STEM, Social Engineering and Stealing

The Kernel delves into the hidden subculture of liars, thieves, and hackers who expose and exploit gaping loopholes in e-commerce via Jonah (not his real name), someone who’s been there and back.


“Confessions of a social engineer”
by Dell Cameron
The Kernel
August 9, 2015

serialcodegenerator…Part theater and part science, social engineering is the method by which hackers, for lack of a better term, exploit vulnerabilities in human psychology; for Jonah, it was a key to getting anything he wanted, from televisions and laptops to smartphones and expensive wines. One of his largest takes netted him around $60,000 worth of product, he says. He showed me a Rolex Daytona watch””part of a gallery of stolen goods he”d photographed in his bedroom””which retails on Amazon for around $26,000.

Whether through face-to-face interaction, by phone, or by email, the human gatekeepers of any network can be exploited””if you know how to play the game. They”re the weakest link in any company”s security.

Almost every major electronics company is vulnerable in nearly the same way: They all have warranty-based replacement systems that can be exploited. Most companies, for instance, don”t require a defective item to be returned before mailing out its replacement. It”s likewise difficult to prove that an in-warranty item has been lost or stolen.

Through repeated phone calls, social engineers develop strategies for navigating a company”s customer help line. They get a feel for which sob stories and which “yes” or “no” responses will work best toward achieving their objective. Intelligence, temperament, and even humor all come into play. The questions and responses are then mapped out, as if composing a flowchart, with the goal of expediting the con. Read the whole article.


Brian Janosch on Tech, Comedy, Bay Area Cynicism, and the Burning Man Wall

As much as we love Burning Man and the creativity on display there, we also have to admire this piece of now-viral satire from the folks at Cultivated Wit.
wall-around-sf
Unlike most anti-Burner temper tantrums, it doesn’t stick to low-hanging fruit-–it also pokes pointed fun at crowdfunding, techno-libertarian utopianism, and economic tensions in the Bay Area.

Brian Janosch, the Creative Director of Cultivated Wit and the star of the spoof video told us that, despite the rash of media coverage the Burning Man Wall has received, this is the first time he’s been asked for an interview about it.

What is Cultivated Wit and what does it do?

Well, one thing we are not is a comedy troupe. 😉 We’re a small company created by three of us who all left The Onion around the same time. The biggest thing we do is produce Comedy Hack Day, an event series that brings together comedians and developers to build hilarious and insane tech products. The best creations from every event get showcased in a comedy show that concludes each event weekend. Our about page is a little outdated and needs refreshing, but it has some more.

Why is Burning Man such a fat target?

Continue reading “Brian Janosch on Tech, Comedy, Bay Area Cynicism, and the Burning Man Wall”

Looking Back at Some Superstar Scambaiters

419 scams (a/k/a “NIGERIAN PRINCE” emails) have long, long fascinated certain quarters of the internet. They’ve flooded inboxes with outsider poetry and inspired satire and scambaiting, a prankish and dangerous literary subgenre explored at length in the fascinating work of journalist Eve Edelson.

Craigslist killers, social media “catfishing” scams, and the internet vigilantes of Anonymous now get much more attention, making 419ers look like relics, at least by internet standards. And yet, great work still emerges from the scambaiter milieu.

Here’s the absurd story (from 2013) of how a few intrepid 419-eaters orchestrated the cover of Vice, for posterity.


“How We Got the Skammerz Ishu Cover”
By Mishka Henner
Vice
December 17, 2013

Scam-baiting is a form of internet vigilantism in which the vigilante poses as a potential victim to expose a scammer. It”s essentially grassroots social engineering conducted as civic duty or even amusement, a cross-cultural double bluff in which participants on separate continents try to outdo each other in an online tug-of-war for one”s time and resources – and the other”s private banking information.

The baiter begins by “biting the hook” – answering an email from the scammer. The “victim” feigns receptivity to the financial lure, engaging the scammer in a drawn-out chain of emails. The most important element of baiting is to waste as much of the scammer”s time as possible – when a scammer is preoccupied, it prevents him from conning genuine victims.

Vice Skammerz IshuThe cover of the issue you”re looking at is a trophy from the most elaborate bait I”ve ever been involved in. Three scammers, spread across Libya and the United Arab Emirates, set the con. They posed as a widow named Nourhan Abdul Aziz, a doctor named Dr. Ahmadiyya Ibrahim and a banker going by Ephraim Adamoah. From Nourhan”s initial contact with my associate, Condo Rice, to Ephraim”s actually donning an Obama mask and shooting our cover for us, 7,000 words were exchanged over nearly four months of emails. During that time, Condo and I negotiated our way through a labyrinthine network of fake websites, bogus documents and broken English, and ended up with the weirdest photograph I”ve seen in a long time. Read the actual email correspondence here.


Glitter-bomb Prankster Can’t Stop His Own Creation

It was an idea that practically shimmered with brilliance: Have packages full of glitter shipped to your enemies, assuring they won’t get your sparkly animus out of their sweaters for a long time. It exploded on blogs and social media, and now Matthew Carpenter, its creator, is not having fun anymore. He’s trying to sell the business after just one day. Sounds like a marketing ploy if there ever was one. “This is too successful. Please take it off my hands for a lot of money.”

ViceGlitter-020


“Evil genius behind ‘Ship Your Enemies Glitter’ didn’t quite think it through”
by Andrea Romano
Mashable
January 15, 2015

Mathew Carpenter has made a huge mistake, and much like his creation, it’s not going anywhere for a while.

The 22-year-old creator of ShipYourEnemiesGlitter.com “” and self-proclaimed person who “live[s] for moolah” on Twitter “” is urging his millions of fans to stop using his brilliantly evil website to get revenge on their enemies.

After a boom in sales that also caused a temporary site crash, Carpenter decided he is in way over his sparkly head and put the site up for grabs to anyone who wants to buy it from him.

He also posted on the website ProductHunt.com, pleading with customers to stop buying his shiny and swift revenge methods.

Read the rest here.