Thursday, February 13, 2014

Part I: Human Nature

Basic Feeling

        We all have basic feeling like fear, excitement, guilt, and so on. Social engineers exploit the following six traits of our nature to get what they want:
Authority: People tend to believe ones who have more power or authority (especially those in military and law enforcement).

  • Liking: People likes favorable persons, especially those who share the same interest, hobbies, background, personality, etc.
  • Reciprocation: When receiving favors, gift, assistance, or other things, we tend to give something in return.
  • Consistency: People tend to do what they have promised, i.e., consistent with what they said.
  • Social validation: We tend to believe the behavior that is inline with social behavior (e.g., being sympathetic to a new employee).
  • Scarcity: People tend to want to do thing that has limited supply, e.g., final sales, 10 first callers only.

Feeling Trumps Reason

Feeling is generally quicker and stronger than reasons. It is easier to not to reason than not to feel. You can try to be unreasonable to what you hear. But, it is much harder not to hear. 
We usually believe people we think we can trust. We might try to give reason for trusting these people. But, in the end, a lot of people because they ‘feel’ they can trust these people. 
Confirmation bias makes it worse. If what that guy said matches with our preconception, we are even more likely to believe. After we trust that person, we tend not to question those person. 
Source: The Art of Deception: Controlling the Human Element of Security

Book or Audiobooks?

          Personally, I prefer audiobooks. It's fun, and I can listen when I'm doing something else. It also makes other activities (e.g., jogging) a lot more fun. For more detail about audiobooks, please read [this post].     
          There is one more reason that may encourage you to go for the audiobook version. You can get it now for FREE. Audible offers you a free trial for 14 days. Even if you get the book and cancel the subscription right away (so that you don't have to pay), you can keep the book. And, don't worry if you lost the audiobook file. Just log into You can keep downloading the over and over again.

    About the summary: It takes time to finish up a book. And, when you do, sometimes, you want to review what you learn from the book. If you do not make  notes as you read, you might have to go through the book once again. This can be time-consuming when you are dealing with a book. But you can still flip through the book and locate what you are looking for.

However, when the material is an audiobook, it is extremely hard to locate a specific part of content. Most likely you will have to listen to the entire audiobook once again.

This book summary will help solve the pain of having to go through the book all over again.

I am leaving out the details of the books. Most books have interesting examples and case studies, not included here. Reading the original book would be much more entertaining and enlightening. If you like the summary, you may want to get the original from the source below.

1 comment:

  1. Great Article
    Cyber Security Projects

    projects for cse

    Networking Projects

    JavaScript Training in Chennai

    JavaScript Training in Chennai

    The Angular Training covers a wide range of topics including Components, Angular Directives, Angular Services, Pipes, security fundamentals, Routing, and Angular programmability. The new Angular TRaining will lay the foundation you need to specialise in Single Page Application developer. Angular Training