[02:34.530 --> 02:35.230] Hello, hello. [02:35.490 --> 02:35.670] Okay. [02:36.370 --> 02:37.590] We've settled down out there a little. [02:37.930 --> 02:38.370] Okay. [02:41.890 --> 02:52.170] Welcome to Social Engineering, which we traditionally do on Sunday because a lot of corporate people like to come just for that and we want them to pay full price. [02:53.810 --> 02:59.250] Seriously, people come here at 3:55 from AT&T and they pay $50 for the weekend just to see this one panel. [02:59.750 --> 03:01.090] And we don't want to disappoint them. [03:02.110 --> 03:09.210] So we're going to, of course, be talking about what Social Engineering is with our esteemed panel here. [03:09.330 --> 03:12.950] And we're also going to attempt to make some calls like we like to do sometimes. [03:13.270 --> 03:16.670] Keep in mind, though, this is pretty well unplanned. [03:16.730 --> 03:20.270] We have a couple of things lined up that may work or may not work. [03:20.390 --> 03:24.850] But understand with any attempt at Social Engineering, it could fail completely. [03:25.170 --> 03:26.610] So it's very nerve-wracking. [03:26.710 --> 03:27.550] We want to do something cool. [03:27.630 --> 03:30.270] We want to be successful and get information we're not supposed to be able to get. [03:30.310 --> 03:30.970] But it could fail. [03:30.970 --> 03:31.810] We could get nothing. [03:31.830 --> 03:32.630] We could get yelled at. [03:32.690 --> 03:33.750] We could have the cops called on us. [03:33.810 --> 03:34.170] We don't know. [03:35.030 --> 03:38.570] Let's start by introducing everybody on the panel. [03:39.410 --> 03:41.850] Over to my right is Cheshire Catalyst. [03:49.360 --> 03:51.940] And to my immediate right, Kevin Mitnick. [03:57.960 --> 03:58.860] You know me. [03:59.140 --> 04:00.700] And to my left is Bernie S. [04:00.920 --> 04:01.360] Good evening. [04:06.670 --> 04:14.470] I want to start just by asking Kevin, since he's the master social engineer, according to all the authorities, what is Social Engineering? [04:15.030 --> 04:23.930] Well, it's basically using deception, manipulation, and influence techniques to get people to say yes to what you want them to do. [04:25.030 --> 04:32.610] For example, giving you a piece of information or doing some sort of action that creates a security hole that you could exploit later. [04:33.450 --> 04:36.150] So I guess that's a reasonable definition. [04:36.530 --> 04:41.170] Whenever there's humans involved, it seems like there's going to be a weakness someplace. [04:41.350 --> 04:45.370] And as long as human beings are involved, you'll be able to get information that you're not supposed to get from them. [04:46.070 --> 04:48.110] And that's really what Social Engineering is all about. [04:48.210 --> 04:51.090] What you do with it beyond that point, that's really up to you. [04:51.250 --> 04:57.010] You know, you might just be trying to get some information that will be an advantage to you somehow. [04:57.630 --> 05:01.750] Or you might be trying to do something more nefarious, you know, lie, steal, cheat, whatever. [05:02.870 --> 05:09.070] We're here just to demonstrate and talk about how easy it is to get people to tell you things they really shouldn't be telling you. [05:09.490 --> 05:14.670] Maybe we can just give a couple of examples from the past as to what we're talking about. [05:14.890 --> 05:15.910] Things that have happened? [05:16.090 --> 05:17.930] Do you guys have any stories you'd like to relate? [05:18.570 --> 05:19.510] I never did it before. [05:19.910 --> 05:20.750] I never did it before. [05:22.370 --> 05:26.790] Well, some of what Social Engineering is, is going to be places where maybe you're not supposed to be. [05:27.510 --> 05:36.370] I used to have a series of things I called Operation Back Door, where I would find my way into the backstage area of various concerts and things. [05:37.030 --> 05:40.150] Those Mother's Brothers were coming to town way back in the 60s. [05:40.610 --> 05:46.490] And they were great heroes of mine, as was their political pundit, Pat Paulson, who I actually voted for president a number of times. [05:49.070 --> 05:54.410] So I'm underground in the War Memorial Auditorium of Rochester, New York, with my good friend. [05:54.630 --> 05:58.790] And we're waiting for people to come around, because you're supposed to be there very early. [05:58.990 --> 06:00.570] The locals think you're from out of town. [06:00.730 --> 06:01.830] The out-of-towners think you're local. [06:01.910 --> 06:02.830] Nobody knows who you are. [06:03.050 --> 06:04.530] And you're running around with a clipboard. [06:04.810 --> 06:06.350] So you must be official, right? [06:07.410 --> 06:16.970] So, we're coming around this corner, and we see down the long corridor just underneath the stage, this fellow coming towards us, and behind him, the guard following him. [06:17.570 --> 06:23.030] So this fellow comes up to us, and I say to him, hi, I guess you're not supposed to be here either. [06:24.310 --> 06:27.330] He takes this in, said, oh, uh, yeah, I guess so. [06:27.510 --> 06:28.570] Okay, come with me. [06:28.730 --> 06:31.110] And we step into the dressing room right there. [06:32.390 --> 06:34.150] I tell him, sit down. [06:35.050 --> 06:42.150] You, the kid who's walking up, you start fiddling with your camera, Al, and I whip out a little booklet from the back of my clipboard, start reading this. [06:42.550 --> 06:44.230] And I start scribbling on my clipboard. [06:44.350 --> 06:47.570] The guard guest of the dressing room looks in, and I say, hi, may I help you? [06:48.590 --> 06:49.850] Oh, oh, no, that's okay. [06:49.990 --> 06:50.730] And off he goes. [06:53.410 --> 07:01.650] And a funny other story about the clipboard is, um, there was an inmate that was incarcerated at Leavenworth USP, United States Penitentiary. [07:01.710 --> 07:12.650] And he got some street clothes while he was in custody, grabbed a clipboard, and then walked around, uh, the facility, and the guards were letting him through anything because he was, it looked official, like he was carrying a clipboard. [07:12.770 --> 07:18.710] And he walked out right to a taxi cab at the outside of the prison entrance, and just took a cab, and that's how he escaped. [07:18.810 --> 07:19.590] It's a true story. [07:26.200 --> 07:34.280] And, uh, in an ironic twist, this panel itself would not be possible, uh, to, to have today without social engineering. [07:34.460 --> 07:35.900] There is a crucial piece of equipment. [07:35.900 --> 07:40.160] We have here a telephone patch, which allows us to tie the phone line audio into the PA system. [07:40.380 --> 07:41.860] It's a special kind of hybrid patch. [07:42.220 --> 07:48.740] And, uh, I had about eight boxes of equipment I had to haul up here from Philadelphia, and, uh, so tired I forgot to pack that box. [07:49.020 --> 07:55.320] So, I got up here, uh, a couple days ago, and, uh, just realized yesterday I didn't have the box with the phone patch in it. [07:55.740 --> 07:57.980] And, uh, it's a long drive to Philadelphia and back. [07:58.100 --> 07:58.840] I was already exhausted. [07:59.120 --> 08:13.580] So, uh, I called a friend in Philadelphia, had them go over to my apartment, get it, and, uh, uh, called Amtrak, and they assured me that they could use a service called Package Express to put it on a train from 30th Street, Philly, up to, uh, Penn Station over here. [08:14.080 --> 08:20.580] So, um, had to use some social engineering just to get the equipment on the train, because, uh, they said, it can only be certain items. [08:20.660 --> 08:21.540] What is it you're shipping? [08:21.880 --> 08:23.880] I said, it's a piece of electronic equipment. [08:23.980 --> 08:26.480] They said, oh, we don't, we don't allow electronic equipment to be shipped. [08:26.740 --> 08:27.700] I said, well, why not? [08:27.780 --> 08:28.940] They said, well, we don't know what it is. [08:29.020 --> 08:29.860] It could be a bomb or something. [08:30.020 --> 08:31.360] Like, okay, well, what is acceptable? [08:31.700 --> 08:34.360] And they said, clothing, food, that sort of thing. [08:34.520 --> 08:42.020] So, I called back again and said, uh, I need to ship a piece of, uh, clothing with some books to New York. [08:42.660 --> 08:45.420] And, uh, they said, okay, and I gave them my information. [08:45.860 --> 08:50.480] And they told me to be on a train that night and be here this morning at, uh, 10 AM. [08:51.040 --> 08:54.900] So, uh, it came, uh, it came on the train. [08:55.000 --> 08:55.520] It got up here. [08:55.600 --> 08:58.790] I went over to the, to the station to get it after 10 o'clock. [08:59.340 --> 09:01.220] And, uh, the office was closed. [09:01.360 --> 09:01.980] The door was closed. [09:02.120 --> 09:03.140] And I talked to the security guard. [09:03.240 --> 09:04.320] They said, no, they're not open until Monday. [09:04.620 --> 09:07.560] I said, well, I was told that Monday morning, uh, Sunday morning, I could pick it up. [09:07.960 --> 09:08.640] They said, no, it's closed. [09:08.740 --> 09:09.320] You can't get anything. [09:09.790 --> 09:10.820] So, I'm like, what am I going to do? [09:10.920 --> 09:14.500] So, uh, I looked at the counter where you're supposed to actually pick it up, where the security guard wasn't. [09:14.660 --> 09:15.340] I'm like, what am I going to do? [09:15.400 --> 09:16.280] So, I went back to the hotel. [09:16.620 --> 09:20.290] I had this, this, uh, nice polo shirt from the National Security Agency. [09:20.500 --> 09:21.320] I put that on. [09:22.040 --> 09:28.200] Uh, came over with my, uh, came back to 30th Street with this, uh, two-way radio we're using for communications here at the conference. [09:28.720 --> 09:30.980] And, uh, walked up to the counter directly. [09:31.120 --> 09:33.040] I said, we have an urgent package from Philadelphia. [09:33.260 --> 09:33.560] It's urgent. [09:33.660 --> 09:34.280] We get it immediately. [09:34.520 --> 09:38.380] And I just spoke with a stern tone of voice, with a shirt, with an emblem, and the radio. [09:38.780 --> 09:41.220] And the guy behind the counter was like, yes, sir, what can I do for you, sir? [09:41.360 --> 09:42.460] Come right back here, sir. [09:43.400 --> 09:43.920] And, uh, [09:50.990 --> 09:55.050] and it's, one of the biggest challenges in social engineering is not to lie if you can help it. [09:55.150 --> 09:56.290] So, I didn't tell any lie. [09:56.410 --> 09:58.370] I just said, this is an urgent security issue. [09:58.650 --> 10:00.870] Um, I didn't say I was at the National Security Agency. [10:01.110 --> 10:02.150] He let me right back there. [10:02.190 --> 10:05.210] He said, whatever you need, sir, just pick out whatever you need. [10:05.470 --> 10:07.850] And, uh, I'm looking at all of these, there's all these packages. [10:08.170 --> 10:10.430] I said, uh, alright, this is the one I need. [10:10.550 --> 10:12.530] He said, I said, do I need to sign anything? [10:12.630 --> 10:13.510] No, sir, it's yours. [10:13.930 --> 10:15.010] So, I just left with the box. [10:15.110 --> 10:19.230] I could have walked out with anything from package, from Amtrak, uh, Package Express. [10:19.610 --> 10:23.250] So, you know, if you need anything there, just wear the right clothing. [10:24.990 --> 10:25.310] Unbelievable. [10:27.050 --> 10:28.090] You didn't hear that here. [10:28.390 --> 10:31.310] Uh, they're a block away, Bernie. [10:33.790 --> 10:35.630] Hey, Bernie, I remember... See off the exits. [10:36.150 --> 10:43.210] Hey, Bernie, I remember a similar thing where I, uh, I don't know, it was about a decade ago, and I went into a courthouse to get, uh, somebody's file. [10:43.430 --> 10:53.330] And I went up to the court clerk, and I was dressed in a suit, I was wearing my two-meter HT radio, and she handed me the file, but also another document that said sealed record with it. [10:53.390 --> 11:03.330] And she thought I was some sort of law enforcement or a court officer, so I got a copy of the sealed record without even asking, because she perceived me to be an authority based on the suit and the HT. [11:03.990 --> 11:05.150] It's supposed to be sealed. [11:06.110 --> 11:08.230] Okay, let's, uh, let's have a little fun here. [11:09.010 --> 11:13.690] Um, fast food, that's always my favorite, because you get all kinds of crazy reactions from people. [11:14.310 --> 11:16.570] Um, we're gonna try something today. [11:16.910 --> 11:21.670] Uh, this is what I call the multi-step social engineering, uh, exercise here. [11:21.770 --> 11:34.190] And that's where you go one step at a time and get more information each time you make a phone call until you have a lot of information to prove that you're entitled to the information that they give you at the end, or the action that you make them do at the end. [11:34.470 --> 11:38.010] Um, so we're going to, our target today is going to be Taco Bell. [11:38.530 --> 11:38.930] Um, [11:45.230 --> 11:46.090] I, I need a little help here. [11:46.170 --> 11:48.590] Does anybody know where they're headquartered, where their corporate headquarters is? [11:48.810 --> 11:48.930] Anybody? [11:49.870 --> 11:50.550] Irvine, California? [11:50.930 --> 11:51.610] Thank you very much. [11:51.710 --> 11:54.070] You see, it's, it's good to have this information handy. [11:54.970 --> 11:55.370] Okay. [11:57.090 --> 11:57.490] Great. [11:58.010 --> 12:01.870] Um, my name for this exercise is going to be Scott Williams. [12:02.210 --> 12:04.990] So, uh, don't be confused if you hear me call myself down. [12:05.070 --> 12:07.910] I'm going to pick up the phone and hopefully it won't be ghastly feedback when I do it. [12:09.070 --> 12:10.190] There's no dial tone. [12:14.550 --> 12:15.030] Okay. [12:15.150 --> 12:16.010] Who's the wise guy? [12:18.070 --> 12:18.890] Go ahead now. [12:20.410 --> 12:21.310] What just happened? [12:22.110 --> 12:22.310] Go ahead. [12:28.710 --> 12:29.950] This is 212, are you good? [12:36.520 --> 12:41.200] Please dial one, then the alien code, and the seven-digit number to complete your call. [12:41.500 --> 12:45.040] All right, I forgot. [12:46.680 --> 12:47.940] Use the dialing your cell phone. [12:48.340 --> 12:48.820] Microphone, please? [12:48.900 --> 12:49.020] Okay. [12:49.160 --> 12:52.480] I forgot, uh, in this city you have to dial the full ten-digit phone number. [12:52.540 --> 12:53.260] I forgot that, okay? [12:53.400 --> 12:54.140] I'm from Long Island. [12:54.260 --> 12:55.740] We still have seven-digit phone numbers out there. [12:56.740 --> 12:57.980] Okay, let's try that one more time. [12:58.100 --> 12:58.220] Sorry. [12:58.900 --> 12:59.080] Ready? [13:22.960 --> 13:23.880] Good morning, Taco Bell. [13:24.160 --> 13:24.740] Uh, yeah. [13:24.840 --> 13:25.560] Hi, this is Taco Bell. [13:25.720 --> 13:26.560] Yeah, this is Taco Bell. [13:26.980 --> 13:28.360] Uh, hi, this is Scott Williams. [13:28.560 --> 13:29.860] I'm calling from the Village Voice. [13:30.020 --> 13:34.440] We're compiling a list of local restaurants, and we just needed to have your store number. [13:34.620 --> 13:35.160] Do you have that? [13:35.880 --> 13:37.100] Uh, which store number, sir? [13:37.220 --> 13:37.460] Yes. [13:37.920 --> 13:38.420] Which one? [13:38.720 --> 13:40.800] Uh, the, uh, I think it's a four-digit number. [13:41.580 --> 13:45.200] Uh, for the location. [13:45.420 --> 13:45.780] I'm sorry. [13:46.140 --> 13:46.640] Sorry, sir? [13:46.860 --> 13:48.160] For the location of your store. [13:48.420 --> 13:52.220] Sir, we have a location in, uh, 150th Street Broadway. [13:52.800 --> 13:53.980] I, I know the address. [13:54.200 --> 13:56.840] It's just, uh, we need to, we're compiling a list of the store number. [13:57.100 --> 14:00.980] Uh, this Taco Bell number, uh, you should have a four-digit number. [14:01.220 --> 14:05.480] Sorry, the four-digit number is, uh, uh, Broadway, right? [14:05.680 --> 14:07.360] Uh, 3645. [14:08.240 --> 14:12.340] Uh, that's the address, but, uh, you have, I think it's printed on the receipts. [14:12.680 --> 14:14.020] Uh, it's the franchise number. [14:14.540 --> 14:16.820] Uh, one minute, uh, checking my French fries number. [14:16.940 --> 14:17.200] Thank you. [14:17.220 --> 14:18.340] Why is the manager not here? [14:18.540 --> 14:19.820] Would you like to call tomorrow? [14:20.200 --> 14:22.180] Uh, well, you should have that information today. [14:22.320 --> 14:22.920] It should be there. [14:23.440 --> 14:26.300] Um, we're printing tonight, so we need to get that information now. [14:27.080 --> 14:29.320] Uh, sir, because the manager is not here. [14:29.540 --> 14:29.880] It's fine. [14:30.820 --> 14:32.100] Is the manager there? [14:32.380 --> 14:33.460] The manager is not here today. [14:33.600 --> 14:34.420] The manager is not there. [14:34.620 --> 14:34.740] Yeah. [14:34.860 --> 14:40.740] Can you look on a receipt, and it should say Taco Bell number one, two, three, or something like that? [14:41.340 --> 14:48.980] Uh, it's, uh, my Taco Bell is, uh, insurance, uh, uh, is a 786, uh, like that. [14:49.060 --> 14:50.520] I thought I don't know about anything, right? [14:51.100 --> 14:51.460] 786? [14:51.820 --> 14:52.560] Yeah, 786. [14:53.620 --> 14:55.040] That's the store number, 786. [14:55.340 --> 14:55.560] Yeah. [14:56.220 --> 14:56.560] Okay. [14:56.860 --> 14:57.380] Thank you. [14:57.680 --> 14:58.280] Thank you, bye. [15:00.100 --> 15:00.600] All right. [15:04.020 --> 15:05.560] I mean, that's really nothing. [15:05.700 --> 15:06.460] We got a store number. [15:06.560 --> 15:09.840] We can probably get that by looking at a receipt, but it adds credibility to the next call. [15:10.020 --> 15:18.420] Uh, assuming he didn't give me the wrong information, uh, where we, where we say that, uh, we, we, we want to do something involving a store number and we know the format of the store number. [15:20.140 --> 15:25.980] Uh, we're going to call another one just to kind of verify that information and, uh, hopefully get more information as well. [15:26.540 --> 15:28.200] Uh, let's see. [15:28.260 --> 15:28.840] I have a number here. [15:30.200 --> 15:30.540] Sorry. [15:30.620 --> 15:31.380] Do I have to do that thing again? [15:33.360 --> 15:34.080] What the fuck? [15:35.240 --> 15:36.060] It is on here. [16:00.850 --> 16:01.190] Yes. [16:01.370 --> 16:01.490] Hello? [16:03.830 --> 16:04.170] Yes. [16:04.730 --> 16:05.290] Uh, yes. [16:05.410 --> 16:07.910] Hi, this is, uh, Scott Williams from Taco Bell Central Irvine. [16:08.310 --> 16:12.230] Um, uh, did someone, uh, call us concerning a problem with cash registers? [16:14.410 --> 16:15.190] From here? [16:15.390 --> 16:15.510] Yeah. [16:15.650 --> 16:19.070] We had a call from store 786, was it? [16:21.350 --> 16:21.830] 786? [16:22.170 --> 16:22.950] What's your store number? [16:24.270 --> 16:25.350] My store number? [16:25.550 --> 16:25.750] Yeah. [16:30.960 --> 16:34.360] Uh, you, you call KFC Taco Bell? [16:35.140 --> 16:39.220] Uh, we're calling, uh, the, we're calling store 786. [16:39.480 --> 16:41.640] That's what we were told that there was a problem with the cash register. [16:42.600 --> 16:44.440] What, what, um... I don't call. [16:44.480 --> 16:45.080] I'm the manager. [16:45.300 --> 16:46.440] You're the manager and you didn't call. [16:46.560 --> 16:46.660] Okay. [16:46.660 --> 16:48.120] It's possible we got the wrong store number. [16:48.600 --> 16:49.780] Uh, what is your store number? [16:50.120 --> 16:51.020] My store number? [16:51.480 --> 16:52.280] 163 something. [16:52.940 --> 16:53.340] 1638? [16:53.700 --> 16:55.760] Uh, 16382. [16:56.780 --> 16:57.180] 16382. [16:57.320 --> 16:58.500] No, that's, that's definitely wrong. [16:58.900 --> 17:00.500] 331 KFC Taco Bell Sports. [17:01.360 --> 17:01.760] Okay. [17:02.420 --> 17:05.580] Uh, can you tell us, uh, the model of your cash register? [17:06.060 --> 17:07.240] Because that would help us find out. [17:07.540 --> 17:07.900] Par. [17:08.760 --> 17:09.120] Par. [17:09.120 --> 17:09.980] I'm sorry, say that again? [17:10.020 --> 17:10.880] It's a par register. [17:11.620 --> 17:12.580] Uh, spell that please. [17:12.840 --> 17:13.200] Par. [17:13.320 --> 17:13.520] Par. [17:13.640 --> 17:14.600] Are you calling from par? [17:15.620 --> 17:15.980] Par? [17:16.280 --> 17:16.960] Can you just... Par. [17:17.080 --> 17:17.600] P-A-R. [17:17.700 --> 17:18.380] Where are you calling from? [17:18.480 --> 17:18.740] Par. [17:19.220 --> 17:23.520] Uh, that's a different, that's a different brand than what we're, we're calling for the, uh, uh, CRS? [17:24.760 --> 17:25.120] CRS? [17:25.300 --> 17:25.480] Yeah. [17:26.680 --> 17:27.800] Cash register service? [17:28.660 --> 17:29.320] No, no, no. [17:29.420 --> 17:30.360] We don't have any contract. [17:30.400 --> 17:30.640] Okay. [17:30.700 --> 17:31.980] We must have gotten the wrong information. [17:32.160 --> 17:33.420] But you have, you have a par register. [17:33.600 --> 17:33.900] Is that correct? [17:34.200 --> 17:34.380] Yeah. [17:34.820 --> 17:35.140] Okay. [17:35.540 --> 17:35.760] All right. [17:35.960 --> 17:36.680] Thank you for the information. [17:36.840 --> 17:37.380] Oh, you too. [17:37.560 --> 17:37.820] Bye. [17:39.940 --> 17:40.400] All right. [17:44.630 --> 17:46.270] So, you see, it's nothing spectacular. [17:46.650 --> 17:48.330] We're just getting little bits and pieces of information. [17:48.510 --> 17:51.750] Now we, I believe he gave us the right information, store 16382. [17:51.950 --> 17:55.750] That makes more sense, because I think there are 16,000 Taco Bells around. [17:56.350 --> 17:57.970] And we know the name of the cash register now. [17:58.050 --> 17:59.370] We know it's a par or cash register. [17:59.770 --> 18:06.890] So, um, we're going to try, um, we're going to try one more, uh, and see if we can get them to do something fun based on this information. [18:07.090 --> 18:08.130] And again, this may not work. [18:08.290 --> 18:12.050] This is, uh, unscripted, untested, uh, and someone's picking up our phone. [18:12.990 --> 18:13.350] Okay. [18:13.670 --> 18:14.010] It's you. [18:14.170 --> 18:14.290] Okay. [18:14.870 --> 18:17.790] Um, yeah, I think somebody's calling us. [18:17.850 --> 18:18.570] I think that's the problem. [18:19.010 --> 18:22.510] Uh, I'm going to call one last, uh, last number here. [18:24.790 --> 18:25.150] Okay. [18:25.250 --> 18:25.730] I've got a number there. [18:33.350 --> 18:34.430] I dialed the wrong number. [18:34.510 --> 18:35.090] I'm going to have to hang up. [18:35.270 --> 18:35.470] Sorry. [18:36.370 --> 18:36.770] Sorry. [18:40.500 --> 18:41.400] I have a dial tone. [18:42.500 --> 18:42.780] Okay. [18:55.860 --> 18:56.700] Talking about pizza. [18:56.820 --> 18:57.200] Unit speaking. [18:57.380 --> 18:57.560] I'll help you. [18:57.880 --> 18:58.340] Uh, yes. [18:58.420 --> 18:58.520] Hi. [18:58.520 --> 19:00.700] This is Scott Williams calling from, uh, talk about Irvine. [19:01.140 --> 19:01.520] Okay. [19:01.640 --> 19:05.920] Uh, we're calling concerning a problem with the cash register that, uh, you might be experiencing. [19:06.180 --> 19:06.320] Yeah. [19:06.340 --> 19:11.460] Somebody already called and gave them the information they need about the loaner that we have and the actual ratio that we have. [19:11.960 --> 19:13.210] Uh, somebody already called? [19:13.360 --> 19:13.520] Yeah. [19:14.260 --> 19:14.470] Okay. [19:14.470 --> 19:16.200] That was like maybe, uh, 30 minutes ago. [19:17.440 --> 19:17.840] Okay. [19:17.840 --> 19:17.920] Okay. [19:18.260 --> 19:22.470] Was, uh, was this, uh, for a, um, a PAR, a cash register? [19:23.040 --> 19:23.400] PAR? [19:23.620 --> 19:23.960] No, no. [19:23.960 --> 19:24.600] Not PAR register. [19:24.600 --> 19:24.840] No. [19:25.180 --> 19:25.540] Okay. [19:25.620 --> 19:27.080] What, what kind of cash register do you have? [19:27.490 --> 19:29.700] Uh, C-I-C-E-R. [19:29.860 --> 19:30.300] Something like that. [19:30.300 --> 19:31.520] I have to go upstairs and then check it. [19:31.680 --> 19:32.360] Could you do that first? [19:32.470 --> 19:32.660] Okay. [19:32.730 --> 19:32.970] One second. [19:32.970 --> 19:33.340] Thank you. [19:49.950 --> 19:51.150] Requires patience sometimes. [20:20.780 --> 20:21.940] Thanks for being so patient. [20:34.840 --> 20:35.320] Okay. [20:35.320 --> 20:39.240] There's, there's a mute switch, so I guess we can talk while, while he's running upstairs. [20:39.920 --> 20:47.440] Um, so basically he's going to check the, um, the cash register model and I'm still thinking in my head what I'm going to ask him to do. [20:48.200 --> 20:49.740] So hopefully he'll do it. [20:50.820 --> 20:51.540] Change prices? [20:51.720 --> 20:52.260] I don't know about that. [20:52.780 --> 20:55.680] There's been a, there's been a franchise. [20:55.780 --> 20:56.580] I honestly don't know. [20:56.880 --> 20:57.420] Price decrease. [20:57.600 --> 20:59.530] Maybe they, they've been having cash register problems. [20:59.600 --> 21:02.360] This happened to us, uh, with Starbucks last time, I think. [21:02.490 --> 21:04.860] We, we called up and they were having network problems when we asked. [21:12.880 --> 21:13.280] Okay. [21:14.180 --> 21:15.660] People are feeding us information here. [21:24.410 --> 21:24.770] Hello? [21:25.110 --> 21:25.410] Yes. [21:25.810 --> 21:26.050] Okay. [21:26.190 --> 21:29.090] I've got one loaner, which is a Casio CR 1000. [21:30.350 --> 21:30.710] Okay. [21:30.830 --> 21:31.590] The Casio. [21:32.350 --> 21:32.950] All right. [21:33.090 --> 21:34.310] And it was the 1000, you said? [21:34.450 --> 21:34.670] Yes. [21:35.150 --> 21:35.370] Okay. [21:35.490 --> 21:35.970] Who am I speaking to? [21:36.290 --> 21:36.590] Sorry? [21:36.730 --> 21:37.350] Who am I speaking with? [21:37.510 --> 21:39.010] You're speaking to Junior, the GM of the store. [21:39.270 --> 21:39.530] Junior? [21:39.730 --> 21:39.890] Yes. [21:40.230 --> 21:40.430] Okay. [21:40.450 --> 21:40.810] Hi, Junior. [21:40.950 --> 21:41.570] This is Scott Williams. [21:41.870 --> 21:42.130] Okay. [21:42.290 --> 21:43.830] Uh, this is what I'm going to need you to do. [21:44.190 --> 21:46.110] Uh, what time is your franchise open until tonight? [21:46.690 --> 21:47.430] Until 11 today. [21:47.630 --> 21:48.170] Until 11. [21:48.370 --> 21:48.530] Yeah. [21:49.130 --> 21:50.850] Uh, we need to run an upgrade. [21:50.910 --> 21:54.210] It's going to require that you not run the register for five minutes. [21:54.710 --> 21:58.310] Uh, let me see if we can, uh... [21:58.310 --> 22:00.290] Are these races connected to our phone yet? [22:00.710 --> 22:05.050] Uh, it's, uh, what happens is it's connected through, um, uh, through the phone lines. [22:05.070 --> 22:09.590] You don't see the actual connection into the cash register, but they, we do provide software updates. [22:10.010 --> 22:13.370] And the problem you're having is probably because of a firmware upgrade that you didn't get. [22:13.610 --> 22:14.090] Oh, okay. [22:14.090 --> 22:18.850] And what we need to do is we need to send that to you tonight so that your day-end totals will register properly. [22:18.930 --> 22:20.330] Otherwise, it could be a problem Monday morning. [22:20.850 --> 22:21.210] Beautifully. [22:21.410 --> 22:26.130] So, I mean, we stopped, we closed the doors at 11, and we, you know, we're still here cleaning or whatever. [22:26.270 --> 22:28.410] So after 11, you could do whatever you need to do. [22:28.490 --> 22:29.110] Well, that's just it. [22:29.150 --> 22:30.690] You see, we're not there at that time. [22:30.830 --> 22:35.410] We're out in California, and, uh, and we go home, uh, at about seven. [22:35.890 --> 22:36.970] Oh, about seven our time. [22:37.050 --> 22:37.070] Yeah. [22:37.110 --> 22:40.990] So the latest we can do this is six our time, which is nine your time. [22:41.310 --> 22:52.130] So what I'm going to ask you to do is just for a five minute, it's actually closer to two minutes, but just to be safe, if for five minutes, you could just not use the register, say from nine o'clock to nine, oh 5, 9 05. [22:52.310 --> 22:55.050] If you could just do that for us that ought to clear up the problem. [22:55.470 --> 22:57.110] Just don't touch the register for five minutes. [22:57.350 --> 22:57.570] Okay. [22:57.670 --> 23:00.990] At that time at nine o'clock exactly our time, we'll stop taking orders into nine. [23:01.070 --> 23:01.330] Oh, five. [23:01.470 --> 23:01.790] Exactly. [23:02.270 --> 23:02.630] All right. [23:02.630 --> 23:07.190] And at 9.05, probably at 9.04, but just to be safe, let's say 9.05. [23:07.370 --> 23:10.810] Okay, now the Casio one that I gave you, that's the loaner. [23:10.970 --> 23:13.970] The actual registers that we use are the CRS-3000. [23:14.570 --> 23:15.790] You have the CRS-3000. [23:16.130 --> 23:16.490] Okay. [23:16.690 --> 23:18.330] That's going to be getting the upgrade as well. [23:18.490 --> 23:21.190] What we're going to do is we're going to send that firmware upgrade down the line. [23:21.530 --> 23:27.290] It should affect all of your cash registers so that they'll all be in sync and so that there won't be any communication issues between them. [23:27.330 --> 23:29.090] And that's what the problem is that you've been having. [23:29.270 --> 23:29.790] Oh, okay. [23:29.790 --> 23:34.330] So if for just five minutes you can just shut that down for five minutes. [23:34.670 --> 23:37.830] You can still take orders, but just don't ring them up, all right? [23:37.890 --> 23:43.970] If you just have... you can take the orders and make the food and all that, but just don't actually touch the register for five minutes. [23:44.170 --> 23:44.450] For five minutes. [23:44.610 --> 23:45.730] Yeah, we could manage that. [23:45.790 --> 23:46.130] No problem. [23:46.250 --> 23:46.530] Okay. [23:46.730 --> 23:49.390] And just so we're synced, what time do you have now? [23:49.810 --> 23:51.690] Right now it's 4.29 p.m. [23:51.690 --> 23:52.350] 4.29? [23:52.670 --> 23:52.890] Mm-hmm. [23:53.030 --> 23:53.970] Okay, that's what we have. [23:54.450 --> 23:56.050] We've got 1.29 here. [23:56.330 --> 23:58.610] Okay, so we appreciate your help. [23:58.750 --> 23:59.330] Junior, was it? [23:59.330 --> 24:00.170] Yes, Junior. [24:00.390 --> 24:01.230] Okay, thank you so much. [24:01.230 --> 24:01.870] Thank you very much. [24:02.130 --> 24:02.570] All right, good luck. [24:14.910 --> 24:21.690] If anyone is interested, they can go to 18 East 14th Street at 5th Avenue around 9 o'clock. [24:24.590 --> 24:29.050] Please, somebody go with the video camera and place a big order and just see what they do. [24:29.050 --> 24:29.970] I'm very curious. [24:36.950 --> 24:38.890] Who's got a story while I recover from that? [24:41.050 --> 24:46.330] We could have asked them to just don't worry about customers during that time period. [24:46.990 --> 24:51.230] Corporate authorizes you to give the food away just for that five minutes period of time. [24:52.110 --> 24:55.190] But if we did that, we'd have been committing some kind of a... [24:55.190 --> 24:58.190] Well, there's that, but there's also you want to maintain that level of trust. [24:58.470 --> 25:00.410] You notice he was not suspicious at all for... [25:00.410 --> 25:02.670] I was saying some pretty bizarre things to him about different... [25:02.670 --> 25:03.910] I didn't know anything going in there. [25:03.970 --> 25:04.950] I didn't even give him the store number. [25:05.130 --> 25:07.390] I didn't know what brand register he had. [25:07.570 --> 25:10.270] I didn't know anything about how they were set up. [25:10.550 --> 25:12.510] These things aren't connected by phone line, I'm pretty sure. [25:12.670 --> 25:14.510] But I was able to convince him that they were somehow. [25:14.510 --> 25:19.110] So he's going to instruct his staff not to touch things for a five-minute period. [25:19.770 --> 25:23.730] I mean, you know, this is a relatively harmless prank, but you can get people to do all kinds of things. [25:23.850 --> 25:27.010] You can get people to close the store for a period of time, send people home. [25:27.190 --> 25:27.590] You know, it's... [25:28.790 --> 25:30.670] I shouldn't have any of this information. [25:31.110 --> 25:33.670] Emanuel, it would be interesting if you find a restaurant that has... [25:34.290 --> 25:36.970] If you don't get a receipt, your meal is for free. [25:37.450 --> 25:43.810] And you call them up and you use some sort of pretext, so they won't give anybody a receipt for a certain period of time. [25:43.810 --> 25:45.690] So then you know when you go in and get a free meal, right? [25:46.310 --> 25:46.550] Right. [25:47.670 --> 25:51.530] There are, you know, malicious ways of doing things and non-malicious ways of doing things. [25:51.810 --> 25:52.050] What I... [25:54.050 --> 25:57.490] What I like to do is, I like to, you know, establish a relationship with the person. [25:57.510 --> 25:58.990] I asked him what his name was. [25:59.190 --> 26:00.150] We became friends. [26:00.330 --> 26:01.130] Junior, I'm Scott. [26:01.370 --> 26:02.510] You know, thanks very much for your help. [26:02.930 --> 26:05.590] You know, and also the hint of trouble if he doesn't do it, I say. [26:06.110 --> 26:07.770] There could be trouble Monday morning. [26:07.930 --> 26:10.190] So please cooperate or else. [26:10.530 --> 26:15.450] But, you know, sit in a nice way so that, you know, he believes that he's doing the right thing. [26:16.050 --> 26:18.930] And, you know, okay, it's going to be a little inconvenient but there's no real harm done. [26:19.130 --> 26:21.830] Also, you should always have a plan for backing out of these things, too. [26:22.110 --> 26:24.670] If he calls you a bluff, have a phone number ready to give him. [26:24.810 --> 26:25.850] That sounds legitimate. [26:26.070 --> 26:29.590] Have a way of explaining why you're saying something that makes no sense at all. [26:30.150 --> 26:30.970] Things like that. [26:31.130 --> 26:35.670] Most of the time, though, you don't get questioned as long as you maintain that air of authority. [26:36.450 --> 26:38.690] It can be tough to gain that confidence. [26:38.890 --> 26:41.230] But once you practice a few times, I think it works. [26:42.430 --> 26:44.590] How many people have read Kevin's book, The Art of Deception? [26:45.430 --> 26:50.210] I can't recommend a better book on how social engineering works than this book here. [26:50.370 --> 26:55.010] It's written for companies mostly so that they can protect themselves. [26:55.230 --> 26:57.910] But also, there are some ingenious plots in there. [26:58.390 --> 27:00.290] Plots and schemes to get information. [27:00.470 --> 27:02.110] Including, I think, one where you actually... [27:02.110 --> 27:04.690] Would you classify those as malicious or non-malicious? [27:05.090 --> 27:05.830] Well, it depends. [27:06.550 --> 27:08.510] I mean, you know, I don't think that's malicious at all. [27:08.590 --> 27:11.570] I think you're telling people how to exercise the system. [27:11.770 --> 27:13.150] It's what you do with the information afterwards. [27:13.410 --> 27:14.070] Right, that's true. [27:14.810 --> 27:22.570] But basically, I think there was one instance where you were able to actually figure out how a bank would transfer money to somebody without any kind of authorization whatsoever. [27:22.570 --> 27:23.650] How would something like that work? [27:23.790 --> 27:26.310] I think you're talking about check systems, which I'll... [27:26.310 --> 27:28.330] I want to tell you a favorite one that was pretty funny. [27:28.510 --> 27:29.790] It still has me laughing today. [27:30.830 --> 27:35.450] Many years ago, I was in Digital Equipment Corporation's EasyNet. [27:35.710 --> 27:36.950] And that was a worldwide network. [27:37.230 --> 27:39.610] Like Suns, Swan, DEC was EasyNet. [27:40.090 --> 27:43.290] And they had DECNet protocol. [27:43.570 --> 27:58.950] And I was looking for a program, a piece of commercial software, since there was nothing free or shareware, where I could pretty much put a sniffer on one of the nodes in the network so I can capture clear text traffic, you know, albeit like passwords and stuff like that. [27:59.050 --> 28:01.330] So I could spread, you know, throughout the network easier. [28:01.970 --> 28:03.170] So I did some research. [28:03.290 --> 28:09.230] And I found that a company called Bear Computer Systems had an office in Los Angeles. [28:09.230 --> 28:11.070] And I actually was living in LA at the time. [28:11.190 --> 28:12.210] This is when I was a teenager. [28:12.750 --> 28:17.650] So I did a little bit of research based on my phone phreaking knowledge. [28:17.890 --> 28:22.850] And I found out that this company was actually run out of this guy's house in Toluca Lake, California. [28:23.750 --> 28:28.350] So I did a little bit of research and I found out all the phone numbers that were terminating at that residence. [28:28.690 --> 28:30.190] In other words, how many phone lines they had. [28:30.290 --> 28:30.990] And they had like three. [28:31.470 --> 28:32.990] One was a regular line for voice. [28:32.990 --> 28:36.850] And there was two that had dial-up modems attached. [28:37.470 --> 28:41.830] So I went to my VT100 terminal, dialed up to these modems. [28:42.590 --> 28:51.030] And I noticed the behavior of the system on the other end was a VMS system that was asking... that would be... it would beep at you. [28:51.110 --> 28:54.910] Which meant it was looking for a system password before it would give you a login prompt. [28:55.710 --> 28:57.550] So I thought about the problem for a while. [28:57.690 --> 29:04.270] And I was thinking, well, maybe what I'll do is I'll add call forwarding to those two phone numbers, forward it to a system that's under my control. [29:04.570 --> 29:08.030] And then when someone would dial in, they wouldn't be logging into the real system. [29:08.130 --> 29:09.290] It would be the decoy system. [29:09.450 --> 29:13.450] And I'd be able to capture the person's username and password. [29:14.030 --> 29:16.310] But I figured, this is such a small company. [29:16.410 --> 29:17.450] It's running at this guy's house. [29:17.570 --> 29:19.130] There's probably two or three employees. [29:19.530 --> 29:23.270] I can't call the guy at home and say, hey, I'm another employee. [29:23.270 --> 29:25.430] Because, you know, that obviously wouldn't work. [29:25.770 --> 29:28.230] So I thought about another method of doing it. [29:29.150 --> 29:38.410] Instead of call forwarding the dial-in number, because it was unlikely that customers would dial in, it would be more likely that he would dial in from when he was outside the office. [29:39.490 --> 29:51.070] So around that same time, DEC was releasing security patches because there were so many holes found in the VMS operating system that they set up an 800 number that anybody can call. [29:51.550 --> 29:56.610] And you just give them your name and address, and they would send you a box with... [29:56.610 --> 29:57.490] And you could pick the media. [29:57.650 --> 30:00.870] It was either mag tape or a cartridge tape. [30:01.410 --> 30:04.630] And you'd have the latest security patches rolled up onto the tape. [30:06.090 --> 30:07.890] So I found out you can call the number. [30:07.950 --> 30:09.230] They didn't even verify you're a customer. [30:09.370 --> 30:10.950] You can just say, hey, my name's Joe Blow. [30:11.070 --> 30:12.050] My address is such and such. [30:12.090 --> 30:14.170] I need 10 kits, 10 patch kits. [30:14.350 --> 30:17.350] And they would ship them out at Federal Express the next day. [30:17.870 --> 30:18.890] So I ordered 10. [30:20.110 --> 30:22.530] So I took the box out of the tape. [30:22.670 --> 30:26.290] I put it into a VMS system that I had access to. [30:26.690 --> 30:28.450] And I rolled back the patch. [30:28.670 --> 30:35.950] In other words, VMS had a special format of how they would store these patches in what they called backup save sets. [30:36.130 --> 30:37.090] So I'd unravel it. [30:37.610 --> 30:39.810] Like unzip it if it was like WinZip, for example. [30:40.490 --> 30:44.170] And what I decided to do is I'd put in a special Mitnick patch of my own. [30:45.090 --> 30:51.370] And what that patch was, it was to the program that acted as the system's gatekeeper called LoginOut. [30:52.310 --> 30:54.730] It's like /bin/login in UNIX or Linux. [30:55.050 --> 30:59.270] And I had a special patch that I could log in with a special password. [30:59.270 --> 31:00.870] And I'd essentially be invisible. [31:01.730 --> 31:03.450] So I included this patch. [31:03.450 --> 31:05.830] I rolled it back up onto the system. [31:06.590 --> 31:09.430] And then I wrote it back to the cartridge tape because I could write to it. [31:10.450 --> 31:14.150] Then I went and I put this tape back into its plastic shipping bag. [31:14.170 --> 31:18.390] with a shipping label because I actually had a printed copy of what was being shipped. [31:18.550 --> 31:20.950] I went over to a friend's office and had that shrink wrapped. [31:21.790 --> 31:23.150] Packaged it back in the box. [31:23.590 --> 31:28.270] Then I was thinking, okay, now all I have to do is drop this package in the mail. [31:28.610 --> 31:30.710] And then when they get it, they'll install my special patch. [31:32.090 --> 31:33.350] So I was thinking about this. [31:33.430 --> 31:34.010] I was in LA. [31:34.850 --> 31:38.690] And DEC, all their stuff came out of either Colorado or Massachusetts. [31:38.690 --> 31:43.910] And I wasn't about to fly to Colorado or Massachusetts or mail it to somebody else to mail for me. [31:44.990 --> 31:47.990] So my next step was to go to a costume shop. [31:48.430 --> 31:50.330] And this is Hollywood, right? [31:50.570 --> 31:51.530] This is Los Angeles. [31:51.530 --> 31:54.850] So there's a lot of costume shops for the motion picture industry. [31:55.450 --> 31:58.730] And I got a UPS uniform, right? [31:59.090 --> 32:00.310] So I get a UPS uniform. [32:00.310 --> 32:01.350] I get the UPS hat. [32:01.430 --> 32:04.230] And I get the clipboard that Cheshire is so... [32:04.690 --> 32:05.750] It's one of his favorites. [32:06.930 --> 32:12.610] And around 7.30 in the morning, we show up at this company's house. [32:13.050 --> 32:14.070] Knock on the door. [32:14.410 --> 32:18.290] The guy stumbles, you know, to the door because I think it kind of woke him up. [32:18.730 --> 32:19.790] And he asks, can I help you? [32:19.850 --> 32:22.050] I go, yeah, UPS, we got this priority package for you. [32:22.090 --> 32:22.830] Can you please sign? [32:22.830 --> 32:30.470] And I was rushing the guy and I was actually trying to step inside the house or the apartment inside the doorway so the guy wouldn't look outside. [32:30.970 --> 32:33.670] Now, does anyone know why I didn't want the guy to look outside? [32:34.290 --> 32:35.070] No truck! [32:35.530 --> 32:35.990] Exactly. [32:37.030 --> 32:38.610] So the guy never looked outside. [32:38.970 --> 32:43.130] I had to wait about two weeks before the guy installed the security update. [32:43.390 --> 32:44.430] And it worked. [32:44.470 --> 32:47.830] But it was kind of interesting because I was always concerned about what... [32:48.350 --> 32:50.350] How do you solve the problem of not having the truck? [32:50.550 --> 32:51.230] But it worked. [32:52.490 --> 32:53.830] So, whatever. [32:58.860 --> 33:02.880] So, beware of the UPS man or FedEx man bearing gifts. [33:02.880 --> 33:03.980] It may be a Trojan. [33:06.040 --> 33:08.900] Another effective tool in social engineering is... [33:09.500 --> 33:10.940] Well, a couple of effective tools. [33:11.060 --> 33:11.780] One is stupidity. [33:12.740 --> 33:13.620] Acting stupid yourself. [33:13.780 --> 33:14.860] People give you more information that way. [33:15.160 --> 33:15.920] Another is anger. [33:16.220 --> 33:22.420] When you're angry, people tend to want to placate you and give you information to calm you down a little bit. [33:22.420 --> 33:24.240] So, I'm going to get angry now. [33:25.900 --> 33:29.920] And I'm going to make a phone call to a video store. [33:30.160 --> 33:33.120] And let's see if they'll give me information they shouldn't give me. [33:35.180 --> 33:35.660] Blockbuster? [33:36.620 --> 33:37.280] Who else? [33:37.380 --> 33:37.780] There's only one. [34:05.700 --> 34:06.820] Blockbuster 34 Street. [34:06.820 --> 34:07.340] Yeah. [34:07.660 --> 34:09.180] This is really getting to be too much here. [34:09.500 --> 34:12.880] I've got the phone call from Blockbuster saying that I owe money for videos. [34:12.960 --> 34:13.180] Okay. [34:13.260 --> 34:14.180] Can you hold on one second? [34:14.180 --> 34:16.180] I have three people in line and I'm by myself right now. [34:16.280 --> 34:16.960] I'll be right with you. [34:17.000 --> 34:17.200] All right. [34:17.260 --> 34:18.160] But this is out of hand. [34:23.750 --> 34:24.190] All right. [34:24.310 --> 34:27.090] Well, maybe I'll move to the top of the list. [34:27.150 --> 34:27.450] I don't know. [34:27.990 --> 34:33.770] We'll give him a minute to deal with the other angry people and maybe he'll come to us faster. [34:35.050 --> 34:37.450] I'll listen here and someone else wants to talk. [34:39.730 --> 34:40.750] Or we could take questions. [34:48.020 --> 34:49.040] Use the microphone there. [34:50.020 --> 34:52.280] Everyone, we give you the signal to stop talking because he's back. [34:52.280 --> 34:53.440] I just have a quick question. [34:53.620 --> 34:55.520] Do you feel nervous at all when you're doing this? [34:55.600 --> 34:57.400] Or are you so used to it that it's just unnatural? [34:57.540 --> 35:00.560] There's a degree of nervousness because you never know what you're going to walk into. [35:00.720 --> 35:03.080] But the thing to remember is these people can't see you. [35:03.420 --> 35:04.660] They don't know who you are. [35:05.740 --> 35:08.400] I'm against lying to people that I know and trust. [35:08.480 --> 35:10.920] But I have no problem lying to people who I never see in my life. [35:12.860 --> 35:15.700] It's like they're machines themselves someplace. [35:16.260 --> 35:17.320] They don't care about you. [35:17.360 --> 35:18.100] You don't care about them. [35:18.160 --> 35:19.380] As long as you're not hurting them. [35:19.380 --> 35:22.240] You know, you're getting them to give information out, okay. [35:22.500 --> 35:24.060] But you're not really using it against them. [35:24.200 --> 35:26.360] You're not reporting them and getting them in a lot of trouble, hopefully. [35:27.140 --> 35:29.080] And you actually prepare for the conversation. [35:29.380 --> 35:33.420] In other words, you think about all the objections that the target may have. [35:33.800 --> 35:36.900] And you already think about it ahead of time before doing the attack. [35:36.900 --> 35:38.420] So you're prepared. [35:38.840 --> 35:43.880] If you go in unprepared and you do it extemporaneous, it's less likely you'll succeed. [35:43.880 --> 35:46.280] Unless the people on the other end are truly gullible. [35:47.000 --> 35:47.320] Yeah. [35:47.960 --> 35:51.660] And now, you know, if we hold on with this guy, by the time he gets to us, we're going to be even more angry. [35:51.820 --> 35:55.440] So he's going to want to really bend over backwards to help us. [35:55.580 --> 35:58.300] So I'm going to hold on for a couple of minutes longer. [35:58.420 --> 36:00.260] And then we'll have to move on if he doesn't come back. [36:00.960 --> 36:01.740] Yes, Red Bull. [36:01.940 --> 36:02.060] Yeah. [36:04.080 --> 36:05.140] Oh, interesting question. [36:05.240 --> 36:05.640] Caller ID. [36:06.000 --> 36:06.320] Okay. [36:06.400 --> 36:09.600] We're going to demonstrate something on that as soon as we get through this. [36:09.800 --> 36:10.300] Yes, Red Bull. [36:10.300 --> 36:25.260] The question is, being that a lot of these companies like AT&T and Visa are shipping their customer service people overseas, is there a way to social engineer those people in India or wherever to get them to give you where their location is, what their number is, [36:25.320 --> 36:28.860] so that you can maybe bypass and not get connected to them? [36:29.000 --> 36:34.140] I just took my MasterCard out of my pocket because I had an experience with them over the past couple of weeks. [36:34.140 --> 36:35.940] And I was going to try something like that. [36:36.060 --> 36:37.180] So, good suggestion. [36:38.460 --> 36:39.460] We'll try giving them a call. [36:39.820 --> 36:44.120] How many of you have spoken to MasterCard, American Express, and realized that you're actually speaking to somebody in India or something? [36:44.940 --> 36:47.020] Yeah, within the first few seconds to figure that out. [36:47.160 --> 36:49.460] And some of them have Ohio accents, which is unbelievable. [36:51.540 --> 36:54.900] Okay, I'm going to give this guy about 30 more seconds because my thumb is starting to hurt with the mute button. [36:55.460 --> 36:55.920] Go ahead. [36:56.400 --> 37:02.340] Kevin, in your book you mentioned prepaid cell phones as an excellent dump number. [37:02.340 --> 37:05.840] Are there still prepaid services like Verizon's FreeUp and whatnot? [37:06.120 --> 37:07.320] Or what are the better ones? [37:07.420 --> 37:08.580] Can you still pay with cash? [37:08.960 --> 37:11.820] Is that looking like an avenue that's going to close up anytime soon? [37:12.020 --> 37:13.520] Well, you can pay with cash. [37:13.520 --> 37:17.560] You can go to Rite Aid and get a prepaid credit card, a MasterCard. [37:17.740 --> 37:18.800] So, there you go. [37:18.900 --> 37:21.220] You have an instant credit card under any name you choose. [37:22.480 --> 37:31.280] And with, at least in the LA and the Las Vegas area, you can go to 7-Eleven and buy a prepaid cell phone for probably 50 bucks and buy the cards. [37:31.280 --> 37:35.020] And you can put it under any service name, any name that you choose. [37:35.420 --> 37:37.000] So, it basically could be a throwaway phone. [37:38.320 --> 37:38.640] Hi. [37:38.900 --> 37:39.620] Sorry for the wait. [37:40.060 --> 37:40.240] Okay. [37:40.240 --> 37:41.260] What's the last name on your account? [37:41.380 --> 37:41.580] Yeah. [37:42.180 --> 37:42.960] Last name is Jones. [37:43.100 --> 37:43.880] First initial B. [37:44.160 --> 37:44.740] Oh, I'm sorry. [37:44.740 --> 37:45.300] What's the last name? [37:45.680 --> 37:46.000] Jones. [37:46.260 --> 37:47.040] J-O-N-E-S. [37:47.140 --> 37:48.620] The problem is I just got back from vacation. [37:48.780 --> 37:50.400] I'm going through my messages and I hear this thing that... [37:50.400 --> 37:50.700] Okay, wait. [37:50.800 --> 37:51.160] Slow down. [37:51.940 --> 37:52.440] Slow down. [37:52.520 --> 37:53.080] What's your first name? [37:53.620 --> 37:54.140] Initial B. [37:54.360 --> 37:55.160] It should be no first name. [37:55.600 --> 37:56.400] Initial is just B? [37:56.600 --> 37:56.780] Yeah. [37:56.780 --> 37:58.880] My wife took out the account. [37:58.920 --> 37:58.940] V. [37:58.960 --> 37:58.960] Johns. [37:59.220 --> 37:59.980] I have an Eric Johns. [38:00.140 --> 38:00.780] A Dorothy Johns. [38:01.000 --> 38:01.300] Terry Johns. [38:01.720 --> 38:02.660] Okay, that's my wife, Dorothy Johns. [38:03.160 --> 38:03.520] Okay. [38:03.620 --> 38:04.480] Now, here's the thing. [38:05.140 --> 38:06.740] We returned videos. [38:07.100 --> 38:13.620] I mean, I don't understand why I'm getting phone calls from Blockbuster saying that I owe money for videos that I know we returned. [38:15.060 --> 38:15.420] Okay. [38:15.420 --> 38:16.900] But they didn't say what video it was. [38:17.100 --> 38:18.340] Did you get a postcard in the mail? [38:18.480 --> 38:19.080] I didn't get a postcard. [38:19.160 --> 38:19.940] I got a phone call. [38:20.220 --> 38:20.660] Uh-huh. [38:21.540 --> 38:23.880] It's probably just a reminder saying you have a balance. [38:24.580 --> 38:26.380] Let me just pull up the history on this. [38:26.420 --> 38:27.400] We shouldn't have a balance. [38:27.660 --> 38:28.800] This has been quite a while. [38:28.800 --> 38:30.380] I can't even fish out the history. [38:31.820 --> 38:34.880] We haven't even been taking out videos for quite some time. [38:35.020 --> 38:35.280] Yeah. [38:36.080 --> 38:39.500] I don't understand why I'm getting phone calls when we haven't even been to the store. [38:39.680 --> 38:40.720] When did you get a phone call? [38:40.960 --> 38:46.980] Well, I just got back from vacation this morning and there were about 50 messages on my machine and this was one of them. [38:46.980 --> 38:48.680] I don't remember the exact time it came in. [38:49.120 --> 38:49.600] Uh-huh. [38:49.620 --> 38:51.280] And I don't remember the exact amount either. [38:51.380 --> 38:53.620] I think it was something on the order of $10 or $20. [38:54.140 --> 38:54.440] Yeah. [38:54.560 --> 38:55.720] It's a $27 late fee. [38:56.140 --> 38:56.940] And I can't... [38:56.940 --> 38:57.320] It's weird. [38:57.500 --> 39:02.660] It's very odd because I'm trying to hit a history on the computer and it says there's no history records for this customer. [39:02.880 --> 39:04.600] I don't even remember giving my phone number. [39:04.660 --> 39:05.880] That's the thing that bothers me. [39:05.880 --> 39:11.940] Well, when you apply for a membership, your information is on your account. [39:12.260 --> 39:12.540] Uh-huh. [39:13.460 --> 39:19.040] So that's how... and Blockbuster has an automated account maintenance service that does that. [39:19.280 --> 39:28.280] It will automatically pull things from a computer and if you have a balance or if you have something still checked out on an account, it'll call that number that you list on there for your membership. [39:28.400 --> 39:30.080] So you're saying you have that number right there? [39:30.320 --> 39:31.540] Yeah, 5-6-4-5... [39:34.100 --> 39:36.440] I don't remember giving that number out so that's... [39:36.440 --> 39:36.460] Okay. [39:36.800 --> 39:37.120] Well... [39:37.120 --> 39:38.580] Things should be done by mail. [39:38.700 --> 39:38.920] Okay. [39:39.140 --> 39:42.880] When I signed up for the account, I said specifically I just want to get things by mail. [39:42.980 --> 39:45.260] I don't want to be getting phone calls, telemarketing, that kind of a thing. [39:45.380 --> 39:45.580] Okay. [39:46.200 --> 39:52.460] You'll have to come in and take a look at the membership application because obviously you signed it and you might not have actually really looked at it. [39:52.600 --> 39:54.100] Do you have the proper address? [39:54.560 --> 39:54.880] Yeah. [39:57.100 --> 39:57.460] Okay. [39:57.900 --> 39:58.420] All right. [39:59.380 --> 40:01.960] I'm sorry if I appear to be angry here. [40:02.080 --> 40:03.780] It's been a long day and I just... [40:03.780 --> 40:04.000] Okay. [40:04.000 --> 40:06.000] This is something I just don't want to have to deal with right now. [40:06.080 --> 40:09.180] Now, listen, I'm going to have to talk to my store manager about this because... [40:09.180 --> 40:09.980] Would you please? [40:10.160 --> 40:10.900] I would appreciate that. [40:10.940 --> 40:15.660] Yeah, because for some reason I can't research the history and I want to find out what it's for. [40:15.900 --> 40:16.980] I'm sorry, what's your name? [40:17.140 --> 40:17.840] My name's Artie. [40:18.020 --> 40:18.320] Artie? [40:18.460 --> 40:18.580] Yeah. [40:18.840 --> 40:20.300] Artie, thank you very much for being helpful. [40:20.440 --> 40:20.640] Okay. [40:20.880 --> 40:21.220] All right. [40:21.220 --> 40:21.920] Have a good day. [40:22.060 --> 40:22.180] Bye. [40:33.130 --> 40:39.450] If there had been a history, we could have gone into what films they would like to see, but apparently they hadn't used that account for a while. [40:39.890 --> 40:41.670] Now, notice I just went in there with a last name. [40:41.830 --> 40:43.870] I went in there with a last name and an initial. [40:44.050 --> 40:49.490] I used an initial because the odds of finding something with an initial are greater than finding something with the same first name. [40:50.810 --> 40:52.990] He started rolling off a list of all the Joneses. [40:53.030 --> 40:54.950] So, I just picked one, my wife, Dorothy. [40:55.750 --> 40:56.790] And you take it from there. [40:56.790 --> 40:59.230] And the anger, the anger made him more nervous. [40:59.470 --> 41:02.050] He was able to bend over backwards and try to please me. [41:02.150 --> 41:04.970] And in the end, he feels like he's helped. [41:05.150 --> 41:06.350] So, no harm done. [41:09.370 --> 41:10.830] Okay, we mentioned caller ID. [41:10.970 --> 41:12.930] We wanted to try a demonstration with caller ID. [41:13.190 --> 41:13.330] Sure. [41:13.970 --> 41:15.350] We need a volunteer. [41:16.110 --> 41:17.190] Somebody who will step up. [41:17.250 --> 41:17.770] Not you, Rebel. [41:18.930 --> 41:19.370] Somebody... [41:20.590 --> 41:28.930] Somebody who will step up to the microphone and just give us a telephone number that they would like to see a phone call come in from on this telephone here. [41:29.030 --> 41:30.110] Can we have this camera? [41:33.150 --> 41:33.510] Okay. [41:37.350 --> 41:38.970] Did you want a real phone number? [41:39.490 --> 41:41.630] Well, it has to be real phone number format. [41:41.750 --> 41:42.630] Why am I not seeing that? [41:43.710 --> 41:44.070] Yeah. [41:46.230 --> 41:46.590] Okay. [41:46.830 --> 41:47.050] Okay. [41:47.230 --> 41:47.690] No, that's fine. [41:47.810 --> 41:48.190] That's fine. [41:48.690 --> 41:49.430] Can everybody see that? [41:52.310 --> 41:52.670] There. [41:52.790 --> 41:53.050] It's gone. [41:53.230 --> 41:53.630] Are you happy? [41:54.910 --> 41:55.310] Yup. [41:57.010 --> 41:58.070] You don't know how hard this is. [42:01.930 --> 42:02.330] Okay. [42:03.870 --> 42:04.270] Fine. [42:07.090 --> 42:08.410] It's those little challenges. [42:08.550 --> 42:10.210] It's backwards and upside down at our end, so... [42:10.210 --> 42:10.530] Okay. [42:10.970 --> 42:16.210] And AV people, we're going to need this number to be muted so that they don't hear what we're down here. [42:16.490 --> 42:16.710] Wait. [42:17.970 --> 42:18.370] Okay. [42:19.310 --> 42:22.150] Actually, why don't you give us the phone number first so we can write that down. [42:22.410 --> 42:22.770] Go ahead. [42:23.350 --> 42:24.570] Don't give your phone number out. [42:25.450 --> 42:27.150] Because we don't want everybody in the world calling you. [42:27.310 --> 42:27.430] Right. [42:27.790 --> 42:28.090] All right. [42:28.550 --> 42:32.610] How about 508-619-8342? [42:33.610 --> 42:35.350] 508-619-8342? [42:37.050 --> 42:37.410] Okay. [42:37.950 --> 42:39.150] And this is not staged. [42:39.190 --> 42:40.470] We did not arrange this in advance. [42:40.690 --> 42:41.450] Should I stay up here? [42:41.690 --> 42:42.130] All right. [42:42.210 --> 42:43.210] And now I'm going to make the phone call. [42:44.210 --> 42:45.590] Should I stay up here, Emmanuel? [42:45.830 --> 42:47.310] You can stand up here if you want. [42:48.010 --> 42:49.190] It's not going to make any difference. [42:49.510 --> 42:51.810] You're going to get your number on this thing anyway. [42:53.890 --> 42:54.210] Okay. [42:54.650 --> 42:55.550] Now you can put it on. [42:58.950 --> 42:59.270] Actually... [42:59.270 --> 42:59.970] It's pulsing. [43:00.090 --> 43:00.650] It's pulsing. [43:01.950 --> 43:03.350] You had to switch the pulse mode. [43:03.550 --> 43:03.870] All right. [43:04.010 --> 43:05.170] I might have messed up the phone. [43:05.250 --> 43:05.430] Hang on. [43:05.450 --> 43:06.610] Yeah, you switched it too. [43:06.870 --> 43:08.870] In my nervousness, I flipped it to rotary. [43:09.890 --> 43:10.010] Okay. [43:10.150 --> 43:10.930] Can we... [43:10.930 --> 43:12.130] They're nervous social engineers. [43:12.130 --> 43:12.650] I'm nervous. [43:12.830 --> 43:12.950] Yeah. [43:14.250 --> 43:14.890] Can't be nervous. [43:15.070 --> 43:16.290] Make sure this is not going out. [43:21.990 --> 43:22.390] Okay. [43:22.430 --> 43:23.150] Can you bring it up now? [43:35.430 --> 43:36.000] Bring it up. [43:36.960 --> 43:40.770] Please enter the area code and number you are calling now. [43:41.650 --> 43:41.780] Okay. [43:41.800 --> 43:42.690] Can you bring it down for this? [43:42.820 --> 43:43.040] Thank you. [43:48.070 --> 43:48.750] And up again? [43:58.110 --> 43:58.510] Hello. [44:44.220 --> 44:44.620] Hello. [44:44.880 --> 44:45.000] Hello. [44:45.340 --> 44:45.560] Okay. [44:45.720 --> 44:48.460] Just to show that this is in fact my phone. [44:48.460 --> 44:49.000] All right. [44:52.640 --> 44:58.340] So caller ID is one way that you can really get a good social engineering prank going. [44:58.340 --> 45:04.920] Because if someone sees a number on a screen, they're going to believe that you're actually calling from that particular place or office or whatnot. [45:05.620 --> 45:07.540] So it's a great way to gain credibility. [45:07.740 --> 45:08.700] And so many people... [45:08.700 --> 45:09.640] We proved this two years ago. [45:09.660 --> 45:13.280] So many people still believe caller ID is dependable data. [45:13.380 --> 45:13.840] It's not. [45:14.000 --> 45:15.040] It can be spoofed. [45:15.340 --> 45:16.620] Anything can be spoofed. [45:16.620 --> 45:17.680] What is that number? [45:19.200 --> 45:19.920] What's what number? [45:20.200 --> 45:21.020] Do, do, do, do. [45:21.820 --> 45:22.560] It's a secret. [45:22.680 --> 45:23.360] That's what that number is. [45:23.480 --> 45:24.100] But it's just... [45:24.100 --> 45:27.980] It's a demonstration that these things do exist and it is possible and it's easy. [45:30.420 --> 45:32.660] I'm going to swallow this now so nobody will get it from me. [45:39.100 --> 45:39.860] Any other... [45:39.860 --> 45:41.400] Is Santa Claus on our panel? [45:42.620 --> 45:44.160] You want to know how it works? [45:45.020 --> 45:45.240] Yes. [45:45.620 --> 45:45.920] Okay. [45:46.140 --> 45:46.320] All right. [45:46.320 --> 45:47.460] Kevin, explain how it works. [45:47.600 --> 45:47.720] Okay. [45:47.860 --> 46:01.260] I'm a member of a telephony community group and they have the switching equipment there in their facility and they allow you to write XML code, like voice XML. [46:01.540 --> 46:09.020] They have call XML and it's only like a 10 or 15 line script that we've written that basically does this. [46:09.100 --> 46:09.700] It's really simple. [46:09.700 --> 46:17.780] And in the script, it just takes the DTMF that I input through the keypad and just puts it into a field called the call or referral number. [46:17.940 --> 46:23.700] And then what it actually does is the number I'm calling to, it does a three-way essentially. [46:24.180 --> 46:30.480] It's three ways over, sends the call or referral number, actually sends it to the phone company. [46:30.480 --> 46:32.100] That's the number we're actually calling from. [46:32.260 --> 46:34.040] Phone company doesn't validate it. [46:34.200 --> 46:38.880] And then it conferences me in once the call is sent. [46:39.100 --> 46:42.600] So it's actually like doing a three-way call essentially, like a conference call. [46:42.760 --> 46:45.000] That's how it's like working technically under the hood. [46:46.060 --> 46:49.560] If you have any more questions about it, I'll be happy to answer except I'm not giving the number out. [46:52.000 --> 46:54.120] But the number will be available on his website. [46:55.060 --> 46:55.820] There you go. [46:57.320 --> 46:57.760] Okay. [46:57.760 --> 47:02.220] I guess we have time for one more try here at something. [47:02.920 --> 47:13.400] As we were talking about before, various credit card companies have employed people in foreign countries to do the work that people here would do for much more money. [47:14.780 --> 47:27.420] It's really kind of frustrating too sometimes when you're trying to get information and there's either a language problem or there's just this incredible time difference where it's night time there and day time here. [47:28.720 --> 47:30.440] It's nice to know where you're calling. [47:31.000 --> 47:33.180] And lots of times people don't realize that they're calling different places. [47:33.320 --> 47:38.240] It's also weird when you think about it that you're talking to somebody who sounds like they're next door when they're on the other side of the world. [47:40.160 --> 47:41.840] And, you know, who's paying for that call? [47:42.320 --> 47:43.700] Sometimes, yes, sometimes they're in prison. [47:43.860 --> 47:45.960] Sometimes they're who knows where they are. [47:46.020 --> 47:47.820] You don't know anything about the call centers. [47:48.200 --> 47:51.500] So we're going to try and find out a little bit about this particular call center. [47:51.540 --> 47:54.840] And I have to stress that we are calling MasterCard. [47:55.540 --> 47:57.000] So sometimes they put you on hold. [47:57.140 --> 48:01.400] Sometimes they just act stupid most of the time. [48:01.900 --> 48:05.220] So we're going to call an 800 number, try to get through to an operator, see if we can get information. [48:05.380 --> 48:07.160] I think the goal is to find out where they are. [48:07.540 --> 48:11.700] And if possible, to find out an address even, phone number, something like that. [48:11.780 --> 48:12.480] Let's see where it goes. [48:21.040 --> 48:22.440] First challenge is getting an operator. [48:24.360 --> 48:28.260] You have dialed a number that is not available from your calling area. [48:28.280 --> 48:29.360] Oh, they're pulling this on us again? [48:30.460 --> 48:31.760] We can't call 800 numbers? [48:33.440 --> 48:34.160] Try another one. [48:34.760 --> 48:35.500] Try another what? [48:35.620 --> 48:36.240] I only have one. [48:36.340 --> 48:37.040] Try another 800 number. [48:39.920 --> 48:41.060] I'm going to try this one more time. [48:51.260 --> 48:52.940] Okay, I'm going to look into this a little further. [48:54.660 --> 48:56.160] I want to make sure I have the right phone number. [48:57.160 --> 48:59.460] I want to make sure I have the right phone number. [49:00.860 --> 49:01.820] What do I call? [49:02.660 --> 49:03.000] Okay. [49:03.000 --> 49:03.360] Are we doing our time? [49:07.380 --> 49:08.040] Six minutes. [49:09.640 --> 49:11.540] Just talk for a minute while I double check the number. [49:12.540 --> 49:13.620] We had a problem. [49:14.400 --> 49:17.780] At our last conference, we had someone figured out what our phone number was here. [49:17.800 --> 49:22.880] And they called the phone company in Verizon and had them cancel certain services like long distance. [49:22.940 --> 49:24.260] And 800 service. [49:24.400 --> 49:25.180] So that may have happened. [49:25.340 --> 49:26.540] But there's a way around that. [49:26.660 --> 49:33.060] We have a calling card that allows you to call 800 numbers, which is most of them don't. [49:33.480 --> 49:36.660] Whenever you call an 800 number, they know the number you're calling from. [49:36.860 --> 49:39.100] If you call American Express, 800 number. [49:39.180 --> 49:43.780] Even if your caller ID is blocked, they're using another service called NI. [49:44.140 --> 49:45.380] They can tell what number you're calling from. [49:45.380 --> 49:47.620] Unless you're using a special card like this. [49:47.620 --> 49:49.620] It's called the red card. [49:49.760 --> 49:52.280] You can find them at some of the places you can buy calling cards. [49:52.280 --> 49:56.780] And it's a great way to call for cheap overseas from pay phones and all kinds of things. [49:57.360 --> 49:57.680] Okay. [49:57.760 --> 49:58.540] So I'm going to try that first. [49:58.660 --> 50:01.880] I'm going to try your calling card solution here. [50:02.500 --> 50:06.440] We're going to call that access number, enter the code, and try the 800 number, see if that works. [50:06.520 --> 50:09.260] If that doesn't work, I'll try the American Express number. [50:09.360 --> 50:10.080] Kevin has furnished me. [50:11.160 --> 50:12.060] So I guess we want to keep this down. [50:12.060 --> 50:20.460] Plus I have a way, if any of you are interested, to set up a way that when anyone calls you, no matter if they block the number, you can see what number they're calling from. [50:20.620 --> 50:21.540] If anyone's interested. [50:22.080 --> 50:22.440] So... [50:22.900 --> 50:23.520] Anyone interested? [50:23.660 --> 50:24.200] Raise your hands. [50:24.320 --> 50:24.940] You're interested in that one. [50:25.100 --> 50:25.320] Okay. [50:26.780 --> 50:28.140] When he gets done, I'll tell you how. [50:30.500 --> 50:32.300] Can I get a quick question in real quick? [50:34.020 --> 50:34.380] Okay. [50:34.580 --> 50:34.780] No. [50:35.200 --> 50:40.240] So many service people these days are governed by scripts that they have to follow when they're trying to answer your question. [50:40.240 --> 50:42.680] How do you try and get them to break out of that script? [50:44.020 --> 50:45.140] Hit a touch tone. [50:45.700 --> 50:49.580] You have $5.76 remaining. [50:50.020 --> 50:52.880] Please enter the telephone number you wish to dial now. [50:53.100 --> 50:53.520] All right. [50:53.620 --> 50:54.380] Let's try the 800 number. [50:58.530 --> 51:03.490] You have 7 hours 22 minutes remaining for this call. [51:03.650 --> 51:04.310] That should be sufficient. [51:13.960 --> 51:17.280] Thank you for choosing the Chase Platinum credit card. [51:17.720 --> 51:18.820] Enter your account number. [51:19.160 --> 51:20.300] I'm not going to do that. [51:20.300 --> 51:21.020] I'm going to hit a zero. [51:22.040 --> 51:26.500] This used to work all the time, but it gets harder and harder to reach operators these days. [51:27.740 --> 51:28.520] We're sorry. [51:28.720 --> 51:30.640] We did not recognize the information. [51:31.040 --> 51:32.360] Enter your account number. [51:32.500 --> 51:32.600] Yeah. [51:32.600 --> 51:33.340] It's a little tussle here. [51:33.460 --> 51:34.020] I'm going to do it again. [51:41.080 --> 51:46.560] For a faster service from the next available representative, please enter your account number now. [51:46.940 --> 51:47.900] She doesn't give up. [51:47.980 --> 51:48.180] Okay. [51:48.260 --> 51:48.840] I'm going to do it again. [51:50.340 --> 51:52.000] If you're a good boy, I'll fix it for you. [51:55.180 --> 51:58.820] Please hold for the next available representative to assist you. [51:59.100 --> 52:02.760] For a quality purpose, your call may be monitored or recorded. [52:05.180 --> 52:06.540] That was payback. [52:08.160 --> 52:12.440] Thank you for calling Chase Card Member Services' 24-hour service center. [52:12.700 --> 52:15.420] All of our representatives are assisting other customers. [52:15.840 --> 52:18.140] Please hold for the next available representative. [52:25.350 --> 52:25.750] Hello? [52:26.150 --> 52:26.870] This is for you. [52:26.950 --> 52:28.410] You may have your account number, please. [52:28.690 --> 52:29.750] Actually, I'm not a customer. [52:29.910 --> 52:31.150] I'm calling from MCI in New York. [52:31.310 --> 52:35.890] We're investigating some troubles with the lines that your call center had reported. [52:36.030 --> 52:38.130] Am I reaching Mumbai or am I reaching Canada? [52:38.650 --> 52:40.650] Actually, this is in San Antonio, Texas. [52:40.890 --> 52:41.890] It's just San Antonio, Texas. [52:42.090 --> 52:43.090] Oh, then everything is messed up. [52:45.350 --> 52:48.250] Do you have your call center number, the ID number? [52:48.690 --> 52:49.990] Oh, I sure don't. [52:50.090 --> 52:50.650] Don't have that. [52:50.650 --> 52:52.290] And my manager is not even here today. [52:52.430 --> 52:52.790] Oh, dear. [52:52.790 --> 52:53.750] I mean, she left earlier. [52:54.070 --> 52:54.510] Uh-huh. [52:54.990 --> 53:00.590] Would you happen to know the Mumbai office in India? [53:00.970 --> 53:01.970] Do you have that information? [53:02.190 --> 53:02.290] Oh, no, sir. [53:02.310 --> 53:03.550] I certainly don't. [53:03.830 --> 53:04.230] Okay. [53:04.990 --> 53:08.490] In that case, can I get a DID for your office? [53:10.010 --> 53:10.990] I certainly can. [53:11.070 --> 53:15.350] If you can hold one moment, let me get a supervisor on the line. [53:15.350 --> 53:17.570] And then I have more information than what I do, okay? [53:17.730 --> 53:17.990] Okay. [53:18.150 --> 53:18.450] Thank you very much. [53:18.450 --> 53:19.230] Just one moment, certainly. [53:19.350 --> 53:19.570] Thank you. [53:20.050 --> 53:20.270] Uh-huh. [53:26.810 --> 53:28.690] So should I go through the explanation as we're on hold? [53:29.810 --> 53:34.190] All right, what you do, all right, there's a service called uReach.com. [53:34.250 --> 53:36.970] And you can set up a toll-free number. [53:37.110 --> 53:40.350] As you know, it costs probably like seven, eight bucks a month. [53:40.790 --> 53:51.710] So what you do is you forward your number, say your cell phone number A, cell phone number A, to the uReach number that's created for you, which is a toll-free number. [53:52.210 --> 53:56.910] Then uReach has a menu where you can call forward that toll-free number to another number. [53:57.130 --> 53:58.350] And do you see what's happening here? [53:58.390 --> 54:00.630] What it does is it flips the caller ID privacy bit. [54:00.670 --> 54:06.370] Because what happens is you set up the target number that they're going to call into. [54:06.750 --> 54:09.230] It forwards to the uReach number, which you set up. [54:09.410 --> 54:14.590] That uReach number forwards to another number, which now will display the caller ID unblocked. [54:16.570 --> 54:16.930] Understand? [54:18.270 --> 54:18.630] Okay. [54:19.250 --> 54:20.090] It's really simple. [54:20.210 --> 54:20.770] It works. [54:21.690 --> 54:29.810] Since we're running out of time here, and since Kevin has to be on an airplane, rather than be on hold with Chase, I'm going to try the American Express. [54:29.950 --> 54:30.990] You say that always goes to India? [54:31.750 --> 54:32.110] Usually. [54:32.370 --> 54:32.550] Okay. [54:32.670 --> 54:33.510] We're going to try that instead. [54:35.750 --> 54:36.890] San Antonio is boring. [54:37.010 --> 54:37.310] I'm sorry. [54:37.450 --> 54:38.590] I wanted to speak to somebody overseas. [54:40.350 --> 54:41.030] Is Mike on? [54:41.870 --> 54:42.290] All right. [54:42.350 --> 54:44.310] While he's dialing, just a question for you. [54:44.950 --> 54:50.890] Cheshire, while you were doing the disguising with the clipboard, going backstage at concerts, have you actually ever gotten on stage? [54:51.690 --> 54:52.090] No. [54:52.170 --> 54:53.190] That I haven't even attempted. [54:53.870 --> 54:54.890] It's not that hard. [54:55.290 --> 54:56.610] Have you ever tried using a costume? [54:57.290 --> 54:58.170] I have not. [54:58.550 --> 54:58.710] Oh. [54:59.270 --> 54:59.650] No, no. [54:59.870 --> 55:00.670] He's on the phone there. [55:02.170 --> 55:02.570] Okay. [55:02.650 --> 55:04.770] They blocked American Express, so we have to do the other thing again. [55:05.970 --> 55:07.210] You can do it through the other number, too. [55:08.190 --> 55:08.590] Works. [55:14.590 --> 55:18.790] Well, hopefully, ureach.com won't take away that feature anymore. [55:18.790 --> 55:19.630] Because it's kind of cool. [55:20.410 --> 55:23.430] The only problem is, is then you have two numbers you have to deal with. [55:23.630 --> 55:27.950] One that you're going to receive the unblocked call on, and one that the target is going to call in on. [55:34.970 --> 55:37.750] And again, you can always use Vonage to do it as well, right? [55:39.010 --> 55:40.090] Tell us about Vonage. [55:44.080 --> 55:45.160] Kevin, tell us about Vonage. [55:45.780 --> 55:50.900] Well, I mean, it's just, I don't know much about it, other than, you know, I just use it for my voice over IP servers. [55:50.900 --> 55:52.180] It's relatively cheap. [55:54.100 --> 56:00.200] The quality of service from my residence isn't the best, because I use the bandwidth a lot. [56:00.360 --> 56:05.420] Then, of course, the signal doesn't go through too well. [56:05.660 --> 56:06.480] Okay, go ahead. [56:06.580 --> 56:09.120] Please enter the telephone number you wish to dial now. [56:14.210 --> 56:19.250] You have seven hours, 16 minutes remaining for this call. [56:26.990 --> 56:29.970] American Express, please have your card available. [56:30.390 --> 56:33.270] For balance, recent account activity... [56:34.590 --> 56:37.670] American Express, please have your card available. [56:39.450 --> 56:42.510] Enter the 15-digit card account number now. [56:42.630 --> 56:43.130] Not a chance. [56:48.910 --> 56:50.810] Do any of you use Vonage, by the way? [56:51.710 --> 56:52.310] Okay. [56:53.150 --> 56:54.310] Only a few hands, I'm surprised. [56:57.890 --> 57:00.170] We did not recognize your input. [57:00.470 --> 57:03.050] Enter the 15-digit card account number now. [57:03.290 --> 57:12.250] The cool thing is, is you can take the box with you, and you can go to Europe, plug it into a broadband connection, and you could have a New York number right there. [57:12.250 --> 57:14.750] This call may be reported for quality purposes. [57:15.230 --> 57:21.990] Your account number may be used to provide customer service and information about available card benefits and services. [57:37.830 --> 57:40.110] Hello, my name is Marie, and how may I help you? [57:40.650 --> 57:43.030] Yeah, hi, this is Scott Williams from MCI. [57:43.290 --> 57:45.770] We're calling in response to a trouble report from your call center. [57:46.550 --> 57:48.570] Am I reaching Mumbai or Canada? [57:49.710 --> 57:50.390] I'm sorry. [57:50.550 --> 57:52.350] Actually, this is in Manila, Philippines. [57:52.590 --> 57:53.050] This is Manila? [57:53.630 --> 57:54.090] Yes. [57:54.090 --> 57:55.210] Okay, that's the problem. [57:55.350 --> 57:56.430] We should be reaching Mumbai. [57:56.990 --> 57:59.090] Do you have your call center DID number? [57:59.230 --> 58:00.930] That's the direct phone number to it. [58:02.090 --> 58:02.990] Just one moment. [58:03.150 --> 58:06.330] I'll try to get in touch with our IPO department. [58:06.470 --> 58:07.150] Would you mind just holding? [58:07.430 --> 58:07.730] Thank you. [58:08.350 --> 58:08.830] Thank you. [58:12.310 --> 58:13.950] Does she sound like she's in the Philippines? [58:14.790 --> 58:16.610] She sounds like she's in Texas or something. [58:16.850 --> 58:18.510] Notice that Amex records all the calls. [58:18.650 --> 58:19.550] You hear the 15-second beep. [58:20.450 --> 58:21.790] Oh, they have a 15-second beep? [58:21.870 --> 58:21.990] Yeah. [58:23.530 --> 58:24.270] Just like the old days. [58:24.710 --> 58:24.790] Yeah. [58:29.230 --> 58:34.610] Kevin, when you call someone with Vonage, what shows up on the received parties and caller ID? [58:35.870 --> 58:36.170] Wait. [58:37.250 --> 58:38.010] What did you say again? [58:38.090 --> 58:38.450] I'm sorry, Bernie. [58:38.830 --> 58:43.490] When you call someone with Vonage or another voice over IP service, what shows up on the received party? [58:43.870 --> 58:47.990] The caller ID that they assigned you, the number that they assigned you, that caller ID. [58:48.110 --> 58:53.010] But you could use it in conjunction with the you reach trick to unblock caller ID. [58:53.830 --> 58:55.510] To unblock caller ID blocking. [58:57.190 --> 58:58.910] There's a double negative for you. [59:03.160 --> 59:03.640] Okay. [59:05.980 --> 59:10.520] Customer identification number, I actually don't have that information. [59:10.520 --> 59:13.420] But let me get the direct number. [59:13.660 --> 59:15.080] What number did you try calling? [59:15.460 --> 59:19.020] We came in on the 800 through New York. [59:19.580 --> 59:24.040] However, we have a way of routing it to specific call centers so we can troubleshoot when there's a problem. [59:24.040 --> 59:30.760] And what we should have gotten when we dialed this particular code was Mumbai, and instead we got Manila. [59:30.880 --> 59:37.140] I have a feeling what this is, is it's offset by one because alphabetically they're one right after the other. [59:37.720 --> 59:43.180] So we probably have some database corruption that resulted, that caused this problem to happen. [59:43.600 --> 59:45.220] If that's the case, it's easy to fix. [59:45.380 --> 59:49.260] But I just would need to have the direct number so that we can compare it on the list. [59:52.450 --> 59:53.050] Okay. [59:55.330 --> 01:00:16.290] As far, if you're trying to get in touch with our customer service department, and this is the 1-800-678-0745, if we have gate numbers available, but it also is associated to Manila and New Delhi. [01:00:16.870 --> 01:00:20.050] We need the number with the country code and city code. [01:00:21.130 --> 01:00:21.850] Oh, no. [01:00:22.010 --> 01:00:23.370] We don't have that information. [01:00:24.390 --> 01:00:30.450] Do you have a local number that you can call for a supervisor or when you need to reach the call center locally? [01:00:31.410 --> 01:00:34.430] If you want, I'll send out to the supervisor at Bridgeboro. [01:00:34.650 --> 01:00:36.230] They might be able to get you some information. [01:00:36.230 --> 01:00:37.950] May I have your name again, please? [01:00:38.150 --> 01:00:38.450] Oh, yes. [01:00:38.550 --> 01:00:39.730] Scott Williams with MCI. [01:00:40.890 --> 01:00:41.530] Scott Williams. [01:00:41.850 --> 01:00:43.290] And you're just doing troubleshooting? [01:00:43.470 --> 01:00:51.770] We're trying to isolate the problem because we've been having it throughout the weekend, and we just would like to make sure that the lines are going where they're supposed to go. [01:00:51.810 --> 01:00:53.390] Otherwise, there could be some issues. [01:00:54.650 --> 01:00:55.090] Okay, sure. [01:00:55.190 --> 01:00:55.630] Not a problem. [01:00:55.710 --> 01:00:56.730] Would you mind just holding for a moment? [01:00:56.870 --> 01:00:58.410] I'll try to get you connected to supervisor. [01:00:58.670 --> 01:00:59.090] Thank you very much. [01:00:59.770 --> 01:01:00.150] Thank you. [01:01:03.720 --> 01:01:04.040] Okay. [01:01:04.200 --> 01:01:06.520] So while she's doing that, continue with the question. [01:01:06.660 --> 01:01:07.680] Yeah, what I was saying was... [01:01:07.680 --> 01:01:08.300] Please wait. [01:01:10.100 --> 01:01:10.760] Go ahead. [01:01:10.920 --> 01:01:11.520] Yeah, anyway. [01:01:12.020 --> 01:01:22.380] If you call the UReach number with star 67, you can do out calling from that, and it'll show that 800 number as the number that you're calling from. [01:01:22.480 --> 01:01:23.920] So it's good if you need to pretend you're a business. [01:01:24.360 --> 01:01:26.880] And second, where can you find those UPS uniforms online? [01:01:28.820 --> 01:01:29.540] No, no, no. [01:01:29.620 --> 01:01:38.520] If you set up your UReach number, and you call forward it to cell phone B, and you call forward cell phone A, that will unblock... [01:01:38.520 --> 01:01:40.580] Yeah, I know what you're saying, but if... [01:01:40.580 --> 01:01:41.100] No, no, no. [01:01:41.160 --> 01:01:41.600] False alarm. [01:01:42.360 --> 01:01:42.820] Oh, okay. [01:01:43.480 --> 01:01:45.060] But you're saying if you just do a star 67. [01:01:45.380 --> 01:01:54.320] No, I'm saying if you want to pretend to be like a business or something, and you're calling somebody to solicit some kind of information, it works well, because you're coming from an 877 or 800 number, or something like that. [01:01:54.440 --> 01:01:54.880] Oh, I see. [01:01:54.980 --> 01:01:55.160] Okay. [01:01:55.400 --> 01:01:55.560] Yeah. [01:01:55.660 --> 01:01:56.180] That's another good one. [01:01:56.180 --> 01:01:57.560] And it's pretty cheap, so it's all good. [01:01:59.680 --> 01:02:01.440] Well, thank you for that information. [01:02:06.530 --> 01:02:06.930] All right. [01:02:07.190 --> 01:02:09.350] Kevin's going to have to leave pretty soon, so I'm hoping... [01:02:09.350 --> 01:02:10.710] She said, please wait again. [01:02:11.250 --> 01:02:12.630] They say, please wait every now and then. [01:02:13.210 --> 01:02:15.750] You should ask her what number she calls when she's late for work. [01:02:15.870 --> 01:02:16.870] That's what I was trying to do. [01:02:16.870 --> 01:02:18.770] I was trying to ask her that information. [01:02:18.950 --> 01:02:19.990] Or she has to call in sick. [01:02:21.290 --> 01:02:22.170] Sometimes it doesn't work. [01:02:22.290 --> 01:02:25.990] Sometimes you don't get the information that you want, and sometimes they protect... [01:02:25.990 --> 01:02:30.610] You know, it's not something that you would think they would protect that aggressively. [01:02:30.890 --> 01:02:32.690] It's just their location, phone number. [01:02:33.690 --> 01:02:35.070] And we already know their location. [01:02:35.210 --> 01:02:35.810] We know they're in Manila. [01:02:36.730 --> 01:02:41.090] So ideally what I'd like to get is the address, the call center number, the phone number. [01:02:42.010 --> 01:02:44.230] But who knows what's going on over there in Manila. [01:02:44.310 --> 01:02:45.410] Does anybody know what time it is in Manila? [01:02:45.510 --> 01:02:47.650] It's pretty damn late or something. [01:02:48.450 --> 01:02:49.570] So it could be a long wait. [01:02:50.470 --> 01:02:51.350] Let's... go ahead. [01:02:54.490 --> 01:02:58.590] You might want to suggest to the supervisor that their call volume may go through the roof. [01:02:58.990 --> 01:02:59.590] Yes, go ahead. [01:02:59.830 --> 01:02:59.830] Hello? [01:03:00.130 --> 01:03:00.810] Yes, Mr. Rowland. [01:03:00.890 --> 01:03:01.730] Sorry about a delay. [01:03:01.990 --> 01:03:08.150] I have a supervisor on the line, Mark, but he'll try to get some information for you, but he cannot guarantee it. [01:03:08.570 --> 01:03:08.810] All right. [01:03:08.830 --> 01:03:11.970] If you could just give me what you have, it would help us tremendously in the troubleshooting. [01:03:12.090 --> 01:03:20.050] We just need to know any kind of DID or even the address would help us just find it in a database and that way we could stop the problem from continuing. [01:03:21.250 --> 01:03:22.190] Hello, Mr. Williams. [01:03:22.670 --> 01:03:23.130] I'm sorry? [01:03:23.390 --> 01:03:23.590] Hello. [01:03:23.770 --> 01:03:25.090] Is this Mr. Williams I'm speaking with? [01:03:25.090 --> 01:03:26.370] Yes, Sky Williams MCI. [01:03:26.550 --> 01:03:26.890] Hello. [01:03:27.010 --> 01:03:28.410] This is Mark at American Express. [01:03:29.030 --> 01:03:31.510] I understand you're actually doing some troubleshooting, right? [01:03:31.730 --> 01:03:36.590] We're trying to find out why calls that are supposed to be going to Manila are going to Mumbai instead. [01:03:37.090 --> 01:03:38.970] We think it might be offset by one. [01:03:39.590 --> 01:03:44.510] And what we can do is we can isolate this by looking up the correlating numbers in the database. [01:03:45.930 --> 01:03:49.070] We have Mumbai, but we don't have Manila. [01:03:49.730 --> 01:03:51.490] Is there any kind of information you can give us? [01:03:51.490 --> 01:03:53.030] A call center number even would be helpful. [01:03:53.810 --> 01:03:57.170] Well, I think the best thing I can actually do... Can I place you on hold? [01:03:57.270 --> 01:04:07.710] I think the thing I need to do is have a word with our phone operations management desk and see if I can get you a specialist in that area because they'd be able to answer the question. [01:04:07.950 --> 01:04:08.310] Okay. [01:04:08.390 --> 01:04:10.210] Would you just be able to give me an address? [01:04:10.810 --> 01:04:12.790] Because we probably have that information as well. [01:04:13.010 --> 01:04:13.610] An address? [01:04:13.950 --> 01:04:17.270] Yeah, just the address of the call center so that way we can look in the database. [01:04:18.730 --> 01:04:25.010] Because you ended up back now in Greensboro, which is 7701 Airport Center Drive in Greensboro. [01:04:25.630 --> 01:04:30.870] But as to where the physical addresses in Manila and Mumbai are, I don't know. [01:04:31.130 --> 01:04:32.470] Are you in Manila right now? [01:04:32.610 --> 01:04:33.070] No, I'm not. [01:04:33.230 --> 01:04:33.830] I'm in Greensboro. [01:04:34.130 --> 01:04:34.850] Are you in Greensboro? [01:04:34.890 --> 01:04:36.030] Was I just speaking to Manila? [01:04:36.190 --> 01:04:36.850] You were, yes. [01:04:37.310 --> 01:04:39.190] Oh, so they transferred me over to Greensboro. [01:04:39.350 --> 01:04:39.610] Right. [01:04:39.750 --> 01:04:43.110] So that's what I was hoping to avoid because now we're crossing the planet again. [01:04:44.350 --> 01:04:44.790] All right. [01:04:44.890 --> 01:04:47.970] So do you have a direct dial number at all from Manila or Mumbai? [01:04:48.370 --> 01:04:49.130] I don't, no. [01:04:49.270 --> 01:04:56.310] That's why I need to get Mr. Williams to bear with me so I can get you to somebody who does know because I simply do not know. [01:04:56.550 --> 01:04:56.730] Okay. [01:04:56.850 --> 01:04:59.410] My specialist is dealing with accounts, not phone situations. [01:05:00.250 --> 01:05:00.450] Okay. [01:05:00.690 --> 01:05:01.550] Bear with me, please. [01:05:01.770 --> 01:05:02.030] All right. [01:05:02.090 --> 01:05:02.230] Thank you. [01:05:02.250 --> 01:05:02.930] I'll see what we can do. [01:05:03.030 --> 01:05:03.330] Thank you. [01:05:05.410 --> 01:05:09.850] As you can see, it's a big, long journey around the world sometimes to get information from these people. [01:05:10.010 --> 01:05:14.970] But if they give us the information in a timely manner, we'll be able to get it here. [01:05:15.450 --> 01:05:15.810] Yeah. [01:05:15.850 --> 01:05:18.510] It's not like the movies where everything happens like one, two, three. [01:05:18.790 --> 01:05:21.410] Sometimes you have to be really patient and things take a long time. [01:05:21.670 --> 01:05:21.830] Yeah. [01:05:21.950 --> 01:05:22.070] Yeah. [01:05:22.630 --> 01:05:23.930] And sometimes it doesn't work at all. [01:05:24.030 --> 01:05:25.150] Sometimes you get busted. [01:05:25.690 --> 01:05:28.770] I mean, it's happened to us all where... Well, not me. [01:05:29.010 --> 01:05:29.750] Oh, yeah. [01:05:32.730 --> 01:05:39.750] So if I can close off the panel by reminding people that we have just been social engineered because Santa Claus was not scheduled to be on this panel today. [01:05:40.730 --> 01:05:42.090] Sometimes you want to be on stage. [01:05:44.870 --> 01:05:47.010] And he has social engineered his way onto the stage. [01:05:47.690 --> 01:05:48.070] Okay. [01:05:48.150 --> 01:05:51.910] We're going to put a two-minute limit on this because we do have other people that have to get on here at five. [01:05:53.070 --> 01:05:54.350] That's 512 right now. [01:05:55.550 --> 01:05:55.990] Hello. [01:05:55.990 --> 01:05:56.030] Yes. [01:05:56.110 --> 01:05:56.250] Hello. [01:05:56.470 --> 01:05:56.710] Hello. [01:05:56.790 --> 01:05:58.550] I have the operations desk to help you further. [01:05:58.910 --> 01:05:59.250] Okay. [01:06:00.150 --> 01:06:00.590] Yes. [01:06:00.710 --> 01:06:01.290] Can I help you? [01:06:01.650 --> 01:06:02.090] Yeah. [01:06:02.170 --> 01:06:02.270] Hi. [01:06:02.370 --> 01:06:03.250] Scott Williams from MCI. [01:06:03.370 --> 01:06:08.270] We've just been trying to isolate a problem that was reported in Mumbai for routing calls. [01:06:08.490 --> 01:06:13.790] Apparently, the problem was that the 800 was going to Manila when it should have been going to Mumbai. [01:06:14.230 --> 01:06:16.830] And we're just trying to locate the circuits here. [01:06:17.310 --> 01:06:17.750] Okay. [01:06:17.790 --> 01:06:21.050] Let me actually get our CCM department online. [01:06:21.510 --> 01:06:23.390] They're actually who you need to talk to. [01:06:23.550 --> 01:06:24.290] Can you hold for me? [01:06:24.430 --> 01:06:25.630] You don't have a DID, do you? [01:06:25.850 --> 01:06:26.790] Because that's all we need. [01:06:27.730 --> 01:06:29.590] I don't even know what you're referring. [01:06:29.790 --> 01:06:30.130] I'm sorry. [01:06:30.430 --> 01:06:32.670] A direct dial number for Manila. [01:06:32.810 --> 01:06:38.070] That way, we can just look it up in our lookup table in the database and just make sure it's correlating properly. [01:06:38.610 --> 01:06:39.570] I don't know. [01:06:39.710 --> 01:06:41.110] Let me get CCM on the line. [01:06:41.230 --> 01:06:41.910] Can you hold for me? [01:06:42.070 --> 01:06:42.290] Okay. [01:06:42.410 --> 01:06:42.610] Thank you. [01:06:45.150 --> 01:06:48.730] Well, we're getting a nice little tour of American Express at least, so. [01:06:49.950 --> 01:06:56.630] It's not unusual to go through six, seven, eight, nine, ten levels of supervisors before you really reach the information you need. [01:06:56.710 --> 01:06:57.610] You really have to persevere. [01:06:58.290 --> 01:07:00.370] I forgot to ask him what part of the planet he's in. [01:07:00.470 --> 01:07:01.510] Who knows where he is? [01:07:02.110 --> 01:07:03.210] He might be in New York. [01:07:04.910 --> 01:07:09.670] With the new American Express rewards cards, you'll be automatically enrolled in our membership rewards program. [01:07:09.670 --> 01:07:11.310] Why are they playing me telemarketing stuff? [01:07:11.310 --> 01:07:14.630] And earn double points at the places you shop every day. [01:07:15.130 --> 01:07:16.010] Thank you for holding. [01:07:16.090 --> 01:07:17.770] I have you a centralized call management. [01:07:18.310 --> 01:07:18.750] Hello? [01:07:19.430 --> 01:07:19.710] Yes. [01:07:20.130 --> 01:07:21.050] Who am I speaking with? [01:07:21.170 --> 01:07:21.850] Mr. Lane. [01:07:22.350 --> 01:07:22.630] Hi. [01:07:22.830 --> 01:07:24.050] This is Scott Williams from MCI. [01:07:24.150 --> 01:07:30.870] We're just trying to isolate the problem in New York that was reported in Mumbai, where the calls are being routed improperly. [01:07:31.870 --> 01:07:36.330] And we think we can solve this just with the DID from either Mumbai or Manila. [01:07:36.510 --> 01:07:37.370] Do you have that information? [01:07:41.150 --> 01:07:41.850] I'm sorry. [01:07:41.910 --> 01:07:44.490] I'm not aware of a problem with the routing. [01:07:44.990 --> 01:07:45.430] Yeah. [01:07:45.490 --> 01:07:51.030] What's happening is that calls that are supposed to be going to Mumbai are going to Manila and vice versa. [01:07:51.550 --> 01:07:58.690] It's not affecting customers, but it is affecting when the lines are getting tied up, they're going to the wrong place. [01:07:58.950 --> 01:08:01.650] And you might get some circuits busy as a result of that. [01:08:01.650 --> 01:08:07.150] But we can probably fix this just by having the DID number and correlating it to the 800. [01:08:07.610 --> 01:08:11.650] So either a DID from Mumbai or a DID from Manila would be helpful. [01:08:13.290 --> 01:08:15.490] I don't have the DIDs for those. [01:08:15.690 --> 01:08:17.270] I have an IPO number. [01:08:17.390 --> 01:08:18.990] That's as far as we would contact. [01:08:19.270 --> 01:08:19.510] Okay. [01:08:19.570 --> 01:08:20.310] Why don't you give me that? [01:08:20.730 --> 01:08:21.170] Okay. [01:08:22.130 --> 01:08:23.190] Which one do you want? [01:08:24.150 --> 01:08:27.470] If you can give them both to me, that would be more helpful, I think. [01:08:27.770 --> 01:08:28.070] Okay. [01:08:28.130 --> 01:08:29.530] Do you have a ticket number on this? [01:08:29.530 --> 01:08:30.250] Not yet. [01:08:30.410 --> 01:08:36.450] We haven't opened the ticket because we don't think it's going to be an issue that needs to be resolved that way yet. [01:08:36.890 --> 01:08:39.050] This has just been reported in the last half hour. [01:08:39.530 --> 01:08:39.790] Okay. [01:08:39.870 --> 01:08:40.710] And what is your name again? [01:08:40.870 --> 01:08:42.730] Scott Williams, MCI in New York. [01:08:49.370 --> 01:08:50.350] Who am I speaking with now? [01:08:50.550 --> 01:08:51.350] This is Darlene. [01:08:51.690 --> 01:08:52.490] And where are you located? [01:08:52.770 --> 01:08:54.570] In CCM in Greensboro. [01:08:54.990 --> 01:08:55.350] Okay. [01:09:01.100 --> 01:09:01.460] Okay. [01:09:01.920 --> 01:09:09.120] If you'll hang on one second, I'm going to put you through to the Mumbai IPO, because I have it on a group list, and it's a speed dial. [01:09:09.320 --> 01:09:09.640] Okay. [01:09:09.780 --> 01:09:10.120] That would be great. [01:09:10.120 --> 01:09:10.240] Thank you. [01:09:10.240 --> 01:09:10.240] Okay? [01:09:10.460 --> 01:09:10.820] All right. [01:09:10.860 --> 01:09:11.440] Just a moment. [01:09:13.480 --> 01:09:15.520] I really thought I was busted there for a second. [01:09:17.700 --> 01:09:19.020] I thought she was asking who I was. [01:09:19.080 --> 01:09:21.280] I thought she was going to say, there's no Scott Williams and MCI. [01:09:23.180 --> 01:09:28.980] But she's apparently transferring me now to Mumbai, which, by the way, used to be called Bombay, and they changed it for some reason. [01:09:43.310 --> 01:09:48.370] When they ask for a ticket number, you can't just make one up either, because there are usually a set number of digits. [01:09:48.490 --> 01:09:55.750] So it was good that he averted the whole question of ticket number, because if he just made up a number off the top of his head and it was the wrong number of digits, he would have been busted. [01:09:55.770 --> 01:09:57.410] So he handled it the right way. [01:09:57.630 --> 01:09:57.890] Yeah. [01:09:57.930 --> 01:10:00.490] You want to avoid giving the wrong information. [01:10:00.490 --> 01:10:05.550] Better that you cloud the issue and just change the subject somehow, without them realizing what you've just done. [01:10:06.490 --> 01:10:09.890] Are you trying to find out the format of the trouble ticket numbers ahead of time? [01:10:10.390 --> 01:10:10.610] Hello? [01:10:10.910 --> 01:10:11.650] Thanks for holding. [01:10:11.850 --> 01:10:13.970] I've got the IPO online for you. [01:10:14.110 --> 01:10:14.350] Okay. [01:10:14.470 --> 01:10:17.910] They've got a local telecom person there today in the site. [01:10:18.150 --> 01:10:18.590] Oh, great. [01:10:18.770 --> 01:10:25.570] If you need to speak with them, I'll just drop you off into their site and let you get transferred over to the telecom. [01:10:25.570 --> 01:10:26.030] That would be great. [01:10:26.170 --> 01:10:26.930] Thanks so much for your help. [01:10:26.990 --> 01:10:27.610] You're welcome. [01:10:30.750 --> 01:10:31.150] Mambai. [01:10:31.430 --> 01:10:32.130] Hi, Mambai. [01:10:33.230 --> 01:10:33.910] Right, sir. [01:10:34.150 --> 01:10:34.810] I'm there. [01:10:35.010 --> 01:10:38.290] I would just need to connect you to one other person in the telecom department. [01:10:39.170 --> 01:10:39.770] Okay, thank you. [01:10:39.770 --> 01:10:43.290] From the technology department and they can assist you with that. [01:10:43.670 --> 01:10:43.990] Okay. [01:10:44.770 --> 01:10:46.490] Please be online when I transfer the call, sir. [01:10:46.970 --> 01:10:47.310] I'm sorry? [01:10:48.250 --> 01:10:49.090] Please be online. [01:10:49.270 --> 01:10:49.910] I'll transfer the call. [01:10:50.110 --> 01:10:50.450] Thank you. [01:10:51.490 --> 01:10:51.790] You're welcome. [01:10:51.790 --> 01:10:52.050] Okay. [01:11:03.200 --> 01:11:03.720] This is what? [01:11:03.840 --> 01:11:05.700] Nine or ten transfers we've gone through now. [01:11:05.800 --> 01:11:06.640] You have to do this sometimes. [01:11:12.010 --> 01:11:15.010] We have something like six or seven people working on this now. [01:11:15.110 --> 01:11:16.190] And I don't even know what this is. [01:11:19.670 --> 01:11:26.150] I just want to announce that the next panel, the media intervention via social and technical hacking... [01:11:26.810 --> 01:11:31.690] Media intervention via social and technical hacking will be a full hour right after this is over. [01:11:31.690 --> 01:11:32.830] We just have to push things back. [01:11:32.990 --> 01:11:33.910] So, thanks for waiting. [01:11:34.410 --> 01:11:36.090] It took us this long to screw up the schedule. [01:11:36.310 --> 01:11:37.270] So, I guess it's okay. [01:11:37.390 --> 01:11:38.050] It's worth seeing. [01:11:38.250 --> 01:11:39.250] So, I recommend you stay. [01:11:56.450 --> 01:11:59.290] Any other questions as we're waiting on hold with American Express? [01:11:59.510 --> 01:12:00.130] Yeah, questions would be nice. [01:12:00.210 --> 01:12:05.250] So, please try to keep it down back there because it's kind of hard to explain to people why there's a crowd on a phone call. [01:12:07.510 --> 01:12:10.050] Please ask questions so it doesn't appear so dull. [01:12:12.110 --> 01:12:14.430] How many people here consider themselves social engineers? [01:12:14.590 --> 01:12:15.690] At one point or another, they've done it. [01:12:16.290 --> 01:12:17.130] Everyone raise your hands. [01:12:17.250 --> 01:12:17.370] Wow. [01:12:17.410 --> 01:12:17.890] That's it? [01:12:18.130 --> 01:12:19.070] Come on, everybody raise their hand. [01:12:19.110 --> 01:12:20.470] If you haven't done it yet, it's... [01:12:20.470 --> 01:12:23.050] As long as you keep it safe, it's just a fun thing sometimes. [01:12:23.290 --> 01:12:25.670] Come on, you social engineered all your parents before. [01:12:26.570 --> 01:12:27.250] Come on. [01:12:27.650 --> 01:12:28.850] All those hands should be up. [01:12:30.770 --> 01:12:34.610] It's a good skill to have because you can get into places that you need to get into. [01:12:35.030 --> 01:12:37.190] Can I social engineer the telemarketers when they call? [01:12:37.410 --> 01:12:39.170] Like pretend that I'm like somebody else. [01:12:39.410 --> 01:12:40.350] How would you social... [01:12:40.350 --> 01:12:40.710] No. [01:12:41.510 --> 01:12:41.910] Hello? [01:12:43.410 --> 01:12:43.810] Hello? [01:12:45.930 --> 01:12:46.530] Somebody there? [01:12:49.410 --> 01:12:50.470] Okay, I thought I heard something. [01:12:52.170 --> 01:12:52.910] There was something? [01:12:53.050 --> 01:12:53.470] What'd they say? [01:12:53.790 --> 01:12:54.970] There was someone there. [01:12:55.090 --> 01:12:56.030] There was someone there. [01:12:56.230 --> 01:12:56.590] There was someone there. [01:12:56.590 --> 01:12:57.010] And that wasn't me? [01:12:57.830 --> 01:12:58.230] Hello. [01:12:58.350 --> 01:12:58.810] Is anybody there? [01:13:00.690 --> 01:13:01.090] Hello, is anybody there? [01:13:01.090 --> 01:13:01.150] Hello. [01:13:01.530 --> 01:13:02.350] That was me. [01:13:04.490 --> 01:13:05.470] Bouncing back from Mumbai. [01:13:05.650 --> 01:13:06.170] Read my lips. [01:13:07.850 --> 01:13:11.330] The question was can you social engineer telemarketers? [01:13:11.330 --> 01:13:12.530] I'm not sure exactly what... [01:13:12.530 --> 01:13:14.390] What would you want them to believe about you? [01:13:14.470 --> 01:13:15.550] That you're a psychopath or something? [01:13:15.690 --> 01:13:16.150] No, you got the... [01:13:16.150 --> 01:13:17.950] You got the telephone butler, right? [01:13:17.950 --> 01:13:23.470] So you could convince them that they're calling the wrong number and so that they could take you off the list? [01:13:23.610 --> 01:13:24.490] They don't care about that. [01:13:24.570 --> 01:13:26.910] They'll call whatever number of their autodial or dials. [01:13:27.090 --> 01:13:33.290] The thing is, you don't want to piss them off too much because sometimes they're calling from maximum security prisons because they give the work out to inmates. [01:13:33.810 --> 01:13:37.310] And they have your number and they have your address and maybe they'll get out someday. [01:13:37.930 --> 01:13:40.110] So, more than this, a telemarketer... [01:13:40.690 --> 01:13:41.190] Yes, sir. [01:13:41.550 --> 01:13:42.610] I'm just trying to swing the call. [01:13:43.470 --> 01:13:44.770] I'm sorry, I'm having trouble hearing you. [01:13:46.470 --> 01:13:47.950] I'm just transferring the call now. [01:13:49.830 --> 01:13:51.310] Could you just speak a little lower, please? [01:13:52.110 --> 01:13:52.970] Okay, I'm so sorry. [01:13:53.230 --> 01:13:55.570] I'm transferring the call to our department now. [01:13:55.570 --> 01:13:56.690] Okay, thank you very much. [01:13:57.290 --> 01:13:57.750] You're welcome. [01:14:04.720 --> 01:14:08.980] I was just saying there's a large segment of the population that can't say no to a telemarketer. [01:14:10.320 --> 01:14:11.400] Hello, who am I speaking with? [01:14:12.460 --> 01:14:12.860] Imran. [01:14:13.340 --> 01:14:15.440] Hi, this is Scott Williams over at MCI in New York. [01:14:15.520 --> 01:14:17.720] We're just trying to troubleshoot the problem that was reported. [01:14:18.380 --> 01:14:21.340] And all we need is a DID or an IPO from Mumbai. [01:14:23.600 --> 01:14:24.780] Can you repeat your name? [01:14:25.200 --> 01:14:26.760] Yes, Scott Williams, MCI. [01:14:27.320 --> 01:14:30.840] The problem is that calls are being misrouted from New York. [01:14:31.520 --> 01:14:33.560] And they're going to Manila instead of Mumbai. [01:14:33.880 --> 01:14:35.220] You might have noticed a drop-off. [01:14:35.980 --> 01:14:42.300] And we can probably fix it with a DID number, which is the direct telephone number for the call center. [01:14:43.060 --> 01:14:43.700] Mm-hmm. [01:14:44.180 --> 01:14:44.920] Do you have that information? [01:14:45.880 --> 01:14:47.700] You need the circuit ID for that. [01:14:48.200 --> 01:14:51.420] I need the country code, city code, and telephone number for the call center, yes. [01:14:52.420 --> 01:14:53.320] Our call center. [01:14:53.500 --> 01:14:53.800] Yes. [01:14:56.920 --> 01:14:57.720] This one now. [01:14:58.510 --> 01:14:58.850] Thank you. [01:15:13.070 --> 01:15:13.550] Hello. [01:15:13.890 --> 01:15:14.090] Yes. [01:15:14.890 --> 01:15:16.870] Yeah, our direct number is 310. [01:15:22.980 --> 01:15:23.680] I'm sorry. [01:15:23.820 --> 01:15:25.040] 312-955. [01:15:26.020 --> 01:15:26.540] 310. [01:15:26.960 --> 01:15:27.540] I'm sorry. [01:15:27.660 --> 01:15:28.900] 310-955. [01:15:29.760 --> 01:15:30.900] 1-2-3-4. [01:15:31.300 --> 01:15:32.400] 1-2-3-4. [01:15:33.060 --> 01:15:35.780] Our extension is 2-3-3-1-3. [01:15:36.740 --> 01:15:37.940] And I'm sorry. [01:15:38.020 --> 01:15:39.180] What's the country code and city code? [01:15:40.560 --> 01:15:41.080] Okay. [01:15:41.160 --> 01:15:43.160] You need the direct number, not an IPLC number. [01:15:43.400 --> 01:15:43.720] Yes. [01:15:44.460 --> 01:15:45.900] The direct number... [01:15:45.900 --> 01:15:47.080] I'll provide you the number. [01:15:47.620 --> 01:15:49.180] And I'm not getting your name. [01:15:49.280 --> 01:15:50.060] Can you spell your name? [01:15:50.280 --> 01:15:50.420] Yes. [01:15:50.680 --> 01:15:51.080] Scott. [01:15:51.160 --> 01:15:52.380] S-C-O-T-T. [01:15:52.900 --> 01:15:53.300] Williams. [01:15:53.680 --> 01:15:55.100] S-C-O-T-T? [01:15:55.200 --> 01:15:56.440] S-C-O-T-T. [01:15:56.640 --> 01:15:57.000] Scott. [01:15:57.220 --> 01:15:57.580] Okay. [01:15:58.040 --> 01:15:58.440] Williams. [01:15:58.580 --> 01:15:58.840] Scott Williams. [01:15:59.260 --> 01:15:59.660] Okay. [01:16:00.060 --> 01:16:00.400] I'm sorry. [01:16:00.520 --> 01:16:00.800] Williams. [01:16:00.980 --> 01:16:03.340] W-I-L-L-I-A-M-S. [01:16:05.640 --> 01:16:06.440] With MCI. [01:16:12.310 --> 01:16:13.650] Scott, just hold for a moment. [01:16:14.210 --> 01:16:14.610] Okay. [01:16:14.650 --> 01:16:15.490] We just need that number. [01:16:15.650 --> 01:16:17.070] That's 310-955. [01:16:18.070 --> 01:16:18.390] No problem. [01:16:20.070 --> 01:16:21.550] That's our IPLC number. [01:16:21.910 --> 01:16:23.290] It's 23313. [01:16:24.450 --> 01:16:24.930] Okay. [01:16:25.070 --> 01:16:27.110] Right now we are talking on an IPLC number, right? [01:16:27.590 --> 01:16:27.990] Okay. [01:16:28.350 --> 01:16:28.630] All right. [01:16:28.730 --> 01:16:28.990] Thank you. [01:16:29.650 --> 01:16:30.590] Thank you very much. [01:16:31.270 --> 01:16:32.250] This number will do. [01:16:32.450 --> 01:16:32.950] I'm sorry? [01:16:33.630 --> 01:16:34.670] This number will do. [01:16:35.390 --> 01:16:38.990] Well, we just need the number that is directly dial-able in India. [01:16:39.910 --> 01:16:40.230] Yeah. [01:16:40.390 --> 01:16:41.710] It's directly dial-able in India. [01:16:41.910 --> 01:16:42.170] Okay. [01:16:42.370 --> 01:16:43.230] So what... [01:16:43.230 --> 01:16:44.770] What is the city code in Mumbai? [01:16:49.250 --> 01:16:52.510] For Mumbai, it's 022. [01:16:53.570 --> 01:16:53.970] 022. [01:16:54.850 --> 01:16:55.250] Yeah. [01:16:55.590 --> 01:16:55.970] Okay. [01:16:56.090 --> 01:16:57.910] And you dropped the 0 from overseas, correct? [01:16:57.970 --> 01:16:59.410] I'll give you one more number. [01:16:59.610 --> 01:16:59.790] Okay. [01:16:59.790 --> 01:17:00.490] It's a direct number. [01:17:00.690 --> 01:17:00.950] All right. [01:17:00.990 --> 01:17:01.210] That'd be good. [01:17:01.210 --> 01:17:02.210] 9191. [01:17:02.870 --> 01:17:03.410] 9191. [01:17:03.410 --> 01:17:03.530] Mm-hmm. [01:17:04.830 --> 01:17:05.310] 9191? [01:17:06.210 --> 01:17:06.310] 2-2. [01:17:06.730 --> 01:17:07.270] 9191? [01:17:07.410 --> 01:17:07.490] No. [01:17:07.610 --> 01:17:08.510] It's just 911. [01:17:09.130 --> 01:17:09.490] Okay. [01:17:10.490 --> 01:17:11.450] 9122. [01:17:12.090 --> 01:17:13.050] Okay. [01:17:14.110 --> 01:17:15.070] 5697. [01:17:16.970 --> 01:17:17.410] Okay. [01:17:18.630 --> 01:17:19.070] 47. [01:17:20.950 --> 01:17:21.390] Okay. [01:17:22.330 --> 01:17:22.470] 47. [01:17:22.730 --> 01:17:22.770] Okay. [01:17:24.430 --> 01:17:25.310] That's 9122. [01:17:26.150 --> 01:17:26.590] 5697. [01:17:27.770 --> 01:17:28.210] 4771. [01:17:28.950 --> 01:17:29.390] Yeah. [01:17:29.890 --> 01:17:30.070] Okay. [01:17:30.230 --> 01:17:31.490] This should be enough to fix the problem. [01:17:31.710 --> 01:17:32.370] What's your name again? [01:17:32.490 --> 01:17:32.670] No. [01:17:33.250 --> 01:17:33.690] Imran. [01:17:33.910 --> 01:17:34.270] All right. [01:17:34.370 --> 01:17:35.510] I-M-R-A-N. [01:17:35.730 --> 01:17:36.950] Thank you so much for your help. [01:17:37.590 --> 01:17:37.930] Yeah. [01:17:37.990 --> 01:17:38.310] No problem. [01:17:38.470 --> 01:17:38.690] Good night. [01:17:39.450 --> 01:17:39.730] Yep. [01:17:39.910 --> 01:17:40.130] Good night. [01:17:52.540 --> 01:17:54.400] I don't know what that number actually is. [01:17:54.400 --> 01:17:56.480] I think it's a phone number, but I'm going to try calling it later. [01:17:56.620 --> 01:17:57.760] See if we can- No, you should call forward to it. [01:17:57.880 --> 01:17:57.980] Yeah. [01:17:59.720 --> 01:18:07.120] But I guess if you ever want to really, you know, cut some time and get to American Express quickly directly in India and pay a premium rate for it too, you can always dial that number. [01:18:07.880 --> 01:18:08.200] Okay. [01:18:08.300 --> 01:18:11.120] A couple of questions and then we have to quickly get going. [01:18:11.680 --> 01:18:11.920] Good number. [01:18:11.980 --> 01:18:14.540] During these calls, I hear a lot of in-band signaling. [01:18:14.780 --> 01:18:19.300] Do you think you should be, you could be generating those tones to switch you to a supervisor who can solve your problem? [01:18:19.440 --> 01:18:21.380] That's a whole other topic there. [01:18:21.380 --> 01:18:24.120] But yeah, they do use in-band signaling in many parts of the world still. [01:18:24.560 --> 01:18:26.380] Boxing is still popular and possible. [01:18:27.180 --> 01:18:27.640] Go ahead. [01:18:28.800 --> 01:18:36.440] I found one of the hardest things when I make some of these phone calls is when I'm stuck at a dead end and there's a piece of information I'm missing and I have to back out of a call. [01:18:36.700 --> 01:18:41.840] And I was really hoping that you'd fail somewhere, but you didn't because I wanted to see how you would approach backing out of a call. [01:18:42.060 --> 01:18:46.340] I'm sorry to disappoint you, but I have- Maybe you could share with us a couple of stories. [01:18:46.460 --> 01:18:50.040] No, I have failed and a good way to, you know, if you're pursuing some information. [01:18:50.040 --> 01:18:51.140] Can you hold on a second, please? [01:18:51.200 --> 01:18:51.980] I'm getting another call. [01:18:52.140 --> 01:18:52.560] I'm sorry. [01:18:52.620 --> 01:18:53.480] I'm going to have to call you back. [01:18:54.420 --> 01:18:56.080] Or, you know, something like that. [01:18:56.200 --> 01:18:58.700] Or you simply, you make it hard to hear. [01:18:58.880 --> 01:19:01.180] You do something to your voice so that they can understand you. [01:19:01.480 --> 01:19:03.120] I'll call you back on a better line. [01:19:04.220 --> 01:19:08.900] Or, you know, worst comes to worst, you just hang up and start over again in a few hours when they have a shift problem to solve. [01:19:09.020 --> 01:19:09.960] You don't need the help anymore. [01:19:10.180 --> 01:19:10.360] All right. [01:19:10.480 --> 01:19:10.700] Thank you. [01:19:11.060 --> 01:19:11.440] All right. [01:19:11.900 --> 01:19:12.600] Last question. [01:19:12.760 --> 01:19:13.760] And Kevin's really got to take off. [01:19:14.080 --> 01:19:15.220] Just a quick comment. [01:19:15.520 --> 01:19:23.200] If you're dialing a 1-800 number and you don't want them to see your caller ID, you can dial 10-10-2880 before and just dial an 800 that way and it causes an ANI-fail. [01:19:23.500 --> 01:19:25.600] I don't know if that always works anymore. [01:19:25.900 --> 01:19:26.900] Every time I've tried it, it does. [01:19:26.900 --> 01:19:27.280] It used to. [01:19:27.400 --> 01:19:28.440] It depends where you're calling from. [01:19:28.860 --> 01:19:34.100] There are lots of other ways to opt-divert and block your number from being transmitted. [01:19:34.620 --> 01:19:43.080] There's a toll-free number that you cannot be called from payphones, 1-800-555-TEL, which is... and if you can't call from a payphone, it does not work. [01:19:43.240 --> 01:19:51.220] But if you dial 10-10-2880, wait for AT&T to say, please enter the number you want to call, dial 800-555, and it'll just work. [01:19:51.420 --> 01:19:51.640] Okay. [01:19:52.080 --> 01:19:52.380] All right. [01:19:52.560 --> 01:19:53.580] We're out of time, folks. [01:19:53.680 --> 01:19:54.280] Thanks so much. [01:20:00.770 --> 01:20:02.650] And let's thank Kevin for being here. [01:20:02.710 --> 01:20:03.930] He's got to take off right now. [01:20:04.170 --> 01:20:06.050] His airplane leaves in about an hour and a half. [01:20:06.050 --> 01:20:06.790] So... [01:20:06.790 --> 01:20:07.670] Bye, everybody. [01:20:07.770 --> 01:20:08.390] Thanks, Kevin, for being here. [01:20:08.690 --> 01:20:09.690] See you next week. [01:20:14.200 --> 01:20:15.820] And don't forget, Taco Bell. [01:20:16.240 --> 01:20:17.040] Nine o'clock. [01:20:17.200 --> 01:20:18.640] And don't do anything I wouldn't do. [01:20:20.320 --> 01:20:21.280] We want video.