XavierP

[Log in to get rid of this advertisement]

I picked this up from my local library and I have to say that it was well worth the read. The only drawbacks are that a book like this could be so much longer and more detailed and the second is that because of the terms of Mitnick's release he is unable to really tell us of his exploits. By the time he is able to tell us, such a long time will have passed that it will be old news. No matter.

The stories related are easy to read and quite frightening - the ease with which passwords are obtained is very very worrying.

Read this book if you want a greater understanding of social engineering, if you need a primer on what to look for in your own organisation or if you just want to be entertained.

Mara

To sum up this book in one sentence: 'if you want someone's password, it's easiest to phone and ask for it'.

It shows many situatins that can happen in every company allowing an attacker to get access to files, network etc with 'help' of people working in the company. Techniques are presened that help the attacker to prentend he/she is someone from 'inside' and ask for informations that shouldn't get outside.

Well written, good examples but I became a bit bored near the end - all the techniques are very similar to each other. The book makes you aware about the problem, but there's not enough about protection against such attacks, IMHO (the chapter about procedures is too short for me).

Schrambo

Through the entire read of this book I was scared shitless, honnest. This book really does make its point and with examples of how easy it is to extract confidental information from people and their businesses just by simply asking and telling a few white lies.

All of the examples given on how information can be obtained were so simple and straight foward and what was most concerning to me is that the exploits were all there, but the book had to literaly remind me of the situation and how it was done. Yet I was familiar with the concept already.

I recommend this book for not just computer and security enthastis and professionals but to just everyone and anyone who works runs or owns a business and uses a phone for work. From the receptionist to the IT Admistrator and CEO I strongly recommend giving this a read and take action.