Welcome Dear Turkish Hack Team Members. Today I'll talk about Shoulder Surfing and Dumpster Diving
What Does Shoulder Surfing Mean?
[When we say Shoulder Surfing, people think of nothing different from its meaning. Shoulder Surfing can mean watching, unnoticed and glancing at someone. Actually, as I just said, this is exactly what it means. Shoulder Surfing is literally "Watching the victim unnoticed while typing a password or accessing restricted systems. Binoculars or other vision enhancement can be done from close range to far distance."
What Is the Purpose of Shoulder Surfing?
The purpose of this is to gather information that the victim will not knowingly give you, taking advantage of your occupation, and to get certain information in a limited time through memory and transmit it to the necessary places.
In Which Situations Can We Be A Shoulder Surfing Victim?
Airports, Cafes, Hotels, Public Areas.
Situations With People Sitting Next To Us Or Someone Walking Behind Us.
ATMs, Bus Stops, Bus or Minibuses.
Situations Requiring the Use of Credit Cards and Etc. Such Places.
Briefly, it is possible to be a victim of Shoulder Surfing in the moment of life. However, it is very important to be careful where passwords and access are required. If We Are In Such Places, There Are Several Things We Have To Do.
What Should We Do To Avoıd?
Of course, there are lots of things you can do, but these are the most important ones:
- Not Entering Information Requiring Access Within the Community.
- Storing Passwords in the Cache of Applications with Cookie Logic.
- If Password Required, check around.
- Watching Behind and those with you in Areas Where the Public or a Community Exists (for measure)
Of course, we can increase these things sequentially. But Do Not Enter Your Personal And Important Information Without Ensure.
Next is Dumpster Diving.
What Does Dumpster Diving Mean?
This term means diving trash. Although it may seem insignificant to a large community, it is a very effective factor and a great help in creating a scenario. Because social engineers can use this kind of information to get more information about the victim, and it may even be of high importance.
What's The Purpose Of This?
Although it may seem disgusting to the person, this is a very effective method. Because people feel the need to throw out unnecessary information. This information can be personal, even credit card password. So this is a method that social engineers often use. Knowing someone's background also means knowing what they can do. In short, Its Purpose is to Collect Information Even From Garbage.
How Might It Happen in Real Life?
It would be more accurate and understandable to explain this with a video. I guess there is no one who hasn't watched the WhoAmI movie. A scene there is related to this exact situation. The scene which the team searchs for a woman's personal information in the dumpster
In the scene we watched, a Garbage diving and Hacking of German Intelligence is shown, though as a representation.
Of course, there are some similar cases in real life. There is one more thing we need to get out of this. No matter how insignificant it may be, it can have value to others. There is no such thing as not going to happen in real life, no matter how representative the scene is. It might certainly happen. This shows us the importance of social engineering and the extent of the measures we need to take.
What Should We Do To Avoıd Such A Situation?
Briefly, We Will Pay Attention To The Garbage We Throw. If we need to talk a little more;
- We Should Not Dispose of Any Written or Printed Paper That Has Personal or Corporate Information.
- We should not throw away devices such as damaged HDD - SSD - Portable Memory - USB - CD after they're broken.
- We Should Not Throw The Mail And Letters Received To Us After Reading.
- We Should Not Dispose of Used Credit or Debit Cards, Shopping Cards, Gift Cards.
- Corporately, We Should Not Dispose of Company Phone Book, Business Cards, Policy Guides, Meeting Calendars, especially User Names and Passwords.
- TigerTeam -
Additionally, there is a video shot to explain the importance of Dumpster Diving. The aim of TigerTeam is to show how important this dive is. In a 20-minute video, the process ranging from finding the name of the IT Assistant to providing full access to the Server is considered as real.
[ame]https://www.youtube.com/watch?v=MdQas_We_kI[/ame]
Thank you to everyone who read this far. Have A Good Day
What Does Shoulder Surfing Mean?
[When we say Shoulder Surfing, people think of nothing different from its meaning. Shoulder Surfing can mean watching, unnoticed and glancing at someone. Actually, as I just said, this is exactly what it means. Shoulder Surfing is literally "Watching the victim unnoticed while typing a password or accessing restricted systems. Binoculars or other vision enhancement can be done from close range to far distance."
What Is the Purpose of Shoulder Surfing?
The purpose of this is to gather information that the victim will not knowingly give you, taking advantage of your occupation, and to get certain information in a limited time through memory and transmit it to the necessary places.
In Which Situations Can We Be A Shoulder Surfing Victim?
Airports, Cafes, Hotels, Public Areas.
Situations With People Sitting Next To Us Or Someone Walking Behind Us.
ATMs, Bus Stops, Bus or Minibuses.
Situations Requiring the Use of Credit Cards and Etc. Such Places.
Briefly, it is possible to be a victim of Shoulder Surfing in the moment of life. However, it is very important to be careful where passwords and access are required. If We Are In Such Places, There Are Several Things We Have To Do.
What Should We Do To Avoıd?
Of course, there are lots of things you can do, but these are the most important ones:
- Not Entering Information Requiring Access Within the Community.
- Storing Passwords in the Cache of Applications with Cookie Logic.
- If Password Required, check around.
- Watching Behind and those with you in Areas Where the Public or a Community Exists (for measure)
Of course, we can increase these things sequentially. But Do Not Enter Your Personal And Important Information Without Ensure.
Next is Dumpster Diving.
What Does Dumpster Diving Mean?
This term means diving trash. Although it may seem insignificant to a large community, it is a very effective factor and a great help in creating a scenario. Because social engineers can use this kind of information to get more information about the victim, and it may even be of high importance.
What's The Purpose Of This?
Although it may seem disgusting to the person, this is a very effective method. Because people feel the need to throw out unnecessary information. This information can be personal, even credit card password. So this is a method that social engineers often use. Knowing someone's background also means knowing what they can do. In short, Its Purpose is to Collect Information Even From Garbage.
How Might It Happen in Real Life?
It would be more accurate and understandable to explain this with a video. I guess there is no one who hasn't watched the WhoAmI movie. A scene there is related to this exact situation. The scene which the team searchs for a woman's personal information in the dumpster
In the scene we watched, a Garbage diving and Hacking of German Intelligence is shown, though as a representation.
Of course, there are some similar cases in real life. There is one more thing we need to get out of this. No matter how insignificant it may be, it can have value to others. There is no such thing as not going to happen in real life, no matter how representative the scene is. It might certainly happen. This shows us the importance of social engineering and the extent of the measures we need to take.
What Should We Do To Avoıd Such A Situation?
Briefly, We Will Pay Attention To The Garbage We Throw. If we need to talk a little more;
- We Should Not Dispose of Any Written or Printed Paper That Has Personal or Corporate Information.
- We should not throw away devices such as damaged HDD - SSD - Portable Memory - USB - CD after they're broken.
- We Should Not Throw The Mail And Letters Received To Us After Reading.
- We Should Not Dispose of Used Credit or Debit Cards, Shopping Cards, Gift Cards.
- Corporately, We Should Not Dispose of Company Phone Book, Business Cards, Policy Guides, Meeting Calendars, especially User Names and Passwords.
- TigerTeam -
Additionally, there is a video shot to explain the importance of Dumpster Diving. The aim of TigerTeam is to show how important this dive is. In a 20-minute video, the process ranging from finding the name of the IT Assistant to providing full access to the Server is considered as real.
[ame]https://www.youtube.com/watch?v=MdQas_We_kI[/ame]
Thank you to everyone who read this far. Have A Good Day
Source: https://www.turkhackteam.org/sosyal-muhendislik/1935667-omuz-sorfu-ve-dumpster-diving-nedir-nasil-korunabiliriz.html
Translator: @Dolyetyus
