I recently read
The Art of Deception by Kevin Mitnick [1], and watched the BBC show
The Real Hustle [2]. As someone who has a natural tendency to trust people, I'm interested in learning more about the underlying principles that social engineers and con artists employ, and seeing well-executed examples, from phishing to guy-on-the-street scams.
Question for security-savvy HN readers: what websites or books on this topic would you recommend? (For example, I like reading the links Schneier [3] occasionally posts about ingenious schemes he comes across.)
In case it's of interest to anyone, I'll post in the comments a compilation of the most frequent tricks & lessons I learned from the full series of The Real Hustle.
[1] http://www.amazon.com/Art-Deception-Controlling-Element-Security/dp/0471237124
[2] http://video.google.com/videoplay?docid=25386750441983070#
[3] http://www.schneier.com/
The study looks at the recurring behavioural patterns con artists use to exploit victims and concludes that there are seven psychological principles they exploit.
I summarised them here: http://www.lonegunman.co.uk/2009/12/02/seven-psychological-p... They are:
1. The distraction principle While you are distracted by what retains your interest, hustlers can do anything to you and you won’t notice.
2. The social compliance principle Society trains people not to question authority. Hustlers exploit this "suspension of suspiciousness" to make you do what they want.
3. The herd principle Even suspicious marks will let their guard down when everyone next to them appears to share the same risks. Safety in numbers? Not if they’re all conspiring against you.
4. The dishonesty principle Anything illegal you do will be used against you by the fraudster, making it harder for you to seek help once you realize you've been had.
5. The deception principle Thing and people are not what they seem. Hustlers know how to manipulate you to make you believe that they are.
6. The need and greed principle Your needs and desires make you vulnerable. Once hustlers know what you really want, they can easily manipulate you.
7. The Time principle When you are under time pressure to make an important choice, you use a different decision strategy. Hustlers steer you towards a strategy involving less reasoning.
I recommend reading the full study; it's fascinating.
[1] Of the University of Cambridge Computer Laboratory. [2] Writer and producer of The Real Hustle. Was an IT consultant for twelve years before moving into entertainment.