Aten Labs » social http://atenlabs.com/blog San Diego's Premier IT Security Consultancy Wed, 29 Feb 2012 19:14:43 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Quickly spotting social engineering attempts with TinEye. http://atenlabs.com/blog/quickly-spotting-social-engineering-attempts-with-tineye/ http://atenlabs.com/blog/quickly-spotting-social-engineering-attempts-with-tineye/#comments Thu, 27 Oct 2011 17:45:02 +0000 MrB0t http://atenlabs.com/blog/?p=214 TinEye is a great service that you can use to search for similar photos on the web. You provide a photo and it compares it to its database looking for similar and modified images.

You can use TinEye to quickly spot fake accounts on social networking sites.

For example. I received this LinkedIn network request the other day.

 

 

 

 

 

 

 

Not only have I never worked with a “Jennifer Gray”, her profile photo looks like it may be a stock photo. TinEye returned 4 results for stock photography.

 

 

 

 

 

 

 

 

 

 

 

Looks like this account may be a recruiting bot or something.

 

TinEye can also be used to verify the authenticity of a photo and to see if it is a repost or duplicate of another photo. It even has Firefox and Chrome plugins!

]]> http://atenlabs.com/blog/quickly-spotting-social-engineering-attempts-with-tineye/feed/ 3 Toorcon 11, and peoplehacking http://atenlabs.com/blog/toorcon-11-and-peoplehacking/ http://atenlabs.com/blog/toorcon-11-and-peoplehacking/#comments Fri, 30 Oct 2009 04:25:00 +0000 Dan Tentler http://atenlabs.com/blog/?p=65 Toorcon this year was awesome and fun, with the exception of cstone breaking his femur, of course.  I had originally been slated to talk, but a clerical error left my name off of the schedule. Instead I took the role of  ’staff photographer’ and shot the whole event and all the speakers. A few interesting occurences took place:

  • Mckt decided to leave early, and gave me his speaking spot, which I took. Before I was able to speak, barkode approached me and kindly asked me to give my speaking slot to his panel since they desperately needed more time. I agreed. I went from speaking, to not speaking, to speaking to not speaking in one day. I was still a little sad to not be able to give my peoplehacking talk though.
  • Jolly approached me starting out his query with “So Viss, you’re a social engineering guy…” and explained how he wanted to pwn the counting jar contest (explained below)
  • I met a really neat guy from San Francisco that lapses into a really bad scottish accent when I do my really bad irish accent. This made all the dinners and parties we went to hilarious.
  • I spent some time in the lockpicking village teaching new folks how to pick locks (this is fairly standard for me at this point)

Jolly comes up to me with a few friends and asks “So we want to pwn the counting jar contest”. I smile. We step out onto the balcony outside and I start going over ways on how to sleight-of-hand the jar off of the table and replace it with a duplicate. After about 10-15 minutes of showing them techniques, it’s clear they aren’t really into the sleight-of-hand method. I talked a little bit about distraction methodology and how to get the target to turn their back on the jar and after another volley of ‘meh’ responses I said “Fine. I’ll go distract them, YOU nab the jar.”. They smiled.

I approached the counter and asked the people sitting behind it if I could get their picture:

You can see Jolly in the background on the right making the switch.

Poof! A jar appears!

I didn’t get to talk about social engineering, so I just did it instead.

I did however leave the con with a warm sense of friendliness and a brain tingling from stimulation. I love the smaller hacker cons because there is so much insightful conversation and so many awesome smart people to talk to, meet and hangout with. I always leave these things feeling a deep sense of gratitude.

]]> http://atenlabs.com/blog/toorcon-11-and-peoplehacking/feed/ 0