[00:00.000 --> 00:01.840] Yeah, you have to hold this in. [00:02.680 --> 00:03.120] Go? [00:09.200 --> 00:10.160] You happy, Frank? [00:10.260 --> 00:10.700] Oh, yes. [00:10.880 --> 00:11.800] All right, all right. [00:13.520 --> 00:13.960] What? [00:14.740 --> 00:14.820] What? [00:15.020 --> 00:15.980] There's too many of you. [00:16.160 --> 00:16.580] I'm trying to start. [00:16.840 --> 00:17.640] Do it yourself. [00:20.380 --> 00:21.060] Thank you. [00:21.360 --> 00:22.580] That's very nice of you. [00:27.500 --> 00:34.340] One of the most popular panels at any HOPE conference is social engineering. [00:44.720 --> 00:50.860] Some of the funniest phone calls I've ever heard in my life were done in this room on this panel. [00:51.180 --> 00:54.720] Social engineering isn't just phone calls. [00:54.940 --> 00:57.040] There's all sorts of exploits you can do. [00:57.040 --> 01:05.820] You'd be amazed how many concerts you could get into just by holding a clipboard, having a walkie-talkie, and looking really annoyed at anybody that talks to you. [01:06.280 --> 01:07.820] Why are you giving away my secrets? [01:08.000 --> 01:08.540] How many times? [01:09.020 --> 01:12.420] I even got into a Korn concert that way, and I don't even like Korn. [01:15.440 --> 01:17.680] But we know that things are a little behind tonight. [01:17.880 --> 01:25.420] The 10 PM Engressia talk XSS MITM attacks will start after Kevin Mitnick's discussion. [01:25.420 --> 01:29.740] So, without further ado, this is social engineering. [01:31.040 --> 01:31.480] Welcome. [01:37.980 --> 01:39.280] Are we all having fun? [01:43.510 --> 01:43.950] Good. [01:44.890 --> 01:47.630] Yeah, this is the most fun panel, I think. [01:48.030 --> 01:49.930] We've had it since the first HOPE in 1994. [01:50.290 --> 01:52.190] And we just kind of... we share stories. [01:52.450 --> 01:54.030] We try to make some phone calls. [01:54.130 --> 01:55.410] Sometimes it works, sometimes it doesn't. [01:55.630 --> 02:00.510] But mostly I think we educate people as to how easy it is to get information that we're really not supposed to have. [02:00.510 --> 02:03.390] And that's sort of what makes it so much fun in the first place. [02:03.850 --> 02:05.550] I'd like to introduce people. [02:05.670 --> 02:08.830] Maybe the person responsible for that photograph can talk first. [02:10.150 --> 02:10.350] Oh, hi. [02:10.450 --> 02:10.930] I'm Bernie S. [02:17.240 --> 02:18.500] How did you get the photo? [02:19.380 --> 02:21.360] And welcome to the land of make-believe. [02:24.200 --> 02:24.600] There's... [02:24.600 --> 02:24.940] There's... [02:24.940 --> 02:25.860] Yeah, New Jersey... [02:25.860 --> 02:26.260] Well, no. [02:26.540 --> 02:28.060] This is the HOPE police. [02:28.940 --> 02:30.460] The HOPE barracks. [02:30.900 --> 02:34.080] And I was in the New Jersey Turnpike a couple of weeks ago. [02:34.340 --> 02:35.680] And I passed that sign. [02:35.980 --> 02:37.020] And I had to... [02:37.020 --> 02:37.980] Pass those signs. [02:38.160 --> 02:39.320] And I had to get a picture of this. [02:39.640 --> 02:43.020] So, further on down the road, you can see where that green sign is. [02:43.020 --> 02:48.440] I pulled off the turnpike and got out with my camera. [02:49.160 --> 02:52.980] And then, moments later, two New Jersey State troopers pulled up behind me. [02:53.600 --> 02:54.920] And wanted to know what I was doing. [02:55.180 --> 02:56.860] I was well off the road in a grassy area. [02:57.240 --> 03:00.380] But I had to make up a... [03:00.380 --> 03:01.720] I had to give them a quick story. [03:01.900 --> 03:05.820] Because I knew that pulling over there probably was a finable offense. [03:06.180 --> 03:08.720] And I didn't want an uncomfortable police situation. [03:08.720 --> 03:11.960] So, I said, a really important piece of paper blew out of my window. [03:12.240 --> 03:16.100] And it blew back behind where this blue and brown sign was. [03:17.200 --> 03:18.920] And I really need to find that. [03:19.480 --> 03:19.800] Because... [03:20.460 --> 03:22.560] Well, I went into reasons why I had to find it. [03:22.620 --> 03:25.600] In any case, they're like, well, we'll help you find it then. [03:29.910 --> 03:32.170] So, I thought, well, I might as well take advantage of this. [03:32.290 --> 03:33.330] And get them to go up by the sign. [03:33.470 --> 03:35.610] So, I can take a picture of them with them in it. [03:38.870 --> 03:40.070] And you can see them there. [03:40.070 --> 03:44.790] So, there's two New Jersey State Troopers in the land of make-believe from the Hope Barracks. [03:45.570 --> 03:49.010] And the social engineering here was in getting them to not find me. [03:49.170 --> 03:50.570] And to get them in this photo. [03:50.890 --> 03:53.270] So, I didn't have to get any information from them. [03:53.470 --> 03:55.090] But it's another example of social engineering. [03:56.550 --> 03:57.470] And remember this. [03:57.570 --> 03:58.670] The police are your friends. [03:58.950 --> 04:05.010] They will do all sorts of things for you if they believe you have the authority to have them help you. [04:05.170 --> 04:06.870] It's really kind of a cool thing. [04:06.870 --> 04:11.770] We have one of the greatest social engineering tools downstairs. [04:12.110 --> 04:12.870] You guys know what it is? [04:13.710 --> 04:14.570] Anybody want to guess? [04:14.970 --> 04:15.190] Sorry? [04:16.250 --> 04:16.770] No? [04:17.530 --> 04:18.570] I'll give you a hint. [04:18.750 --> 04:19.370] It's outside. [04:20.170 --> 04:20.690] Yes. [04:20.850 --> 04:21.310] The van. [04:21.650 --> 04:24.890] That van is the biggest social engineering tool I've ever seen. [04:24.890 --> 04:28.950] Because when people see the phone company van, they just assume you've got authority. [04:30.050 --> 04:33.150] And what's really cool, I talked about this on the radio this week. [04:33.770 --> 04:36.490] Even though this thing was painted in 1994. [04:36.910 --> 04:41.870] And it has the old gold, white, and blue bell stripes. [04:42.190 --> 04:44.890] Verizon is now, you know, they're this ugly color. [04:45.050 --> 04:46.410] They're red, black, and white. [04:46.950 --> 04:49.430] Their trucks have not looked anything like that in years. [04:49.430 --> 04:52.670] Yet, they still wave at this truck when it goes by as if it's one of them. [04:56.710 --> 05:02.190] And I can still pull into any phone company garage or fenced-in area and they will open it. [05:02.610 --> 05:06.530] I guess they're thinking that, wow, that's a long service call and you're finally coming home. [05:10.370 --> 05:14.810] But I think the most fun I had was when I was moving a friend of mine a few weeks ago. [05:15.250 --> 05:16.670] And I don't know if you guys heard about this. [05:16.770 --> 05:20.370] But there was a crane collapse in New York City a month or two ago. [05:20.670 --> 05:23.830] Whenever you see a crane up in the air in New York City, eventually it's going to collapse. [05:24.350 --> 05:27.490] And this one collapsed literally the day before I was going to move my friend. [05:27.650 --> 05:29.770] So the whole street was closed off. [05:29.910 --> 05:31.790] And nobody could go up or down the thing. [05:31.870 --> 05:33.790] It was packed full of cops. [05:34.270 --> 05:35.890] Literally a hundred cops just standing around. [05:35.990 --> 05:37.150] They didn't even know what they were supposed to be doing. [05:37.150 --> 05:38.430] They just knew that the street was closed. [05:38.610 --> 05:40.050] Well, I had to move my friend. [05:40.190 --> 05:40.730] I had the van. [05:40.870 --> 05:43.890] And that's what the 2600 van is mostly used for, is moving my friends. [05:45.630 --> 05:47.670] And so I'm going down 2nd Avenue. [05:47.890 --> 05:50.910] And the street is a one-way street going west. [05:51.510 --> 05:54.190] And since 1st Avenue was closed, I couldn't approach it that way. [05:54.230 --> 05:55.830] So I had to approach it the wrong way. [05:55.930 --> 05:56.950] I was going down 2nd Avenue. [05:57.010 --> 06:00.550] I had to make a left turn into a one-way street going the wrong way. [06:00.850 --> 06:02.490] And this was barricaded by cops. [06:02.910 --> 06:05.890] I figured I was going to get yelled at immediately for going... [06:05.890 --> 06:09.190] Not only going down a closed street, but going the wrong way into a closed street. [06:09.570 --> 06:11.390] But the most amazing thing happened. [06:11.530 --> 06:14.190] The cops just moved away and opened the barricade. [06:16.390 --> 06:18.170] I'm like, shit, this is amazing. [06:18.290 --> 06:19.450] What could I get away with here? [06:19.630 --> 06:27.190] It got better, because I had to back the van to my friend's apartment, and there was a whole bunch of cops just standing there. [06:27.250 --> 06:32.110] They were smoking cigarettes, talking on the cell phone, just like, you know, they didn't have anything to do, so they were just all hanging out. [06:32.630 --> 06:37.170] And this was sort of, I guess it was payback for RNC, because I backed the van. [06:37.370 --> 06:39.170] I didn't back it into the cops fast. [06:39.170 --> 06:42.130] I backed it really, really slowly, like one mile an hour. [06:42.510 --> 06:43.530] And they dispersed. [06:45.810 --> 06:47.950] I got a group of cops to disperse. [06:48.050 --> 06:48.890] How cool is that? [06:54.950 --> 07:02.890] So the 2600 van can be used for incredible acts of social engineering, and getting people to move who would never move for you normally is, I think, one way of doing that. [07:02.890 --> 07:08.830] And apparently, none of those police officers could read, because it clearly says, the hacker quarterly on it. [07:09.990 --> 07:11.310] They were all very nice people. [07:11.430 --> 07:16.670] They just didn't seem like cops then, because they were all hanging around, not knowing what to do, and they weren't in hostile mode, because there were no demonstrators. [07:17.130 --> 07:19.430] But anyway, so that's one story. [07:19.710 --> 07:20.810] I will tell you many more. [07:22.010 --> 07:22.790] Notkevin is here. [07:23.230 --> 07:23.850] Oh, hello. [07:24.110 --> 07:27.570] For the few of you out there who actually listened Off The Hook, I'm Notkevin. [07:27.750 --> 07:28.690] You might recognize me. [07:29.590 --> 07:32.350] And, um... [07:32.350 --> 07:32.910] You roll. [07:33.270 --> 07:34.170] You roll. [07:35.150 --> 07:41.730] You also might remember from last year's, or last conference social engineering panel, where I told the wonderful story about the Michigan elevator. [07:42.870 --> 07:44.590] No, I guess no one remembers that. [07:45.570 --> 07:46.290] All right. [07:47.950 --> 07:48.550] Hello. [07:48.950 --> 07:49.630] I'm Lurid. [07:49.770 --> 07:50.790] I'm from Dayton, Ohio. [07:50.790 --> 07:52.930] Uh, it's awesome there. [07:54.590 --> 07:55.070] Yeah! [07:55.070 --> 07:55.990] Come on! [07:59.430 --> 08:00.390] Anyway, uh... [08:00.390 --> 08:00.910] I've, uh... [08:00.910 --> 08:02.010] That's why Dayton's in Ohio. [08:03.990 --> 08:04.470] Thanks. [08:04.930 --> 08:05.890] Anyway, uh... [08:06.330 --> 08:09.170] Yeah, and I am excited to tell stories. [08:12.130 --> 08:13.170] Hi, I'm the rat man. [08:13.330 --> 08:14.390] This is, uh... [08:14.390 --> 08:16.050] Sid Vicious, the world's only hacker dog. [08:16.190 --> 08:17.390] He's really the social engineer. [08:22.330 --> 08:23.310] Yeah, I'll try to... [08:23.310 --> 08:28.410] Maybe I'll tell a couple stories about some of his exploits, but he definitely is a good lubricant for any social situation. [08:28.710 --> 08:29.530] He works out pretty good. [08:30.130 --> 08:32.590] Sid is an IRC op, by the way, on our network. [08:32.590 --> 08:33.870] Yeah, he's on 26center.net. [08:33.870 --> 08:36.570] He takes care of all the trolls and everything, so... [08:38.590 --> 08:40.050] And I'm the Cheshire Catalyst. [08:47.540 --> 08:48.100] Thank you. [08:49.000 --> 08:52.500] For those of you who don't know why they're applauding, I'm the guy with my own area code. [08:59.060 --> 09:00.260] All right, uh, now what? [09:01.380 --> 09:02.420] We're all looking to you. [09:02.760 --> 09:03.520] Oh, great. [09:04.860 --> 09:05.420] Fearless leader. [09:05.720 --> 09:10.080] It's always very stressful, because we never know what to do, and, uh, it's always a good chance it's not going to work. [09:10.240 --> 09:12.200] It really shouldn't work, the things we get away with. [09:12.480 --> 09:17.740] Well, maybe, maybe we could preface, has anyone done anything social engineering-wise on the telephone recently? [09:18.180 --> 09:19.840] Gotten information they weren't supposed to get? [09:20.140 --> 09:22.340] Uh, gotten people to help them out? [09:22.760 --> 09:23.720] I mean, it's, you always... [09:23.720 --> 09:27.760] If you win somebody's sympathy over, they'll tell you all kinds of bits of information. [09:27.920 --> 09:41.360] I was listening to something we did at Beyond HOPE, where we called a Blockbuster Video, and we were just talking to a representative there, and I played the part of an angry husband, who had gotten really upset at the fact that he had just come home from a holiday, [09:41.880 --> 09:47.200] and there was this, um, this late fee waiting for him, and I didn't know who was using the card. [09:47.200 --> 09:49.300] I needed to know all the people who were using my card. [09:49.500 --> 09:53.400] Well, except the thing is, I don't really know what last name was being used, so I wanted to try this one. [09:53.680 --> 09:54.300] Alright, it's not that... [09:54.300 --> 10:11.180] You know, and we basically just went through all these names, and the poor receptionist, or, um, uh, person at the, at the, uh, front desk, uh, was just giving me everybody's information, addresses, names, videos that they were renting, all because I was exasperated trying to help me out so that I could fix the situation, [10:11.220 --> 10:12.240] because I was trying to help them out. [10:12.340 --> 10:14.460] I was trying to pay this late fee, which really didn't exist. [10:14.880 --> 10:19.500] But it was an indication of how easy it is to get somebody to tell you something they really shouldn't tell you. [10:19.680 --> 10:32.100] Another time we called a Starbucks, and, uh, we asked them if they were having trouble with their cash register, which of course they were, and, uh, we got them to sort of read off the last few transactions because we were afraid it wouldn't go through, [10:32.180 --> 10:33.900] and they started reading out credit card numbers. [10:34.320 --> 10:40.120] We, you know, we're pretty, uh, we're responsible people here, so we lowered the volume. [10:40.260 --> 10:40.760] That didn't get out. [10:40.840 --> 10:41.520] We interrupted her. [10:42.040 --> 10:44.360] But, yeah, people can give out all sorts of information. [10:44.360 --> 10:45.080] And you know what? [10:45.140 --> 10:47.660] I bet a lot of you give out information you're not supposed to give out. [10:47.820 --> 10:50.960] Your social security number, you probably have given that to the phone company when you don't have to. [10:51.180 --> 10:53.040] Or anyone else who asks for it. [10:53.380 --> 10:56.860] You know, we were thinking of asking for it ourselves, and see how many of you fell for that, but we didn't. [10:57.680 --> 10:59.040] Uh, it's, um, it's amazing. [10:59.620 --> 11:00.260] Social networking. [11:00.480 --> 11:09.840] People just give out all this information about themselves, and that is, that's a boon to anybody who wants to, uh, to find out information they're not supposed to have access to. [11:09.840 --> 11:11.580] People put their class schedules online. [11:11.900 --> 11:17.640] Uh, they have all their, their favorite likes and dislikes, and secret desires, and things like that. [11:17.740 --> 11:20.780] They post them because they want to share it with other people who might feel the same way. [11:20.880 --> 11:27.460] But it's really, it's really getting all kinds of information out there that, um, added together, it's your life. [11:27.620 --> 11:27.760] You know? [11:27.840 --> 11:31.140] It's like having a diary always readable by anybody. [11:32.460 --> 11:34.480] How many of you have Facebook accounts on this panel? [11:35.120 --> 11:35.720] I do. [11:36.100 --> 11:36.740] All that me. [11:41.890 --> 11:44.430] All right, so, we're still all looking to me. [11:44.510 --> 11:45.550] Nobody has any other stories? [11:45.730 --> 11:47.190] Well, I have a story that's actually inspired by... [11:47.190 --> 11:47.310] Go ahead, tell the story. [11:47.470 --> 11:48.350] I'll, I'll make a call. [11:48.430 --> 11:48.870] I will, but... [11:48.870 --> 11:50.390] By your Starbucks story... [11:50.390 --> 11:50.630] Go ahead. [11:50.830 --> 12:11.430] ...another large corporation, I, uh, decided to test their security, and I called up one of their stores as a very thankful customer and asked for the manager, and fortunately he was, he was out, so the employee was more than grateful to give me their home address so I can send them a bouquet of flowers to show how grateful I am for their service. [12:11.830 --> 12:16.790] So I immediately called up another store in a different town and said, Hey, I'm the manager from store A. [12:16.970 --> 12:18.810] We're having a lot of problems with our credit card machines. [12:18.890 --> 12:21.650] We got a customer here who said he was there yesterday. [12:22.110 --> 12:23.270] Can you read off his credit card number? [12:23.650 --> 12:24.550] Guess what they did? [12:24.990 --> 12:26.110] Read it off in full. [12:26.610 --> 12:33.910] Of course, I was, you know, nice and I explained to him exactly what I did and how to stop against it, and, uh, they threatened to sue me. [12:35.130 --> 12:35.450] So... [12:37.530 --> 12:44.850] Alright, well, uh, no, I mean, you know, I, okay, I've got an example that, you know, everybody from HOPE, you know, that's ever been here can appreciate. [12:45.410 --> 12:50.310] Um, back at H2K2, when we had the, you know, credit card size badges with the little SIM cards on them. [12:50.850 --> 13:05.310] Um, I was walking around New York, it's my first HOPE conference, first time I'd ever been in New York, aimlessly walking around, um, I saw the roped off, I saw a roped off area, so, you know, I started walking up and there's a security guard kind of sleeping and he noticed me walk up. [13:05.570 --> 13:09.030] He jumped up real quick, like, huh, huh, and he said, oh, okay, you're cool. [13:09.230 --> 13:19.890] And he, like, grabbed his badge and I didn't realize what he was doing, but he was signaling to me that because I had a badge, I could get on the set of Good Morning America to watch The Counting Crows. [13:20.810 --> 13:30.550] So, that was pretty cool, and, uh, you know, that was really, I mean, you know, everybody can appreciate it, The Counting Crows aren't that great, but, whatever, free concert, you know, New York City. [13:31.030 --> 13:31.450] Yeah-ya! [13:34.170 --> 13:34.530] So... [13:36.250 --> 13:42.870] Um, how come none of you told me I forgot to introduce somebody on the panel? [13:43.190 --> 13:45.490] Kevin Mitnick is also here, you might have heard of him. [13:48.110 --> 13:49.110] I'm sorry, Kevin. [13:49.250 --> 13:49.570] I'm sorry. [13:53.040 --> 13:57.060] He's so polite, he would have sat here the entire hour and not said a word to me. [13:57.400 --> 13:58.500] I see if you'd notice. [13:58.680 --> 13:58.860] Yeah. [13:59.740 --> 14:00.920] Just thought I was blending in. [14:00.960 --> 14:02.640] Hi, everybody, it's great to be back here at HOPE. [14:03.620 --> 14:03.980] Yes. [14:09.980 --> 14:14.220] And Kevin will be giving a talk immediately after this social engineering thing happens. [14:14.580 --> 14:18.560] Um, but, uh, you've had some social engineering experience, I believe, in the past? [14:18.720 --> 14:19.520] Just a little bit. [14:21.400 --> 14:23.040] I have one with a central office. [14:23.300 --> 14:24.220] It was in Hollywood. [14:24.820 --> 14:27.960] This was, I don't know, about 10, no, 15 years ago. [14:28.460 --> 14:29.780] No, about 20 years ago. [14:29.960 --> 14:31.860] It was a Hollywood central office in Los Angeles. [14:32.280 --> 14:42.340] And a friend of mine, um, a guy named Steven Roach at the time was also a phone phreaker, and we decided we wanted to take a self-guided tour of the central office. [14:43.100 --> 14:45.260] So it was around 2:30 in the morning on a Saturday. [14:46.080 --> 14:48.900] And we had the door codes to all the different offices in Los Angeles. [14:49.180 --> 14:50.780] And we just let ourselves in. [14:51.040 --> 14:53.080] And we're roaming around the Hollywood CO. [14:53.220 --> 14:54.360] And we're about on the third floor. [14:54.980 --> 15:02.840] And then, all of a sudden, this big guy security guard approaches us and goes, Excuse me? [15:03.600 --> 15:03.920] Yeah? [15:04.320 --> 15:05.380] Do you have any ID? [15:06.000 --> 15:07.620] And I go, Sure, one moment. [15:07.760 --> 15:11.760] And I go into my pocket and I said, Oh, I must have left my ID in the car. [15:11.760 --> 15:12.880] I'll go get it. [15:12.880 --> 15:13.520] I'll be right back. [15:13.940 --> 15:14.640] He goes, No. [15:14.740 --> 15:15.600] He goes, Who is this guy? [15:15.740 --> 15:17.720] And I go, Oh, he's just a friend of mine. [15:17.860 --> 15:19.260] And I want to take him on a tour. [15:19.400 --> 15:20.940] He's never seen a central office. [15:21.120 --> 15:22.460] He goes, At 2:30 in the morning? [15:22.780 --> 15:24.460] I said, Yeah, we just got out of a movie. [15:25.280 --> 15:27.880] And my friend has always wanted to work for the phone company. [15:28.480 --> 15:30.360] And so I figured I'd just take him on a quick tour. [15:30.580 --> 15:31.640] And he goes, Well, where do you work? [15:31.840 --> 15:34.180] I said, Well, I work in the COSMOS Center in San Diego. [15:34.880 --> 15:36.080] He goes, Who's your supervisor? [15:36.300 --> 15:37.620] And I told him the name of the supervisor. [15:37.860 --> 15:41.560] Incidentally, it was the correct name of the person in the San Diego COSMOS Center. [15:42.020 --> 15:44.400] And he goes, No, you guys have to come with us. [15:45.200 --> 15:47.700] So he escorts us to the elevator. [15:47.900 --> 15:50.700] And I know on the ninth floor is the Switching Control Center. [15:50.860 --> 15:53.860] And that's where there's people up there because that office is manned. [15:54.220 --> 15:56.740] So you end up getting escorted up to the ninth floor. [15:57.760 --> 15:59.780] And there's about five or six people around. [16:00.160 --> 16:02.800] And the security guard is telling him the story. [16:02.940 --> 16:05.880] I found these two guys roaming around our building. [16:05.980 --> 16:06.920] This guy doesn't have ID. [16:07.180 --> 16:08.500] Let's find out what's going on. [16:09.720 --> 16:14.500] So one of the other supervisors, not a security guard, he goes, What's your supervisor's name? [16:14.660 --> 16:15.440] And I gave it to him. [16:15.500 --> 16:16.960] I said, Well, listen, you can't wake her up. [16:17.220 --> 16:18.780] Because, look, it's 2:30 in the morning. [16:18.940 --> 16:20.600] If you want, I'll go to my car. [16:20.920 --> 16:21.940] We'll go get my ID. [16:22.100 --> 16:22.920] And I'll be right back. [16:23.320 --> 16:24.920] Of course, I had no plans of coming back. [16:26.200 --> 16:27.920] So he says, No, we're calling your supervisor. [16:27.920 --> 16:31.580] So he picks up a book, some sort of intercompany directory. [16:31.680 --> 16:34.320] And I'm thinking, Well, they don't list home telephone numbers in there. [16:34.620 --> 16:41.880] But apparently, he had found some sort of notes or whatever listing the supervisor's home phone number. [16:42.280 --> 16:43.660] So he calls the supervisor. [16:43.940 --> 16:45.320] 2:30 in the morning, Saturday. [16:45.840 --> 16:50.200] He goes, Listen, I found one of your employees, Steve, roaming around one of our offices. [16:50.200 --> 16:51.940] And he says he works for you. [16:52.720 --> 16:53.180] Uh-huh. [16:53.460 --> 16:54.440] Oh, you want to talk to him? [16:54.500 --> 16:54.700] Sure. [16:56.040 --> 16:57.700] So he hands me the phone. [16:57.860 --> 17:00.500] And I go, Hey, Sally, how are you? [17:00.560 --> 17:04.240] I'm really sorry that you were woken up. [17:04.340 --> 17:08.360] And I normally would never take a friend on a tour of a central office. [17:08.820 --> 17:12.060] And she's, as I'm speaking, she's saying, Who are you? [17:12.100 --> 17:12.520] Who are you? [17:13.100 --> 17:14.420] I'm going, Yeah. [17:14.720 --> 17:19.280] And by the way, Tuesday, we'll definitely, we still have that meeting for that report, correct? [17:19.280 --> 17:20.560] And she goes, Who are you? [17:20.640 --> 17:21.040] Who are you? [17:21.100 --> 17:23.200] But I'm pressing the phone to my ear. [17:23.680 --> 17:26.300] So the other people in the room can't hear what she's saying. [17:27.140 --> 17:29.160] He's only listening to my side of the conversation. [17:31.100 --> 17:33.960] And I'm like having a calm conversation with her. [17:34.100 --> 17:40.780] And I said, Listen, okay, you know, I'm just going to take my friend around for about 15 more minutes and we'll leave and I'll see you on Tuesday. [17:41.940 --> 17:47.880] And I went over and I walked about, it was like one or about two steps, and I hung up the phone. [17:48.260 --> 17:49.760] And I go, Are you satisfied? [18:01.990 --> 18:03.080] They didn't know what to do. [18:03.380 --> 18:04.400] They weren't sure. [18:05.000 --> 18:07.230] But I said, Listen, you better not call her back. [18:08.120 --> 18:08.970] I mean, come on. [18:09.120 --> 18:10.210] This is a little bit ridiculous. [18:10.420 --> 18:14.880] I said, Listen, I'm going to take my friend around for about 15 more minutes and we'll leave. [18:15.730 --> 18:16.770] Okay, you guys can go. [18:16.940 --> 18:17.580] So they let us go. [18:17.730 --> 18:20.710] We make a beeline right for that elevator to get out of that building. [18:21.210 --> 18:22.200] Go down the elevator. [18:22.320 --> 18:22.960] We go out the street. [18:22.960 --> 18:27.360] We go down about three or four blocks so we can watch the front door of the Hollywood CO. [18:27.860 --> 18:29.990] I'd say about seven to ten minutes pass. [18:30.230 --> 18:36.270] And you see that same security guard bursting out the door looking down the street. [18:36.460 --> 18:37.360] He was looking for us. [18:37.490 --> 18:39.160] So we're sitting there kind of laughing at the time. [18:39.320 --> 18:42.210] But it was a real scary experience because we thought we were going to get busted. [18:43.580 --> 18:46.960] But a little social engineering helped us out of that situation. [18:47.290 --> 18:48.030] So there you go. [18:48.380 --> 18:52.900] Never underestimate people's stupidity when getting information. [18:53.140 --> 18:53.840] No, I'm serious. [18:54.120 --> 18:59.200] This is something a friend of mine actually did when he was about, I guess, 16 or 17. [18:59.200 --> 19:14.470] He and a couple of other people went to a central office and basically convinced the guard at the central office that they were there to collect the old IDs because they were going to deliver the new ones. [19:14.840 --> 19:17.920] This f*cking guard gave him his ID card. [19:19.100 --> 19:21.440] This is how trusting people can be. [19:21.790 --> 19:23.050] I got a better one. [19:23.290 --> 19:24.400] Remember the days of 8BBS? [19:25.030 --> 19:26.530] Anyone here from 8BBS days? [19:27.440 --> 19:30.940] Well, there was this other hacker on the board named Paul Montgomery. [19:31.200 --> 19:32.320] And he lived up in Stockton. [19:32.490 --> 19:35.270] And we wanted to get the test number directory for Pacific Bell. [19:35.470 --> 19:36.470] All the different test numbers. [19:36.710 --> 19:38.660] It was actually Pacific Telephone and Telegraph. [19:38.840 --> 19:42.460] So I said, okay, are you willing to pick it up if I can get them to leave it outside their door? [19:42.820 --> 19:44.210] He goes, what are you talking about? [19:44.340 --> 19:44.960] I said, don't worry. [19:45.180 --> 19:45.530] Watch. [19:45.730 --> 19:47.140] And I three-way in the central office. [19:47.340 --> 19:51.660] And I actually tell them the same story that we're giving them the new directories. [19:51.660 --> 19:58.080] And they have to leave the old directories outside the door because we have to shred them. [19:58.440 --> 19:59.120] And they did. [19:59.420 --> 20:00.530] They left it right outside the door. [20:00.620 --> 20:00.840] Unbelievable. [20:01.710 --> 20:03.880] That works more often than you would expect. [20:04.080 --> 20:04.180] Yeah. [20:04.880 --> 20:06.160] Okay, we're going to try something here. [20:07.010 --> 20:08.320] No guarantees this will work. [20:08.490 --> 20:16.230] I had a bit of a tussle with some car services over this last week because there were some people we wanted to send cars for at airports. [20:16.400 --> 20:16.750] And you know what? [20:16.820 --> 20:17.730] It's really kind of weird. [20:17.920 --> 20:22.700] If you want to pay to have somebody picked up at an airport, you can't really do it. [20:22.790 --> 20:26.360] You have to have the credit card on you when you get dropped off. [20:26.380 --> 20:28.050] And that's very hard if you're paying for somebody else. [20:28.160 --> 20:32.940] And we were trying to ask them, well, how is it possible to actually pay for somebody if you don't have a big corporate account? [20:33.280 --> 20:35.200] Like, well, the person has to have the credit card on them. [20:35.360 --> 20:38.320] It's just a whole big thing when people wound up taking taxis. [20:39.200 --> 20:41.400] So, yeah, our first thing is with the car service. [20:41.490 --> 20:46.860] But in order to get the information for the car service, we have to get information from an airline. [20:46.970 --> 20:47.920] What I'm going to try to do first... [20:47.920 --> 20:49.990] Well, this is easy because this is completely above the board. [20:50.250 --> 20:55.400] I just want to find out all the flights coming into JFK tomorrow from Los Angeles, flight numbers. [20:56.100 --> 20:59.880] And I guess the biggest challenge here will be getting a human on the phone. [21:00.030 --> 21:01.660] Let's see how hard it is to do that. [21:01.790 --> 21:05.290] You have to sort of scream representative at some point. [21:05.340 --> 21:06.440] And I might have to do that. [21:08.080 --> 21:10.770] JetBlue flight 198 gets in at 10 o'clock from Vegas. [21:11.030 --> 21:12.640] No, yeah, from Vegas, you could use that one. [21:12.920 --> 21:13.820] Well, that's handy information. [21:13.960 --> 21:17.030] But I figure American Airlines has more flights getting in from L.A. [21:17.120 --> 21:19.460] tomorrow, so I'll be able to use that as part of my ruse. [21:20.990 --> 21:23.120] But before I pick up this phone, I don't want to deafen anybody. [21:23.320 --> 21:23.840] So are there rules? [21:23.960 --> 21:24.230] I'm ready. [21:24.900 --> 21:25.550] Well, what do I do? [21:25.660 --> 21:26.700] I just pick up and... [21:26.700 --> 21:27.900] When you want to talk, you press the thing. [21:27.970 --> 21:30.160] I press the thing when I want to talk and release it, and then it's muted. [21:30.510 --> 21:32.010] So I can insult them and they won't hear me. [21:32.160 --> 21:32.380] All right. [21:33.940 --> 21:34.860] All right, do we have a dial down? [21:34.860 --> 21:36.770] Okay, and I'm going to... [21:36.770 --> 21:37.510] Now you can... [21:37.510 --> 21:39.200] Now you can hear me. [21:39.770 --> 21:40.380] Now you can... [21:40.380 --> 21:40.530] Okay. [21:41.440 --> 21:43.360] So I'm going to call American Airlines. [21:49.530 --> 21:50.390] Start by start. [21:50.390 --> 21:51.970] Welcome to American Airlines. [21:53.070 --> 21:55.550] Para Espanol, diga Espanol. [21:57.830 --> 21:58.870] Main menu. [21:59.170 --> 22:03.410] Please say reservations, flight and gate information, advantage services, or more options. [22:03.430 --> 22:06.150] I watched him try to convince me not to talk to a representative. [22:06.870 --> 22:07.350] Representative. [22:07.850 --> 22:07.950] Representative. [22:08.710 --> 22:10.970] I understand you'd like to speak to someone. [22:11.190 --> 22:16.070] If you'd like to try again, please say reservations, flight and gate information... [22:16.070 --> 22:16.630] Representative! [22:18.510 --> 22:18.990] Okay. [22:19.210 --> 22:23.890] Do you want to talk to an agent about travel within the United States, Puerto Rico, or the U.S. [22:23.890 --> 22:24.250] Representative! [22:27.730 --> 22:32.530] Our agents are helping other customers right now, but I'll connect you to the next available agent. [22:32.530 --> 22:34.790] Your wait should be approximately four minutes. [22:35.050 --> 22:35.350] Oh, please. [22:35.350 --> 22:36.330] This call may be recorded. [22:36.610 --> 22:39.630] Please note that ticketing and checked baggage fees may apply. [22:40.290 --> 22:44.350] Check AA.com or with your reservations representative for details. [22:45.370 --> 22:46.910] I know why they're called AA. [22:49.930 --> 22:53.670] Do we want to tell stories while we wait or do we want to... [22:54.830 --> 22:57.330] Skip over this and just go direct it to the car service? [22:57.890 --> 23:03.090] Just as much as we all have stories of... [23:03.690 --> 23:04.710] Can anybody hear me? [23:05.050 --> 23:05.510] There it goes. [23:05.710 --> 23:05.830] All right. [23:06.170 --> 23:09.590] You know, just as much as we have stories, you know, that are hilarious that we've gotten away with. [23:09.950 --> 23:10.730] I mean, sometimes... [23:12.210 --> 23:13.170] Sorry, I thought it was a human. [23:13.290 --> 23:13.530] It wasn't. [23:15.070 --> 23:19.050] You know, sometimes things go bad, especially when you're starting and learning the trade. [23:20.010 --> 23:22.730] You know, some of my friends down here, they know the story. [23:24.310 --> 23:28.610] You know, one night, you know, I think I was about 12 or 13 years old. [23:29.810 --> 23:32.750] Somebody said, you know, I bet you can't get the social security number of somebody. [23:33.090 --> 23:37.290] Yes, malicious, 12 years old, you know, trying to do whatever I can. [23:38.130 --> 23:40.410] So I call up somebody pretending to be the local... [23:40.410 --> 23:42.070] Was it the electric company? [23:42.250 --> 23:43.510] Which is DPNL where I live. [23:45.110 --> 23:49.670] And as it turned out, it ended up being a lot later than I thought it was. [23:49.770 --> 23:52.910] So it was probably about 10, 30, 11 o'clock at night. [23:53.590 --> 23:54.470] Big mistake. [23:55.670 --> 23:57.770] The people somehow... [23:57.770 --> 24:00.270] They did a police trace on the phone. [24:01.170 --> 24:09.050] About three or four days later, I got a call from a police substation asking to speak with my parents when I told them I was 13. [24:09.390 --> 24:12.230] I said, you know, no thank you. [24:12.350 --> 24:13.050] And hung up. [24:13.270 --> 24:13.970] They called back. [24:14.130 --> 24:14.770] Hung up. [24:14.990 --> 24:15.550] Called back. [24:15.770 --> 24:16.370] Hung up. [24:16.570 --> 24:16.970] Cell phone. [24:17.150 --> 24:19.590] And they tried this for about a week trying to get a hold of us. [24:19.910 --> 24:24.510] And, you know, the fact is that all you have to do is, if you're on a cell phone, hang up. [24:24.810 --> 24:26.630] And nobody can do anything to you. [24:26.630 --> 24:29.930] So, we all get caught sometimes. [24:30.170 --> 24:31.430] And it's not the end of the world. [24:34.550 --> 24:46.650] When talking about being backstage with a clipboard, I went to a Smothers Brothers concert with Pat Paulson about two hours before the performance, maybe three, with a buddy of mine. [24:46.850 --> 24:48.550] And I had such a clipboard. [24:49.010 --> 24:54.310] We were walking down a downstairs corridor through, around by the dressing rooms. [24:54.810 --> 25:00.410] And I could see coming towards us a gentleman with a camera and behind him was a guard. [25:01.350 --> 25:04.650] So, the fellow comes up and I say to him, hi, I guess you're not supposed to be here either. [25:04.810 --> 25:05.950] Let's step into this dressing room. [25:07.310 --> 25:13.430] I then take the little notebook I had on my clipboard, handed it to my buddy, told the other fellow, start playing with your camera. [25:13.750 --> 25:15.070] And I start writing on my clipboard. [25:15.770 --> 25:17.090] The guard steps in. [25:17.290 --> 25:18.930] I look up and go, may I help you? [25:20.670 --> 25:22.210] Oh, oh, oh, oh, no, no, no, that's okay. [25:22.570 --> 25:23.230] And off he went. [25:23.310 --> 25:24.730] We apologize for the delay in answering your call. [25:25.090 --> 25:29.030] As a reminder, you may obtain flight arrival, departure, or gate information. [25:29.030 --> 25:29.850] We don't need to know this. [25:33.750 --> 25:40.450] I'm going to give this about two more minutes and I'm going to just jump to the next part because our time is valuable and they don't seem to know that. [25:44.530 --> 25:45.890] I'm sorry, were you in the middle of something, Tresher? [25:46.070 --> 25:47.470] Your call is important to us. [25:49.910 --> 25:51.090] Were you in the middle of something? [25:51.850 --> 25:52.010] Talking? [25:53.210 --> 25:53.770] Telling a story? [25:53.770 --> 25:53.910] I'm not sure. [25:54.070 --> 25:55.450] Which story does... [25:56.390 --> 25:58.770] Do you really want to hear the story of how I got my area code again? [26:01.450 --> 26:02.410] I might have to interrupt. [26:02.590 --> 26:03.970] If I do this, that means they picked up. [26:04.130 --> 26:04.270] Okay. [26:04.410 --> 26:10.530] When they split the 407 area code around Orlando, Florida, I'm the fellow that went to the Public Service Commission hearing. [26:11.390 --> 26:13.910] Well, before the hearing, I first went up on the Internet. [26:15.350 --> 26:25.910] And, well, I get to the hearing and I explain that we who live near Cape Canaveral, the countdown capital of the world, we'd kind of like area code 3-2-1. [26:26.230 --> 26:32.290] Oh, and by the way, here's some printout from the North American Nominical Plan Administration showing it's available. [26:33.710 --> 26:43.630] Well, the way I look at it, of course, is that I asked for it, they approved it, so it must be my area code, but I share. [26:46.890 --> 26:50.290] However, I did save the best number for myself. [26:50.950 --> 26:52.930] I will admit it here to you all now. [26:53.610 --> 26:59.370] My phone number is 3-2-1-LIFTOFF. [27:05.090 --> 27:05.730] Thank you. [27:07.650 --> 27:08.210] Thank you. [27:08.290 --> 27:12.130] But I did have to email the president of BellSouth Mobility at the time to get it. [27:12.590 --> 27:32.030] You see, I went down to the kiosk, and I asked for the number 5-4-3-8-6-3-3, and she called the Melbourne office, and, well, it turns out that the boys in Melbourne told her that the number, while not in use according to the recording I heard, was in the middle of a hundred group on a corporate rate. [27:32.350 --> 27:33.250] Totally unavailable. [27:34.050 --> 27:34.790] Oh, okay. [27:35.110 --> 27:39.330] So I went home, got up on the Internet, BellSouthMobility.com, about the company. [27:39.730 --> 27:41.090] Oh, Mark Fiedler's the president. [27:41.310 --> 27:42.470] That might be nice to know. [27:42.610 --> 27:44.350] But I don't have his email address. [27:44.550 --> 27:45.970] Let's look around a little more. [27:46.210 --> 27:47.790] Oh, the press room. [27:48.030 --> 27:51.190] Okay, let's look around here, and here's some press releases. [27:51.610 --> 27:51.810] Good. [27:52.190 --> 27:53.230] Ah, there it is. [27:53.230 --> 27:55.750] The email address of a publicity flag. [27:56.610 --> 27:58.330] First name, underscore, last name at... [27:58.330 --> 27:59.330] Thank you. [27:59.730 --> 28:00.390] Compose to... [28:01.110 --> 28:03.150] Mark, underscore, Fiedler, at Dear Mr. Fiedler. [28:04.030 --> 28:06.810] Blah, blah, blah, 3-2-1, blah, blah, blah. [28:06.970 --> 28:09.890] My area code, may I please have 5-4-3-8-6-3-3. [28:09.950 --> 28:14.970] As of October 1st, 1999, my phone number will be 3-2-1. [28:15.170 --> 28:15.490] Lift off. [28:15.570 --> 28:15.930] Send. [28:16.770 --> 28:18.390] Oh, darn. [28:19.130 --> 28:21.050] It's now 6:30 p.m. [28:22.030 --> 28:22.890] On a Friday. [28:24.130 --> 28:26.310] I can't possibly hear from this guy until what? [28:26.490 --> 28:27.330] Monday, probably. [28:28.030 --> 28:29.210] More than likely, Tuesday. [28:29.790 --> 28:31.590] Sunday evening, you have new mail. [28:32.250 --> 28:33.770] Oh, sure, I'll get my people on it. [28:36.190 --> 28:37.410] And that's how I got my number. [28:44.540 --> 28:46.020] All right, I'm going to give up on these people. [28:48.600 --> 28:49.220] Yes, hello? [28:49.680 --> 28:50.020] Yes. [28:50.260 --> 28:51.640] Hi, I've got a bit of a problem. [28:52.640 --> 29:00.480] My wife booked me on a ticket from Los Angeles to JFK tomorrow, and she neglected to tell me the time. [29:00.820 --> 29:01.160] Ah. [29:01.760 --> 29:06.240] And, well, I was wondering if maybe you might be able to tell me the arrival times, because I have to talk to the limo company. [29:06.330 --> 29:07.280] This is just a whole big thing. [29:07.740 --> 29:07.960] Okay. [29:07.960 --> 29:10.950] How many different flights are there into JFK tomorrow from L.A.? [29:11.500 --> 29:12.520] From L.A. [29:12.760 --> 29:13.160] to JFK? [29:13.960 --> 29:14.160] Yeah. [29:15.200 --> 29:15.460] Okay. [29:15.700 --> 29:19.180] Do you have the approximate time of departing? [29:19.350 --> 29:22.680] Well, I'd like to arrive in the afternoon at some point. [29:23.260 --> 29:27.780] It doesn't mean necessarily that's what she did, because sometimes she doesn't do exactly what I'd like. [29:29.570 --> 29:31.140] But, yeah, that's another thing. [29:31.760 --> 29:34.240] Can you just tell me the ones that arrive in the afternoon? [29:36.540 --> 29:42.180] Okay, we do have one departing at 6:20 in the morning, arriving at 2:50 into JFK. [29:43.160 --> 29:49.000] Or we have one departing at 7:45, arriving at 4:20 in the afternoon. [29:49.330 --> 29:50.760] Do you have flight numbers on those? [29:51.080 --> 29:51.400] Sure. [29:51.760 --> 29:53.550] The first one is flight 118. [29:54.100 --> 29:55.660] The second one is flight 34. [29:55.920 --> 30:01.640] And if you would like to give me a last name, I'd be able to look up and see if you're on one of those flights. [30:01.680 --> 30:02.850] Yeah, Johnson is the last name. [30:02.980 --> 30:03.780] First name, Bob. [30:04.040 --> 30:05.240] But it might be under Robert. [30:12.550 --> 30:13.510] Her name is Hope. [30:13.670 --> 30:15.890] So, I mean, she might have booked it under that name. [30:17.230 --> 30:17.550] Okay. [30:17.570 --> 30:19.150] She would have had to book it under your name. [30:20.010 --> 30:20.670] Oh, yeah. [30:20.770 --> 30:23.750] Well, I mean, sometimes what she does is she uses the credit card, which is under... [30:23.750 --> 30:26.350] I guess it doesn't matter because we use the same credit card number. [30:29.630 --> 30:30.570] First name is what? [30:30.810 --> 30:31.950] It should be Bob Robert. [30:41.630 --> 30:43.130] Are you showing any Johnsons at all? [30:43.570 --> 30:44.350] Yes, I am. [30:44.350 --> 30:46.110] I'm just checking the other flight number. [30:46.510 --> 30:46.810] Okay. [30:54.880 --> 31:08.060] So, if Johnson wasn't such a common name, if say it was, oh, I don't know, Clinton or something, we'd know that they were on that flight because it's an uncommon name. [31:08.260 --> 31:10.240] And she does confirm that there is a Johnson... [31:10.240 --> 31:10.760] First two flight. [31:12.400 --> 31:13.360] I'm sorry, say that again? [31:13.360 --> 31:16.420] I don't see you on either one of the first two flights. [31:16.600 --> 31:16.780] Hey. [31:18.060 --> 31:19.020] Check this one. [31:19.320 --> 31:19.620] Okay. [31:39.920 --> 31:41.760] Is it possible there was a connection? [31:42.920 --> 31:45.060] You know, I'm not even sure what time I'm arriving. [31:45.060 --> 31:48.820] It's possible that she booked this in a completely weird way. [31:49.300 --> 31:53.480] I just wish she had told me the name of the flight or the arrival time or something like that. [31:53.480 --> 31:57.520] I'm sorry to have to put you through all this because this is a communication problem in my own house. [31:59.140 --> 32:02.740] The flight that has the Johnson on it, are you able to tell me the time of that one? [32:02.740 --> 32:05.480] Well, there are quite a few flights with Johnsons on them. [32:05.600 --> 32:08.820] It's just not anything with Bob or Robert on them. [32:09.000 --> 32:09.400] Really? [32:10.780 --> 32:12.000] Well, that one doesn't work. [32:30.380 --> 32:32.360] We haven't even gotten to the limo company yet. [32:32.540 --> 32:33.180] This is... [32:35.100 --> 32:36.060] 40, let's see. [32:41.570 --> 32:45.050] And she's really working hard for us right now, looking up all sorts of things. [32:58.060 --> 32:59.400] I think of a bad cable. [33:02.970 --> 33:04.070] I don't think it's that cable. [33:04.190 --> 33:04.690] I think it's another one. [33:04.750 --> 33:06.090] It could be the long distance connection. [33:14.400 --> 33:14.760] Okay. [33:14.840 --> 33:18.580] At some point, you have to cut your losses and just move on because things just take too long sometimes. [33:20.000 --> 33:24.980] So, I'm just going to basically see if I can get one more flight number out of her and move on. [33:25.060 --> 33:25.660] Still looking. [33:26.620 --> 33:29.720] There are a lot of flights from LA to JFK. [33:30.520 --> 33:31.780] Could you just give me the next two? [33:31.960 --> 33:33.060] That's 250, the 420. [33:33.200 --> 33:33.940] What are the two after that? [33:34.000 --> 33:35.420] I'll figure this out with that information. [33:35.860 --> 33:36.100] Okay. [33:36.320 --> 33:38.440] The 610 and the 724. [33:39.960 --> 33:40.280] Okay. [33:40.300 --> 33:41.220] What are the flight numbers on those? [33:41.900 --> 33:43.100] The first one is 118. [33:43.380 --> 33:44.340] The second one is 34. [33:44.720 --> 33:46.080] The third one is 2. [33:46.260 --> 33:47.880] And the next one is 40. [33:48.660 --> 33:49.640] Did you say it was 2? [33:50.040 --> 33:50.380] Mm-hmm. [33:50.640 --> 33:51.180] Flight number 2. [33:51.280 --> 33:51.380] Okay. [33:51.400 --> 33:52.260] And what time did that one get in? [33:52.840 --> 33:54.360] It gets in at 610 in the evening. [33:54.560 --> 33:54.780] Okay. [33:54.800 --> 33:55.600] I'll figure this out. [33:55.680 --> 33:56.580] Thanks so much for your help. [33:56.740 --> 33:57.140] You're welcome. [33:57.160 --> 33:58.320] And thank you for flying American. [34:00.540 --> 34:01.060] All right. [34:01.960 --> 34:02.620] We didn't... [34:02.620 --> 34:08.980] I mean, this is all public information, but we did get her to confirm that people with this name are on certain flights. [34:09.280 --> 34:17.400] If I had pushed a little deeper or gotten a more uncommon name, like I said, that we'd have been able to verify that somebody was on a particular flight. [34:17.520 --> 34:23.880] If you knew that somebody was traveling from Los Angeles to New York on a particular day using a particular airline, you could narrow it down that way. [34:23.880 --> 34:28.360] Not the most amazing information in the world, but with somebody who's a little more trusting. [34:28.480 --> 34:32.660] If you gain their trust, then they'll keep giving you information. [34:32.820 --> 34:37.000] They'll give you all sorts of frequent flyer numbers. [34:37.000 --> 34:41.380] They'll give you an address, perhaps, an email address, a phone number. [34:41.580 --> 34:42.240] It's all possible. [34:42.780 --> 34:42.900] Okay. [34:43.020 --> 34:43.760] So now we have... [34:43.760 --> 34:45.820] We have some flight arrival times. [34:46.460 --> 34:47.860] I'm gonna call the limo company now. [34:47.920 --> 34:56.920] Now, these people, they may not tolerate any of this because they're always in a hurry, and they're always kind of short on the phone, so it's gonna be tricky to get anything out of them. [34:57.300 --> 34:58.360] But let's give it a shot. [34:58.520 --> 35:04.440] You know, one thing with social engineering, you can't be afraid to take a chance and always have a way to back out if you have to. [35:05.660 --> 35:06.020] Okay. [35:06.160 --> 35:06.480] Let's go. [35:14.820 --> 35:16.980] Thank you for calling dial seven car limousine. [35:17.220 --> 35:20.090] Your call may be recorded or monitored for quality assurance purposes. [35:20.340 --> 35:20.460] Yeah. [35:20.590 --> 35:24.050] If you have just arrived at the airport and are ready to be picked up, please press one. [35:24.710 --> 35:25.590] Please hold. [35:32.490 --> 35:33.850] Thank you for calling dial seven. [35:33.990 --> 35:34.570] This is Priscilla speaking. [35:34.690 --> 35:35.210] Can I help you? [35:35.310 --> 35:35.710] Yeah, hi. [35:35.790 --> 35:36.630] I got a real problem here. [35:36.750 --> 35:39.630] My wife booked me to get picked up tomorrow. [35:39.890 --> 35:40.210] Mm-hmm. [35:40.350 --> 35:44.990] And she neglected to tell me what time I'm supposed to be picked up. [35:45.690 --> 35:46.950] My last name is Johnson. [35:47.270 --> 35:48.430] And you have a reservation already? [35:48.750 --> 35:50.390] I don't have the reservation number. [35:50.410 --> 35:51.070] That's the problem. [35:51.250 --> 35:51.590] Okay. [35:51.590 --> 35:53.590] Let me get the first three letters of your last name. [35:53.630 --> 35:53.850] Okay. [35:53.950 --> 35:54.870] J-O-H. [35:55.090 --> 35:55.790] J-O-H. [35:55.810 --> 35:58.650] I'm coming into JFK from Los Angeles. [35:58.650 --> 36:00.770] And what's your full name, sir? [36:01.290 --> 36:02.410] Full name is Johnson. [36:02.670 --> 36:03.270] J-O-H. [36:03.490 --> 36:04.110] First name? [36:04.290 --> 36:05.930] First name is Robert or Bob. [36:06.110 --> 36:08.250] But the thing is, she might have booked it under her name, which is Hope. [36:08.670 --> 36:08.890] Okay. [36:08.930 --> 36:10.010] Hold on one second. [36:10.110 --> 36:12.890] If you see any Johnsons there, it's very likely it might be that. [36:15.990 --> 36:16.910] Let me see. [36:17.830 --> 36:19.790] No, I don't see it under your name. [36:19.990 --> 36:21.390] Probably she has it under her name. [36:21.510 --> 36:22.290] What's her last name? [36:22.930 --> 36:24.830] Well, actually, her maiden name is Brown. [36:25.010 --> 36:26.390] Do you think maybe she booked under that name? [36:26.450 --> 36:26.830] Probably. [36:27.030 --> 36:27.450] Let's check. [36:27.570 --> 36:27.830] All right. [36:31.710 --> 36:32.690] And what's her name? [36:32.690 --> 36:34.330] Her first name is Hope. [36:34.690 --> 36:35.070] Hope? [36:35.150 --> 36:35.510] Hope. [36:35.610 --> 36:36.330] H-O-P-E. [36:36.530 --> 36:36.810] Okay. [36:37.110 --> 36:39.630] But, I mean, she's been known to go by different names, too. [36:39.770 --> 36:43.170] I mean, if you see a Brown there, that's quite possible that it's her. [36:43.410 --> 36:43.990] Hold on one second. [36:55.370 --> 36:57.210] No, I do not see a Hope Brown. [36:57.370 --> 36:59.290] I see a lot of Browns, but it's not Hope. [36:59.530 --> 37:01.150] Do you see any Browns with female names? [37:02.790 --> 37:03.150] Um... [37:03.610 --> 37:04.530] Let me see, let me see. [37:05.610 --> 37:06.330] Kara Brown. [37:06.770 --> 37:07.370] My God. [37:07.930 --> 37:08.650] Sarah Brown. [37:09.190 --> 37:09.690] Wait, I'm sorry. [37:09.770 --> 37:10.290] Did you say Sarah? [37:10.570 --> 37:11.270] Yeah, Sarah. [37:11.530 --> 37:13.150] No, Sarah's her middle name. [37:13.210 --> 37:13.610] She uses that... [37:13.950 --> 37:15.270] She was an actress at one point. [37:15.350 --> 37:17.190] She did use that occasionally for stage. [37:17.410 --> 37:19.110] So, I don't know why she was looking into that name. [37:19.110 --> 37:19.970] And what airport you was coming in? [37:20.050 --> 37:20.790] It's a JFK. [37:21.570 --> 37:21.930] JFK? [37:22.090 --> 37:22.190] Yeah. [37:22.190 --> 37:26.390] Because I see a pickup in Manhattan going to JFK. [37:26.610 --> 37:27.870] I don't think that one's it. [37:28.550 --> 37:31.410] Well, if you knew Hope, that's entirely possible. [37:31.470 --> 37:32.090] She got it wrong. [37:32.250 --> 37:33.150] She got it backwards then. [37:33.530 --> 37:35.490] And what's her cell phone number? [37:36.070 --> 37:37.310] The 917 number? [37:38.110 --> 37:38.970] No, it's not... [37:38.970 --> 37:39.970] I don't see a 917. [37:40.370 --> 37:41.530] I see a different number. [37:41.930 --> 37:43.590] Hold on, let me try another way. [37:43.790 --> 37:44.230] Okay, yeah. [37:44.330 --> 37:46.650] Do you know any other name, like... [37:46.650 --> 37:48.810] Well, maybe it's a different Sarah Brown, I guess. [37:48.950 --> 37:49.410] It's possible. [37:49.590 --> 37:50.730] Yeah, it's a different Sarah Brown. [37:50.970 --> 37:51.250] Okay. [37:51.250 --> 37:51.410] Okay. [37:51.490 --> 37:52.890] Let me just try to see... [37:52.890 --> 37:54.610] That's an odd coincidence. [37:55.010 --> 37:56.090] Hold on one second. [38:06.840 --> 38:07.880] Let's see. [38:13.510 --> 38:16.490] And she made a reservation to pick you up at JFK? [38:17.030 --> 38:18.190] Yeah, that's what she told me. [38:18.310 --> 38:18.750] She said that... [38:18.750 --> 38:19.430] Okay, let me see. [38:19.730 --> 38:20.390] I'm on the... [38:20.390 --> 38:21.430] I'm on the... [38:21.430 --> 38:28.070] Well, it's either going to be on the 420 or the 610, which is Flight 34 or Flight 2 on American Airlines. [38:28.070 --> 38:28.990] Does that help? [38:29.270 --> 38:29.710] It's not coming... [38:29.710 --> 38:30.770] It's not coming out on that name. [38:31.390 --> 38:31.790] Maybe... [38:32.810 --> 38:33.710] Wow, wow, wow. [38:34.430 --> 38:36.870] Well, how many people are you picking up on the 420? [38:36.990 --> 38:37.610] Maybe that'll help. [38:37.850 --> 38:38.850] The 420? [38:39.030 --> 38:39.190] Yeah. [38:39.450 --> 38:40.470] I don't really... [38:40.470 --> 38:41.050] Hold on one second. [38:41.230 --> 38:41.330] Okay. [38:41.330 --> 38:41.810] Let me see something. [38:42.290 --> 38:51.150] Because the only thing I can tell you is I can either have the confirmation number, the pick-up date, or the pick-up time. [38:53.030 --> 38:53.690] Let me see. [38:53.770 --> 38:56.130] The passenger's name, the car, and the dispatch zone. [38:56.190 --> 38:58.930] That's all I can really get information out of. [38:58.930 --> 39:01.790] I can't really put in a number or anything. [39:02.810 --> 39:03.430] I see. [39:04.370 --> 39:09.030] Okay, so basically you're telling me that there are a number... [39:09.030 --> 39:11.170] Did you say there were Johnson's on the 420? [39:11.350 --> 39:11.750] Johnson's? [39:11.830 --> 39:12.990] Let me find out again. [39:13.210 --> 39:13.350] Hold on. [39:15.590 --> 39:20.690] She basically told me she couldn't do it, and now I told her she could, and she's kind of going back and doing it anyway. [39:24.490 --> 39:29.390] Yeah, I got a lot of Johnson's, but I don't see no pick-up in JFK. [39:29.390 --> 39:29.450] Okay. [39:29.890 --> 39:31.350] Oh, for the 610 either? [39:32.050 --> 39:32.650] Mm-mm. [39:33.690 --> 39:34.930] Nope, I don't see. [39:35.210 --> 39:35.530] Okay. [39:36.070 --> 39:36.910] Oh, you know what? [39:36.990 --> 39:38.270] She's pulling up now in the... [39:38.270 --> 39:39.630] Okay, you know, I'm going to settle this. [39:39.630 --> 39:40.710] Okay, no problem. [39:40.930 --> 39:42.130] Thanks so much for all your help. [39:42.230 --> 39:43.090] Don't worry about it. [39:43.130 --> 39:43.690] You'll be fine. [39:43.870 --> 39:44.170] Thank you. [39:44.270 --> 39:44.610] Bye-bye. [39:45.390 --> 39:45.790] All right. [39:53.580 --> 40:00.840] We didn't really accomplish anything, but we got her to totally believe our story and become sympathetic and all that, and that's 90% of it right there. [40:00.920 --> 40:02.340] You get people on your side. [40:02.340 --> 40:10.060] You tell a ridiculous story about how your wife messed something up and, you know, they'll be on your side giving advice even and sympathy and all that. [40:10.300 --> 40:14.560] And you'll just have a good feeling that, wow, they really care even though you don't really exist in that form. [40:16.760 --> 40:17.160] Again. [40:18.360 --> 40:18.840] All right. [40:19.020 --> 40:20.440] I have more, but let me rest. [40:20.900 --> 40:21.940] Tell a story or something. [40:24.360 --> 40:25.520] You wanted me to look up something. [40:25.660 --> 40:27.420] Another method is... [40:27.420 --> 40:34.720] Well, not a method, but you ask for innocuous information from that lady, like stuff that she would normally, like a reservation number. [40:35.280 --> 40:43.740] And you ask several questions of innocuous information, then when you go to the sensitive information, usually they'll give that up too because they're already in that pattern of giving out information. [40:44.000 --> 40:46.040] So you go a little more, a little more, a little more, a little more. [40:46.920 --> 40:47.540] Usually works. [40:48.300 --> 40:48.720] Yes, it does. [40:48.800 --> 40:49.800] Does anybody else want to try something? [40:49.900 --> 40:50.720] I don't want to hog the phone. [40:52.420 --> 40:54.440] Maybe I can tell a story about Sid. [40:54.940 --> 40:55.860] Tell a story about Sid. [40:56.000 --> 40:56.440] Yes, go ahead. [40:56.900 --> 41:09.900] Well, he's worked his way into quite a few different situations, but some of the simple ones like, for instance, getting him into DEFCON many years ago, that was kind of hard at first, but that was the first year he met Kevin Mitnick. [41:10.240 --> 41:14.100] And then the second year he saw Kevin Mitnick, he remembered my dog, but he didn't remember me. [41:14.740 --> 41:15.340] What, what, what? [41:15.500 --> 41:15.660] Yeah. [41:16.120 --> 41:19.120] The first year you met him, you pet him a while and you talk with him. [41:19.240 --> 41:21.700] And then the second year, my dog, Sid. [41:21.700 --> 41:21.920] Who? [41:22.760 --> 41:23.080] Sid. [41:23.320 --> 41:23.640] Oh. [41:23.840 --> 41:24.340] No, I don't remember him. [41:24.340 --> 41:25.120] You don't remember him now? [41:25.200 --> 41:25.660] No, man. [41:25.760 --> 41:29.400] No, the second year you saw him, you asked me if I brought him the first year. [41:30.420 --> 41:31.060] And so... [41:31.060 --> 41:31.620] Are you sure it was me? [41:31.740 --> 41:32.700] Yeah, of course it was you. [41:33.520 --> 41:33.840] Okay. [41:33.920 --> 41:35.140] My brain cells must be dying. [41:35.140 --> 41:38.280] Well, it was a big deal a long time ago when DEFCON was at Alexis Park. [41:38.420 --> 41:43.000] I mean, we had to get the hotel manager involved and the DEFCON security staff involved. [41:43.100 --> 41:44.100] And eventually he was allowed. [41:44.380 --> 41:46.480] And then years after that, he was allowed. [41:46.540 --> 41:47.860] It was easy to get him in after that. [41:47.980 --> 41:49.660] But he's helped me get out of speeding tickets. [41:49.780 --> 41:50.880] He's been in central offices. [41:51.160 --> 41:53.440] I take pictures of him wherever I can get him in. [41:53.700 --> 41:56.120] And so he's a good lubricant for any social situation. [41:56.360 --> 41:57.940] Pretty much put anyone in a good mood. [41:58.100 --> 42:02.360] So if you're having trouble talking to him or getting past anything, he kind of helps out a little bit. [42:05.700 --> 42:06.220] All right. [42:06.340 --> 42:07.240] I guess I've got to try something else. [42:09.440 --> 42:09.820] Okay. [42:10.060 --> 42:12.380] Well, down in the lobby, T-Prophet gave me this idea. [42:12.820 --> 42:13.160] I don't know. [42:14.200 --> 42:15.800] Seems a little bit risky to me. [42:15.960 --> 42:24.220] But basically what we're going to do is try and call one of the ritzyer hotels in town and see if maybe we can get them to admit they have bed bugs. [42:30.190 --> 42:31.730] If this doesn't work, don't blame me. [42:32.030 --> 42:32.970] It wasn't my idea. [42:33.150 --> 42:36.350] But okay, let's pick a hotel. [42:36.610 --> 42:37.890] I have a few ritzy ones here. [42:40.430 --> 42:41.530] Yeah, I don't have that one. [42:42.750 --> 42:43.150] Sorry? [42:44.450 --> 42:47.510] I do not want Donald Trump on my bad side. [42:49.590 --> 42:50.730] I have enough problems. [42:52.730 --> 42:53.950] I have the Ritz Carlton. [42:54.050 --> 42:54.290] You know what? [42:54.350 --> 42:55.290] I'm going to call the Ritz Carlton. [42:55.610 --> 42:56.170] All right. [42:59.010 --> 43:00.050] No idea what I'm going to say. [43:14.100 --> 43:14.720] Good evening. [43:14.920 --> 43:15.440] Thank you for calling. [43:15.600 --> 43:16.800] Ritz Carlton, your essential plan. [43:17.740 --> 43:20.080] Yeah, I'm going from the last hope exterminators. [43:20.380 --> 43:24.080] I was given the number to make the delivery tomorrow. [43:24.300 --> 43:26.260] And we need the contact. [43:27.180 --> 43:29.200] I'd like to connect your call, sir, to our security [43:33.410 --> 43:34.990] for the delivery. [43:35.390 --> 43:35.770] Okay. [43:35.970 --> 43:37.770] Well, we need to do the extermination tomorrow. [43:37.870 --> 43:38.730] This is for the bed bugs. [43:39.130 --> 43:40.030] For the bed bugs? [43:40.030 --> 43:40.490] Yes. [43:41.250 --> 43:42.530] For Ritz Carlton Hotel? [43:42.830 --> 43:45.790] That's what... yeah, we... this is the order form that we got. [43:45.930 --> 43:47.390] We actually received this yesterday. [43:47.750 --> 43:49.110] And that was for a Sunday morning. [43:56.180 --> 43:58.080] At the very least, we know we're causing a stir. [43:58.280 --> 43:58.600] Good evening. [43:58.700 --> 43:59.140] Thank you for calling. [43:59.260 --> 43:59.880] Ritz Carlton Security. [44:00.060 --> 44:00.480] This is Jonathan. [44:00.600 --> 44:01.180] I may assist you. [44:01.320 --> 44:03.160] Yeah, I'm not sure I'm talking to the right person. [44:03.300 --> 44:04.660] I'm from last hope exterminators. [44:04.900 --> 44:07.040] We were told to show up tomorrow morning. [44:07.760 --> 44:09.220] And we don't have a contact. [44:09.400 --> 44:09.980] That's the problem. [44:10.540 --> 44:10.760] Okay. [44:10.880 --> 44:12.220] What time are you guys supposed to show up? [44:12.320 --> 44:13.440] We're supposed to show up at 10. [44:13.440 --> 44:14.340] 10 a.m.? [44:14.340 --> 44:15.180] No, 10 a.m. [44:15.240 --> 44:15.780] 10 a.m.? [44:15.780 --> 44:17.260] Yeah, this is for the bed bugs. [44:17.700 --> 44:18.040] Okay. [44:19.340 --> 44:20.620] Can I just place on our brief hold? [44:20.800 --> 44:21.120] Yeah, please. [44:21.240 --> 44:21.520] Thank you. [44:28.580 --> 44:29.980] I was hoping it'd say that. [44:35.620 --> 44:37.400] You all heard the name of the exterminators, right? [44:37.860 --> 44:38.320] All right. [44:41.920 --> 44:43.460] It's a good name for an exterminator. [44:46.590 --> 44:47.390] It's a great name. [44:59.800 --> 45:03.580] One thing to remember when you're doing social engineering, a lot of time is just spent waiting. [45:04.640 --> 45:07.280] Listening to silence and sometimes static on the phone. [45:09.340 --> 45:11.260] But it pays off in the end, lots of times. [45:14.290 --> 45:14.770] Yes. [45:16.030 --> 45:18.110] What location are you trying to get in contact with? [45:18.670 --> 45:19.530] What location? [45:19.630 --> 45:20.150] In Manhattan. [45:20.410 --> 45:20.930] Ritz-Carlton. [45:21.310 --> 45:21.470] Okay. [45:21.930 --> 45:24.050] Do you know if it's Central Park or Battery Park? [45:24.430 --> 45:25.190] Central Park. [45:25.330 --> 45:25.770] Central Park. [45:25.850 --> 45:25.950] Yeah. [45:26.250 --> 45:26.370] Okay. [45:27.070 --> 45:32.730] The gentleman that you would have to get in contact with, or that would be the contact, is our director of engineering. [45:33.010 --> 45:34.370] I'm going to see if I can send him an email. [45:34.590 --> 45:34.790] All right. [45:34.890 --> 45:35.070] Would you? [45:35.890 --> 45:37.050] Yeah, I'll definitely do that. [45:37.190 --> 45:39.070] And then, is there a number that I can call you back? [45:39.690 --> 45:41.630] Well, the office is closed right now. [45:41.630 --> 45:43.210] I'm actually calling you from my cell phone. [45:43.370 --> 45:43.510] Okay. [45:44.410 --> 45:45.110] You know what? [45:45.570 --> 45:49.890] If you call the 718 number and leave him, but I can't figure out that answering machine. [45:50.530 --> 45:52.690] What time will you get a response from him? [45:52.690 --> 45:58.390] Well, I'll email him now, and hopefully I can get a response within the next half hour, which I'm sure I probably could. [45:58.390 --> 45:59.210] All right, would you do that? [45:59.310 --> 46:04.090] And then I can call you back, and then we can find out what time to come in tomorrow for this, because we're supposed to do it quickly. [46:04.290 --> 46:05.190] That's what he told us. [46:05.350 --> 46:05.510] Okay. [46:06.210 --> 46:06.530] All right? [46:06.650 --> 46:06.870] All right. [46:06.950 --> 46:07.570] Thank you very much. [46:07.650 --> 46:07.810] All right. [46:07.870 --> 46:08.110] Thank you. [46:08.290 --> 46:08.330] Bye-bye. [46:08.470 --> 46:09.190] Oh, wait, wait, sir. [46:09.310 --> 46:09.570] Yeah, yeah. [46:09.650 --> 46:10.350] What company are you with? [46:10.750 --> 46:11.870] Last HOPE Exterminators. [46:11.970 --> 46:12.390] Last HOPE. [46:12.570 --> 46:12.770] Yes. [46:13.150 --> 46:13.430] Okay. [46:13.650 --> 46:13.990] Thank you. [46:14.030 --> 46:14.310] Thank you. [46:27.770 --> 46:31.490] Well, I think we can safely say if there's another HOPE, it's not going to be at the Ritz-Carlton. [46:33.750 --> 46:35.190] We will not be welcome there. [46:37.630 --> 46:39.070] And thanks, T-Prophet, for that. [46:39.070 --> 46:39.510] Yeah, that was good. [46:39.650 --> 46:40.050] That was good. [46:40.170 --> 46:40.630] It worked out. [46:47.400 --> 46:48.320] How much time do we have? [46:48.500 --> 46:51.500] Maybe we can take some questions, and we'll try one more before... [46:51.500 --> 46:54.700] The microphone is in the middle, if anybody wants to walk up and just ask... [46:54.700 --> 46:55.740] Or share your stories, too. [46:55.800 --> 46:59.320] If you guys have any social engineering stories of your own, we'd sure like to hear them. [46:59.620 --> 47:00.300] Get some inspiration. [47:01.540 --> 47:12.400] I actually got a call on Thursday morning from what I later found out to be a series of scammers that have been pretty well circulating around the Internet, calling all over the country, trying to separate people from their money. [47:13.040 --> 47:14.080] Would you like their phone number? [47:16.580 --> 47:20.600] You can give it to us, but I wouldn't give it to us with all these people, because, you know, if you... [47:20.600 --> 47:21.720] Oh, no, they're scammers. [47:22.140 --> 47:26.440] Well, I mean, you say they're scammers, but they're probably investment bankers, and they're... [47:26.780 --> 47:27.400] This is true. [47:27.880 --> 47:32.160] But definitely, sure, send us an email or hand it to us, and we can look into them. [47:32.580 --> 47:33.920] And lots of times what happens... [47:33.920 --> 47:34.660] Do you want to go home now? [47:34.660 --> 47:40.840] You type a phone number into Google, and you get all these stories of people that have had the same thing happen to them. [47:42.460 --> 47:44.860] And it's incredible what you can learn from a company. [47:45.040 --> 47:50.820] Always, whenever you do business with somebody you don't know, type in their name, type in their phone number, see if other people have had experiences with them. [47:51.080 --> 47:59.460] If you get a telemarketing call from some weird place you don't think is quite right, use Google and find out all kinds of other things about them, what other people have experienced. [48:00.140 --> 48:03.020] But definitely do your research before giving out any information. [48:04.060 --> 48:05.360] Okay, second on this one. [48:05.480 --> 48:07.000] We have two microphones, but first we're going to have... [48:07.000 --> 48:07.880] We have more people on this one. [48:08.320 --> 48:09.320] We'll go to that one next. [48:09.500 --> 48:12.240] I'd just like you to make that call in about a half hour, call that guy back. [48:12.560 --> 48:13.020] I'm sorry? [48:13.180 --> 48:15.900] I'd like you to call that guy back in a half an hour, if there is Carlton. [48:16.080 --> 48:18.080] Yeah, but I'll be on my cell phone then, really. [48:19.320 --> 48:20.120] All right, in the back. [48:21.620 --> 48:24.200] Yeah, just sharing a general story. [48:25.260 --> 48:27.360] Or even, like, just a general recommendation. [48:28.000 --> 48:30.020] The easiest way is to find, like, common ground. [48:30.160 --> 48:40.560] For example, I'm Puerto Rican, so if I see a Latin American, that common ground, you start speaking into Spanish, and they open up a whole lot that they wouldn't have opened up previously. [48:40.840 --> 48:47.270] Like, for example, the other way I was in Subway, and the previous customer was just giving them a lot of shit. [48:48.100 --> 48:52.320] So, but, you know, sometimes you can tell, you can tell, like, I know this guy speaks Spanish. [48:52.340 --> 48:57.640] So the guy leaves, I talk to him, like, you know, wow, he was giving you a lot of shit in Spanish. [48:58.500 --> 49:03.940] And without me noticing, I take my stuff, and I notice that he had put two extra cookies for me. [49:04.400 --> 49:08.320] So, you know, I don't know if that exactly counts, but that was totally a win for me. [49:09.790 --> 49:13.040] You can get very far by using a very thick accent. [49:13.160 --> 49:15.700] It doesn't even have to be an existing language, but you just... [49:16.540 --> 49:22.920] You just talk so slowly and get all these words wrong, and they will do whatever they can to get you off the phone. [49:23.060 --> 49:25.460] They'll tell you their address, their phone number. [49:27.000 --> 49:30.020] Because sometimes these representatives, they're really like slaves. [49:30.180 --> 49:31.340] They can't even hang up. [49:31.500 --> 49:34.160] They have the headsets attached to their head, and they don't even have a hang-up button. [49:34.240 --> 49:37.480] They have to wait for the customer to hang up before they get connected to the next call. [49:37.720 --> 49:38.140] It's pathetic. [49:38.290 --> 49:39.300] Also, a technique. [49:39.580 --> 49:45.000] When you're talking to somebody on the phone that you really don't want to talk to, hang up while you're talking. [49:45.220 --> 49:46.520] That must have been accidental. [49:50.060 --> 49:51.320] Next question in the front. [49:52.360 --> 49:54.820] I don't know if anyone here is from Jacksonville, Florida. [49:55.980 --> 49:59.460] But there's a radio station, and this is all over the rural south. [49:59.640 --> 50:00.380] You'll find these. [50:00.640 --> 50:03.180] They're call-in bargain radio stations. [50:03.580 --> 50:06.160] And they'll say their phone number over the air. [50:06.270 --> 50:10.180] It's usually an FM band, a little bit below the commercial band between the religious stations. [50:10.580 --> 50:12.680] And they will have buyer's numbers. [50:12.920 --> 50:15.380] So you can call this station. [50:16.040 --> 50:18.220] They'll answer you, and you're on the air immediately. [50:19.140 --> 50:20.940] And they'll say, Hello, what do you want? [50:21.000 --> 50:21.940] This is WJXR. [50:22.180 --> 50:25.180] And then you say, Hi, I'm buyer number 806JV. [50:25.980 --> 50:31.180] I'd like 50 truckloads of Purina dog chow delivered to my house. [50:31.270 --> 50:35.380] And they'll usually put it in the system under whoever's buyer numbers that is. [50:35.400 --> 50:38.420] And you can usually figure out the buyer number just by listening to two or three of them. [50:38.790 --> 50:43.560] And then you've got about 30 seconds on the air to say whatever you want before they chop you off. [50:45.400 --> 50:47.000] So look these stations up. [50:47.080 --> 50:48.820] One of them's in Jack's called WJXR. [50:49.240 --> 50:50.770] You have an evil mind, sir. [50:52.860 --> 50:53.940] You're welcome here. [50:54.240 --> 50:55.100] Next on this line. [50:55.960 --> 50:58.660] I'm wondering if you think you could... [50:58.660 --> 51:03.380] I know you don't know the airline, but you could probably see if you could get Sarah Brown's flight number. [51:03.580 --> 51:05.080] Because you know when she's getting into... [51:05.080 --> 51:06.770] Everybody please leave Sarah Brown alone. [51:08.080 --> 51:11.770] She just has to get to the airport tomorrow to get wherever the hell she's going. [51:11.770 --> 51:15.180] Let her do that in peace, but suggestion noted. [51:17.600 --> 51:21.000] One more here, then we'll get to Rebel who's filming his question. [51:21.800 --> 51:22.320] Go ahead. [51:22.520 --> 51:24.860] I got a bit of a story here with social engineering. [51:25.120 --> 51:35.360] A friend of mine and I were actually spinning up, staying up late at night, and we actually just got a random pop-up instant message from one of those, hey, we're going to send you a bunch of money orders. [51:35.480 --> 51:36.860] You cash them and send them off to Britain. [51:37.540 --> 51:42.580] Well, the thing is, a friend of mine, he's actually in the security and fraud department for PayPal. [51:43.400 --> 51:48.560] So we're actually just sitting there thinking, all right, how can we screw with this person? [51:48.840 --> 51:56.220] What we did actually is we pulled up a random name generator to get a bunch of different people's names. [51:56.520 --> 52:01.440] Then we got the list of all the state departments for the FBI. [52:07.440 --> 52:08.940] We then proceeded to say, okay. [52:13.290 --> 52:14.610] Go on, take yourself in deeper. [52:18.130 --> 52:26.530] We proceeded to say, yes, we're John Smith at state office of FBI in Nevada. [52:27.290 --> 52:28.470] We said, oh, okay, yeah. [52:28.570 --> 52:31.150] So we can go, yeah, we'll be right here. [52:31.310 --> 52:32.990] We'll go ahead and cash those money orders for you. [52:33.450 --> 52:34.510] Ship them off to Britain for you. [52:34.610 --> 52:35.270] No problem. [52:35.890 --> 52:42.110] Oh, by the way, we have about eight or nine other friends that we want to go ahead and just send you information because they want to go ahead and do that too. [52:44.710 --> 52:45.030] Sorry. [52:46.550 --> 52:54.490] And it got to the point where we're actually just in mid-conversation getting to start to like where she was actually getting friendly with us and all this type of thing. [52:54.570 --> 52:58.450] And she was like, well, I got to go now because I'm going to go ahead and just take a shower and we'll talk to you later. [52:58.530 --> 53:00.190] And we're like, right, whatever. [53:00.410 --> 53:03.230] We'll see if we can hear you in the news about this later. [53:05.290 --> 53:06.130] Rebel in the back. [53:06.270 --> 53:06.530] Go ahead. [53:06.630 --> 53:07.070] Make it quick. [53:07.510 --> 53:07.890] Yes. [53:07.990 --> 53:13.190] I'd like to mention social engineering, everybody knows about telemarketing. [53:14.290 --> 53:18.530] It's annoying when they call you and then they call you with numbers that they're supposed to call or ID. [53:18.830 --> 53:24.570] And when they put the caller ID, when you try and call it back, it's a disconnected number or a number that you can't call. [53:24.730 --> 53:27.330] What I do is I had to change my number. [53:27.530 --> 53:29.890] That wasn't the reason I changed my number, but I changed my number. [53:30.450 --> 53:33.910] They had the nerve because my phone number isn't listed in the phone book. [53:34.090 --> 53:38.670] They have the nerve to look up my phone number, look up my name, and call the new number. [53:39.170 --> 53:40.470] Now guess what I have to do? [53:40.590 --> 53:42.730] Thanks to you, Emmanuel, I learned this from you. [53:43.350 --> 53:45.530] Change my last name in the directory. [53:45.690 --> 53:47.070] And you could do this without a charge. [53:47.370 --> 53:53.370] You don't have to pay that unlisted, you know, because you've got to pay usually to get your name unlisted. [53:54.670 --> 53:57.270] First name remains the same, the last name you change. [53:57.670 --> 54:02.230] So in other words, now when they try and look up your name, well, it's not listed. [54:02.730 --> 54:04.470] So hopefully this whole marketing will start. [54:04.590 --> 54:11.470] So you've got to basically know how to social engineer people, know how to do these kind of... [54:11.470 --> 54:11.730] Okay. [54:12.170 --> 54:12.690] Thank you. [54:14.890 --> 54:16.390] Now, technically, our time is up. [54:16.570 --> 54:17.350] Kevin is up next. [54:17.530 --> 54:17.570] Sure. [54:17.610 --> 54:20.810] We're going to sort of seg into him, so we'll take one or two more. [54:20.970 --> 54:21.950] We really can't take more than that. [54:22.090 --> 54:25.930] So if you're not right in front of a microphone right now, we're not going to have time. [54:26.350 --> 54:26.710] Sorry. [54:26.710 --> 54:27.970] But Kevin is up next. [54:28.230 --> 54:29.410] Let's take this question here. [54:29.710 --> 54:29.910] All right. [54:30.310 --> 54:33.130] I just had a short story that kind of has some useful advice. [54:33.690 --> 54:34.530] I'm Deviant. [54:34.610 --> 54:36.590] You may have seen me with TOOOL doing the lockpick stuff. [54:36.990 --> 54:44.570] One of the things we give out as crazy prizes for some of our contests in various cons are these, we call them penetration tester kits. [54:45.170 --> 54:47.350] They're actually like field technician shirts. [54:47.530 --> 54:52.210] Like, you know, the polo with the embroidered like Verizon and Comcast logo and Fire Services logo. [54:52.530 --> 54:58.510] For a while, I just started trying to email companies and call companies saying, oh, I see you do digitized embroidery. [54:58.810 --> 54:59.710] Can you do this? [54:59.810 --> 55:03.750] And you'd always get, no, we can't do that for you unless you can send us your letterhead. [55:03.850 --> 55:05.890] And you could have, you know, gone that route, obviously. [55:06.230 --> 55:09.070] But I said, there's got to be an easier way to make these frigging shirts. [55:09.210 --> 55:12.050] So I just started looking for the smallest home business embroidery. [55:12.230 --> 55:13.350] Like, I think I looked on Craigslist. [55:13.770 --> 55:17.670] And I found some lady right in the town next door and I sent this email. [55:18.290 --> 55:24.110] Theater, even if you're not with a theater group, pretending you're in theater allows you to do a lot of stuff. [55:24.290 --> 55:25.650] Like, oh, these are fake weapons. [55:25.670 --> 55:28.650] I can transport them into this part of the city because we're doing a production. [55:28.830 --> 55:31.410] I can smoke on this stage because this is a theater show. [55:31.770 --> 55:34.530] I said to this lady, I said, I don't know if you can help. [55:34.670 --> 55:36.690] It's kind of a rush job, but we'll pay you extra. [55:37.010 --> 55:43.230] We're doing a musical review about the problems and plagues of the telecom industry called Can You Hear Me Now? [55:45.630 --> 55:47.130] And it should be really fun. [55:47.230 --> 55:55.110] And the last, last scene, it's this amazing, like, this kick line that comes down through the audience with people in all these different corporate shirts. [55:55.310 --> 55:58.550] We're going to need, like, a hundred, like, Comcast and Variety. [55:58.610 --> 56:00.450] Like, I have the artwork all PSD'd. [56:00.510 --> 56:02.170] Can you just digitize and embroider this? [56:02.450 --> 56:03.590] And I got this email back. [56:03.650 --> 56:04.970] She's like, that sounds fascinating. [56:04.970 --> 56:06.110] Where is that going up? [56:06.170 --> 56:08.970] And I was like, oh, I'll set tickets aside for you if you'd like to come. [56:09.190 --> 56:12.910] So that's how, like, I have all these Verizon shirts and Comcast shirts. [56:13.790 --> 56:14.510] So, yeah. [56:19.700 --> 56:20.580] That is brilliant. [56:20.800 --> 56:21.260] Thank you. [56:21.380 --> 56:24.300] The thing is to get people enthused and on your side. [56:24.420 --> 56:25.500] And that's the trick. [56:25.840 --> 56:27.460] And also, you know, you mentioned letterheads. [56:27.660 --> 56:32.200] And that's something that I've always been amazed by, especially, like, with clowns like Network Solutions. [56:32.720 --> 56:33.660] All you got to do... [56:34.220 --> 56:37.000] Well, yeah, you know, our site got redirected to gay porn last year. [56:37.060 --> 56:39.400] And that was because somebody faked a letterhead. [56:39.560 --> 56:39.900] How... [56:39.900 --> 56:43.060] I mean, they asked for your letterhead as verification. [56:43.440 --> 56:46.360] What, do they have a file of everybody's letterhead in the world? [56:46.860 --> 56:48.900] How do they know what your letterhead looks like? [56:48.940 --> 56:50.760] You just make something up and that's it. [56:50.860 --> 56:52.260] You can do it in two minutes. [56:52.660 --> 56:54.720] And somehow, that's proof of your identity. [56:54.920 --> 56:55.740] It's insane. [56:56.120 --> 56:57.760] Okay, we're only gonna have time for the one question in the back. [56:57.840 --> 56:58.160] I'm sorry. [56:58.160 --> 57:00.400] Okay, this is a story as well. [57:01.020 --> 57:07.020] Sometimes the guy doing the social engineering won't actually be the guy who's benefiting from it. [57:07.500 --> 57:09.360] One time, my dad and I went for movies. [57:09.560 --> 57:22.700] Guy ahead of us, movie was delayed, flipped out, went crazy, yelled at this lady, stormed out, and the lady just gave us four free tickets just because that guy had freaked out and my dad was a middle-aged guy too. [57:22.700 --> 57:33.660] So, in order to avoid another middle-aged guy freaking out, they gave us twice as many tickets than we had originally paid for and we got to see the original movie. [57:35.280 --> 57:35.680] Awesome. [57:37.040 --> 57:37.980] No, I was listening. [57:39.580 --> 57:42.600] We're just gonna give the people up here a chance to say one last thing. [57:42.720 --> 57:47.040] Actually, I just would like to quickly say, since we don't have time to do it, but this would have been a good one. [57:47.440 --> 57:49.940] We have a list of Starbucks that are closing. [57:50.780 --> 57:54.780] Apparently, having millions of stores, they have to like downsize a little bit. [57:55.080 --> 57:55.940] Yeah, it happens. [57:56.060 --> 57:58.960] But we were gonna call them representing the Last HOPE Foundation. [58:01.460 --> 58:02.600] What we are... [58:02.600 --> 58:03.740] No, we don't have time. [58:04.260 --> 58:10.680] We're a company that makes donations to employees affected by downsizing and we... [58:11.220 --> 58:18.240] We're trying to be nice here and we want to send a check but we just need the employee list faxed to us, you know. [58:18.580 --> 58:21.240] With the Social Security numbers for tax purposes... [58:21.240 --> 58:22.240] No, we don't have time. [58:22.360 --> 58:23.100] Kevin's gonna get mad. [58:23.240 --> 58:24.500] I do not want Kevin Mitnick on my badge. [58:25.700 --> 58:26.420] Do it! [58:26.680 --> 58:29.950] Do it! [58:30.290 --> 58:30.490] Do it! [58:30.490 --> 58:30.830] All right. [58:31.230 --> 58:31.530] All right. [58:35.810 --> 58:36.170] Okay. [58:38.770 --> 58:40.490] Will it be Ohio or will it be California? [58:43.590 --> 58:44.310] Good Lord. [58:46.610 --> 58:47.470] Say it's popular. [58:47.750 --> 58:48.150] I told you. [58:49.630 --> 58:49.970] All right. [58:50.850 --> 58:51.690] I hope they're open. [58:52.990 --> 58:54.030] Phone about to be picked up. [58:54.150 --> 58:54.290] All right. [58:54.350 --> 58:55.190] You guys gotta be quiet. [58:55.190 --> 58:58.010] It's very hard to explain a thousand laughing people to somebody on the phone. [58:59.970 --> 59:02.510] You know, the TV can only be so loud in the background. [59:03.810 --> 59:04.210] All right. [59:04.370 --> 59:04.730] Here we go. [59:13.240 --> 59:13.560] Okay. [59:13.640 --> 59:14.500] Now we know their whole phone number. [59:14.620 --> 59:14.720] Great. [59:35.330 --> 59:36.190] I don't think they're there. [59:38.930 --> 59:39.570] Oh, great. [59:44.600 --> 59:44.920] Hello? [59:47.660 --> 59:47.980] Hello? [59:49.320 --> 59:49.960] There's nobody there. [59:50.080 --> 59:50.100] There's nobody there. [59:50.100 --> 59:50.160] Okay. [59:50.240 --> 59:51.160] Let's call California then. [01:00:28.660 --> 01:00:41.480] Thank you for calling earlier. [01:00:41.740 --> 01:00:43.020] We're the organization that makes it... [01:00:43.020 --> 01:00:44.860] Your store is set to be closed, correct? [01:00:45.180 --> 01:00:45.580] Mm-hmm. [01:00:45.780 --> 01:00:46.020] Okay. [01:00:46.120 --> 01:00:48.380] We make donations to employees. [01:00:48.580 --> 01:00:49.700] We're a national organization. [01:00:50.000 --> 01:00:52.700] And we're funded by PayPal and various other methods. [01:00:52.960 --> 01:00:58.860] What we do is we make donations to the employees that are affected by these downsizings throughout the nation. [01:00:59.380 --> 01:01:00.940] There's your simple chocolate chip. [01:01:01.180 --> 01:01:01.340] Sorry. [01:01:01.540 --> 01:01:01.780] Go ahead. [01:01:02.040 --> 01:01:02.200] Yeah. [01:01:02.380 --> 01:01:05.620] So basically, we just needed the fax sent to us of the employee names. [01:01:06.640 --> 01:01:07.920] Oh, okay. [01:01:08.700 --> 01:01:09.100] Well... [01:01:09.100 --> 01:01:10.100] Do you need our fax number? [01:01:10.880 --> 01:01:15.500] I can take that from you, but I can't do anything about that. [01:01:15.820 --> 01:01:16.960] It would have to be my manager. [01:01:17.880 --> 01:01:18.280] Okay. [01:01:18.400 --> 01:01:24.160] Well, if you could just say that you talked to me and that this is something that we need to have processed by Monday in order to get the check out. [01:01:24.600 --> 01:01:25.560] Last HOPE, you said? [01:01:25.680 --> 01:01:26.420] The Last HOPE Foundation. [01:01:26.680 --> 01:01:27.480] Have you never heard of us? [01:01:27.760 --> 01:01:28.100] No. [01:01:28.280 --> 01:01:33.800] When a store is downsized, what we do is we take up collections for the employees who are terminated. [01:01:34.460 --> 01:01:41.380] And then depending on the amount of the donations, we send checks to either the entire store or to each individual employees. [01:01:41.440 --> 01:01:44.180] In your case, it would probably amount to about $75 each. [01:01:44.340 --> 01:01:45.920] Not very much, but it's something. [01:01:46.660 --> 01:01:51.620] And we represent the national organization that helps people that are being downsized. [01:01:51.800 --> 01:01:54.320] And unfortunately, that's what's happening to you right now. [01:01:55.240 --> 01:01:58.460] So, I talked to somebody at length before. [01:01:58.640 --> 01:02:01.540] I thought that you would have gotten the information and they could send the fax now. [01:02:02.100 --> 01:02:04.380] Oh, okay, well, I don't... [01:02:04.380 --> 01:02:04.540] I don't... [01:02:04.540 --> 01:02:04.920] I'd like... [01:02:04.920 --> 01:02:05.760] I can't... [01:02:06.460 --> 01:02:07.260] What's the word? [01:02:07.500 --> 01:02:10.760] Like, I have no authorization to, like, send all that stuff out. [01:02:11.060 --> 01:02:15.160] Because from what I knew was that our employees were... [01:02:15.160 --> 01:02:17.540] they had the option of going to different stores. [01:02:17.860 --> 01:02:21.520] And if we couldn't find something for them, they... [01:02:21.520 --> 01:02:22.760] I can't remember. [01:02:22.760 --> 01:02:25.960] But I don't know anything about this because I'm not from this store. [01:02:26.900 --> 01:02:28.360] You're not from the store that you're in? [01:02:28.560 --> 01:02:28.960] No. [01:02:29.780 --> 01:02:30.960] I'm from a different store. [01:02:31.060 --> 01:02:31.880] I'm covering a shift. [01:02:32.340 --> 01:02:32.620] Okay. [01:02:32.660 --> 01:02:33.680] You wouldn't be covered. [01:02:33.740 --> 01:02:34.400] You realize that? [01:02:35.380 --> 01:02:35.760] No. [01:02:36.220 --> 01:02:36.580] All right. [01:02:36.620 --> 01:02:38.420] I'm just saying I don't want you to be disappointed. [01:02:38.420 --> 01:02:39.320] No, no, no. [01:02:39.380 --> 01:02:39.640] I know. [01:02:39.800 --> 01:02:41.300] I understand what you're saying. [01:02:41.360 --> 01:02:42.620] But I'm not from this store. [01:02:42.760 --> 01:02:44.020] Like, my store's not shutting down. [01:02:44.160 --> 01:02:45.080] I'm from a different store. [01:02:46.060 --> 01:02:48.640] One of their employees got sick, so I came in for them. [01:02:49.260 --> 01:02:49.760] You see? [01:02:49.940 --> 01:02:50.380] I see. [01:02:50.600 --> 01:02:52.800] That might explain why you didn't get the message then. [01:02:53.100 --> 01:02:53.460] Yes. [01:02:54.500 --> 01:02:54.860] Okay. [01:02:55.020 --> 01:02:55.380] So... [01:02:55.380 --> 01:02:56.340] And what is your name? [01:02:56.840 --> 01:02:57.200] Andrea. [01:02:57.620 --> 01:02:57.980] Andrea? [01:02:58.360 --> 01:02:58.640] Mm-hmm. [01:02:58.880 --> 01:02:59.200] Okay. [01:02:59.980 --> 01:03:05.840] Yeah, I mean, if you were one of the people that was affected, I could take your name now and actually you'd be on the list. [01:03:05.940 --> 01:03:08.020] But since you're not from the store, I'm afraid I can't do that. [01:03:08.420 --> 01:03:08.720] No, yeah. [01:03:08.940 --> 01:03:11.180] My store's not shutting down. [01:03:11.340 --> 01:03:11.680] I'm fine. [01:03:11.860 --> 01:03:18.600] But if it does shut down, eventually you will probably get a call from one of our representatives and then all you would have to do... [01:03:18.600 --> 01:03:19.560] I understand. [01:03:19.740 --> 01:03:20.520] It makes sense. [01:03:21.200 --> 01:03:21.500] Good. [01:03:21.660 --> 01:03:22.360] That's all I wanted to hear. [01:03:22.440 --> 01:03:23.000] Thank you very much. [01:03:23.240 --> 01:03:23.480] Okay. [01:03:23.680 --> 01:03:23.840] Good night. [01:03:30.170 --> 01:03:30.910] Closing words. [01:03:31.070 --> 01:03:32.090] It makes sense. [01:03:32.470 --> 01:03:32.630] Yeah. [01:03:33.170 --> 01:03:33.670] All right. [01:03:34.510 --> 01:03:35.190] Good night, everybody. [01:03:35.570 --> 01:03:36.310] Kevin's up next. [01:03:57.020 --> 01:03:57.820] Good night. [01:04:01.940 --> 01:04:02.520] Good night. [01:04:03.340 --> 01:04:03.540] Thanks, sir.