Social Engineering Task # 4

  I did not want to do my social engineering task for week #4, hence my late post. My task was to find out where Chevalier Rouge is at 1:00PM on Wednesday’s. Although an easy task to complete; and I did accomplish to obtain the information (Chevalier “might be working”), I felt bad in completing this task.  I don’t find social engineering to be fun when our task is to target our fellow players. I feel social engineering has caused a lot of people that had previously not known each other to not become friends. Everyone in our class now has their guard up and it makes it very difficult to make friends, or to get someone to believe/trust you when you are being honest. I’m very social, and I like to make new friends, but with this kind of behavior towards each other it is near impossible. I would love to be friends with everyone. I don’t know any hackers lol everyone here is learning about this just as me. It would be nice to share resources, have study sessions and interact more with my classmates. I find social engineering much more fun and real when the targets are strangers or anyone outside of our class.

I Give Up (SEA #4)

My mission was to create a fake profile, and make 5 people to follow me.

Since I was overconfident that the task would be easy and done in minutes, I started to randomize names and information using fakenamegenerator.com. The website is really cool and it helps to make up information a lot. Then, I proceeded to look for non-famous people pictures over the Internet using Google. Two pictures, the better. Google image search proved really useful. I created a profile on Tumblr.

I made sure that the individual on the picture has to be sexually attractive, but not in any way looking fake or over-stylized (such as models). Topics and things that attract people into following others over the web are the topics that you're not allowed to talk in family meetings (Politics, Sex, and Religion). I began to target both men and women on that network. I got to say that I felt a little bit guilty, since cat-fishing is something that I don't want to be targeted to.



Fake Profile:


Tumblr profile:




:(

Social Engineering Task # 5 (FAILED)

1.  What was your task?
My task was to figure out the password of a fellow player by shoulder surfing

2.  What did you do? 
While Doctor Green was making his account for codeacademy, he was sitting right next to me. He was too occupied to see that I took out my phone and was recording him via video typing his password. Unfortunately his fingers move too quickly for me to even see what he was typing :(

3.  How effective was your strategy?
My strategy was effective, but he was too fast for me. If I had been standing behind him with my camera right over his shoulder, I think I might have been able to see what he was typing. I was sitting in a weird angle. 

4.  What are the moral stakes?

The moral stakes of this social engineering task are none because I failed at it!
5.  Now that you have done this, what could you do with the information or skills you obtained?
Finding out passwords of individuals by shoulder-surfing is a huge strategy applied by hackers. Anyone can easily walk by and just stand over your shoulder if you are not being careful and acquire your password. This is why I am always hyperaware of my surroundings in public when I am typing my passwords so that nobody is standing behind me and trying to see what I am typing. 

6.  Reflect on how you felt when you were doing this.
I felt like a creep because Professor Mahoney was walking behind me giving directions on how to get into codeacademy and I think she saw me. Its really embarrassing and creepy to me to try to find out someone's password 

Social Engineering #5 (FAIL)

My task was to gain sympathy from a classmate by pretending an injury.

I failed at my task.

I pretended to hit a wall with my shoulder and arm (and  with Helion Black and  Baby Pink following behind me. They were apathetic* or too busy watching their phones. Or knew something was up. In fact, no one else cared. :(

I then pretended to stub my toe on a desk in front of Dr Green and did not get notice.

While I didn't feel uncomfortable doing this, I know that a career in acting is not for me.

What I did learn is that if properly done, this could serve as a distraction while tag-teaming with someone else in trying to obtain or access information on a computer.

Leaderboard Updated - 3/1/16

Leaderboard
Name	Points
Reverend Cyan	21
Doctor Green	16 ( 1 credit toward grade for attempt)
Jade	16
Ms. Pinky Toe	14 (1 credit towards grade for attempt)
Sargeant Bluebonnet	11
Sgt.BabyPink	10
King Blu	10 (1 credit towards grade for attempt)
LeLion Noir	9 (1 credit towards grade for attempt)
CricketLime	8 (0 objections remain)
Dr. Blu Ninja	7 (3 attempts no credit, 1 credit towards grade for attempt)
Admiral Arsenic	6 (1 no attempt)
Helion Black	6
Mister Deer	5 (1 credit towards grade for attempt)
Admiral Chartreuse	4 (2 credit towards grade for attempt)
Chevalier Rouge	(1 credit towards grade for attempt)

Scripting Assignments due 3/8/16

Please complete CodeAcademy Python activities beginning with Unit 1 and through Unit 5.  You must create an account to complete the work.

Then please complete the following three assignments:

Scripting 1 - Basic Port Scanning

Scripting 2 - HTTP Scanning with Python

Scripting 3 - Password Hashes with Python


When you have completed them, ignore emailing them to the email address listed.  This is a colleague of mine who provides his stuff open source for other faculty to use.  Please email it to me at the usual email address.

These are due by 3/8/16.

Social Engineer 5

Mspinkytoe on the move again. My task this week was to follow a classmate and get a snapshot of their front door. Only being aware of a few mates in my class and a handful of them are usually to the left of me. Towards the end of class performed a small game to get to know one another in the class by saying our names and fun facts to help get more acquainted. As class ended I slowly walked behind some fellow targets to figure out who would be my next victim. I decided on taking a trip to Eros Boutique & Accessories which happen to be in the same direction of any target do a little light shopping. Upon my way of entering the MBTA turn styles I met BlueBonnet and inform them I was heading the same direction as he was to go to one of my favorite boutique area. We conversed a little while commuting on the train ride. Upon arriving near the stop he started gathering his and so did I. He walked the opposite direction heading towards the west the same direction that the Sun was setting. My direction was to the east as if I was going to the direction of Eros Boutique in the area. When I noticed he was in his own world of heading home. I changed my direction slowing pacing behind him and tried my best to keep a small distance behind him. This task so very odd to me it just did not fit right as my character. As I watched him glide up the stairs to the door I waited as he entered his comfort zone. I took a quick snapshot and headed back east towards the Orange Line train. I never made it to Eros Boutique & Accessories that day for they happened to be closed and they really didn't exist in that particular area but he wasn't a shopper so he didn't know that. This task was completely out of my character it was a very hard for me to fulfill because I felt like a stalker. The task was completed mspinkytoe is officially off for

duty. It's a rough job somebody's gotta do it.