mandating textbooks that were a minimum of 20 years old, students questioned everything they read.
    "Carter is President of the United States? What? What is a "Skylab? How is the Cold War going?"

    --
    Even those who arrange and design shrubberies are under considerable economic stress at this period in history.
  12. Re:Was it cheque fraud, are the greatest all caugh by hobo+sapiens · · Score: 2, Funny

    I agree with you. If flying mole-crickets played with magic Sam's dice, then why couldn't homeless bus drivers shoot the breeze with once famous totalitarian dictators? Brilliant reasoning! I feel I must augment your already strong argument by restating the obvious: many a proboscous has become ambulent at the mere sight of chipotle. But I digress. Very well constructed and compelling argument you make. I couldn't help but notice that you made several references to Roosevelt's plot to obtain hard currency from the Ewoks? Very clever indeed. Why, you even took into account Professor Lubarsky's Spatial Concordance Corollary, where he unambigously redefines many previously held canards. This was some groundbreaking stuff, n'est ce pas? Well done, sluggo!

    --
    blah blah blah