[00:28.270 --> 00:36.510]  We are going to give you a warning through the PA system whenever we are going to start dialing so you can drop your levels down so people don't go, ouch.
[00:37.850 --> 00:39.710]  Because no matter what we do, it's going to be a ton louder.
[00:41.930 --> 00:45.290]  And I will just say we are ready to dial.
[00:46.150 --> 00:47.610]  And then we will say, okay, we are done dialing.
[00:48.570 --> 00:52.770]  And I will tweak levels here as you go up or down.
[00:53.230 --> 00:53.710]  Okay?
[00:54.170 --> 00:54.410]  Thanks.
[01:00.790 --> 01:06.510]  What does it say if anything is lost?
[01:07.230 --> 01:09.530]  Do you want to come up here?
[01:15.130 --> 01:19.470]  We have someone here who lost something who wants to issue a plea for its return.
[01:19.470 --> 01:20.270]  Yes.
[01:21.030 --> 01:21.870]  Test, test, test.
[01:21.930 --> 01:22.590]  Microphone, please.
[01:23.050 --> 01:23.890]  How about we use the other mic?
[01:29.630 --> 01:30.230]  Keep it!
[01:30.610 --> 01:31.430]  Yo, what's up, dude?
[01:32.190 --> 01:32.590]  Yeah, hello.
[01:33.010 --> 01:33.470]  Hi, guys.
[01:34.110 --> 01:35.250]  Oh, a lot of you over here.
[01:35.330 --> 01:35.430]  Hi.
[01:35.670 --> 01:37.910]  Okay, my bag was lost.
[01:37.910 --> 01:40.030]  It was in the mezzanine floor.
[01:40.430 --> 01:42.170]  And it's a black bag.
[01:42.370 --> 01:44.270]  It says O-G-I-O on it.
[01:44.410 --> 01:44.790]  Like O-Yo.
[01:44.930 --> 01:45.790]  And there's somebody here else.
[01:45.950 --> 01:46.370]  There's another bag.
[01:46.370 --> 01:47.550]  But it's all black.
[01:47.550 --> 01:48.930]  And it has like orange stripes.
[01:49.290 --> 01:51.650]  And there's a cell phone pocket on the side.
[01:51.790 --> 01:53.450]  And it's empty.
[01:53.650 --> 01:54.090]  It's like blank.
[01:54.230 --> 01:58.490]  So you can tap on it to see if it's my bag or not.
[01:58.970 --> 02:01.310]  And it has stuff in it that's very valuable to me.
[02:01.350 --> 02:04.510]  My graduation pictures, like my digital camera and stuff I took.
[02:04.970 --> 02:06.690]  So I don't know who took it.
[02:06.870 --> 02:07.550]  I won't ask.
[02:07.810 --> 02:09.530]  I mean, I don't care if you took it or not.
[02:09.670 --> 02:11.010]  Just give it back to me.
[02:11.190 --> 02:12.650]  I mean, it's very valuable to me.
[02:12.750 --> 02:14.670]  I have a lot of stuff that's really important to my family.
[02:16.090 --> 02:19.830]  And I have medications in there and stuff that, like, I need, you know, just to survive.
[02:19.990 --> 02:21.150]  So I'm dying right now.
[02:21.290 --> 02:22.950]  But I mean, so...
[02:24.070 --> 02:24.850]  So I'm serious.
[02:25.170 --> 02:27.010]  It's just if anyone can give me...
[02:27.010 --> 02:28.330]  Bernie asked me, he offered me water.
[02:28.410 --> 02:29.710]  This guy is the bomb.
[02:30.170 --> 02:30.490]  Okay?
[02:32.790 --> 02:33.270]  Okay, no.
[02:33.350 --> 02:34.090]  Okay, we're kidding about that.
[02:34.170 --> 02:34.730]  But just...
[02:34.730 --> 02:35.990]  Please return the bag.
[02:36.590 --> 02:37.490]  My number...
[02:37.490 --> 02:37.670]  Stop.
[02:37.750 --> 02:40.050]  My number is on the mezzanine floor if you want it.
[02:40.090 --> 02:40.670]  I can give it to you later.
[02:40.670 --> 02:43.070]  Or meet me up here if you have it or after.
[02:43.730 --> 02:44.850]  Well, we'll say that later.
[02:44.970 --> 02:45.250]  But okay.
[02:46.510 --> 02:47.290]  Please, please.
[02:47.590 --> 02:48.690]  I really need that bag.
[02:48.890 --> 02:50.170]  You were at the last conference, weren't you?
[02:50.410 --> 02:52.650]  You were the beatboxer at the Freedom Downtime thing, right?
[02:52.690 --> 02:52.870]  Yeah, I was.
[02:52.970 --> 02:53.610]  Wow, that was cool.
[02:53.710 --> 02:56.970]  This guy kept us entertained for an hour and a half while we tried to get the film working.
[02:57.470 --> 03:00.810]  So please, if you have his medication...
[03:05.710 --> 03:09.290]  And the last word I want associated with my name is bomb.
[03:12.650 --> 03:13.610]  But thanks anyway.
[03:16.450 --> 03:20.270]  There have been a bunch of people who left things lying around.
[03:20.450 --> 03:24.090]  Security was able to grab those and put them in a safe place.
[03:25.350 --> 03:28.030]  There are some cases, though, where someone else might have grabbed them first.
[03:28.210 --> 03:29.970]  And please, people don't leave valuables lying around.
[03:30.090 --> 03:31.190]  It's New York City, for God's sake.
[03:32.630 --> 03:34.490]  Even if we are encased in a hotel.
[03:35.330 --> 03:36.690]  Which, by the way, has been a lot of fun.
[03:36.790 --> 03:40.330]  You know, the hotel people will encode these cards with your hotel rooms.
[03:40.370 --> 03:40.690]  You know that?
[03:40.810 --> 03:41.750]  It's really kind of cool.
[03:41.750 --> 03:49.010]  The badges were specially made with a three-stripe, high-coercivity magnetic strip.
[03:49.350 --> 03:50.930]  So, go down to the front desk.
[03:51.050 --> 03:51.670]  Social engineer.
[03:52.790 --> 03:53.570]  You don't have to.
[03:53.670 --> 03:54.390]  You just have to ask.
[03:54.570 --> 03:55.490]  They'll just do it.
[03:55.550 --> 03:56.790]  No, several of them have said no.
[03:56.790 --> 03:59.410]  So you have to use a little social engineering and explain why.
[03:59.510 --> 03:59.710]  Whatever.
[04:00.250 --> 04:03.190]  And make sure they insert the card the correct way.
[04:03.190 --> 04:04.470]  Or it won't encode properly.
[04:04.570 --> 04:05.750]  Several people said it didn't work.
[04:05.770 --> 04:08.410]  Well, it's because it was stuck in backwards to the encoder.
[04:08.410 --> 04:10.290]  So you can use that as your key card.
[04:12.830 --> 04:14.830]  Yeah, they say the old card stops working when you do that.
[04:14.990 --> 04:17.390]  So you might want to ask for two cards or something.
[04:18.090 --> 04:20.390]  You can only have one at a time if you only ask for one.
[04:23.410 --> 04:24.820]  Yeah, if you checked out, we can't help you.
[04:27.680 --> 04:28.670]  Use it for the next hotel.
[04:29.500 --> 04:29.820]  Okay.
[04:30.240 --> 04:31.290]  This is social engineering.
[04:32.480 --> 04:34.580]  Which, traditionally, is one of our more popular panels.
[04:35.540 --> 04:39.230]  Basically, we just, A, talk about social engineering.
[04:40.100 --> 04:46.480]  And make a few pitiful attempts ourselves at getting someone to tell us something they really shouldn't tell us.
[04:47.480 --> 04:49.830]  Does anybody have the advisory that got issued?
[04:49.920 --> 04:51.680]  There's a Slashdot thing a couple of days ago.
[04:51.860 --> 04:52.850]  Does anybody have a printout of that?
[04:52.970 --> 04:54.170]  Or a computer we could read?
[04:55.300 --> 04:56.240]  I know it's on the web.
[04:56.290 --> 04:56.920]  I'm not on the web.
[04:56.980 --> 04:57.770]  I'm on the stage.
[04:58.600 --> 04:58.970]  But...
[05:00.600 --> 05:02.090]  Basically, this happened a couple of years ago.
[05:02.090 --> 05:03.230]  If anyone has it, just bring it up.
[05:03.330 --> 05:05.210]  On a piece of paper, printout, whatever.
[05:06.730 --> 05:13.000]  A couple of years ago, when we had H2K, there was a similar advisory from AT&T Security.
[05:13.360 --> 05:15.240]  And they were basically asking people...
[05:15.740 --> 05:16.770]  Is everybody getting that feedback?
[05:16.790 --> 05:17.360]  Or is it just me?
[05:18.650 --> 05:19.040]  Okay.
[05:19.480 --> 05:21.270]  Maybe we should not have that.
[05:21.480 --> 05:21.770]  Thank you.
[05:25.290 --> 05:25.680]  Yeah.
[05:25.920 --> 05:28.060]  So, basically, they sent out an advisory.
[05:28.060 --> 05:31.210]  A warning saying that a bunch of hackers are getting together.
[05:31.210 --> 05:35.880]  It might be social engineering as part of some sort of competition or something like that.
[05:36.000 --> 05:38.800]  So, we called them last time and asked them about that.
[05:38.860 --> 05:41.800]  And they gave us some information they shouldn't have given us.
[05:41.880 --> 05:42.080]  Thank you.
[05:45.280 --> 05:46.580]  It was all in good fun, though.
[05:47.510 --> 05:49.830]  We told them, but he hung up after he found out who we were.
[05:52.020 --> 05:52.600]  Let's see.
[05:53.390 --> 05:54.240]  Hung up in fear.
[05:54.240 --> 05:58.840]  This is the memo that went out to people on AT&T, I believe.
[05:59.830 --> 06:00.270]  Caution.
[06:00.680 --> 06:08.040]  Be careful about giving information to anyone you don't know and those making unusual information requests by claiming to be an AT&T employee or customer.
[06:09.710 --> 06:11.060]  Claiming to be an AT&T customer?
[06:11.100 --> 06:12.740]  I didn't know that was something that was unusual.
[06:16.210 --> 06:20.660]  The H2K2 Hackers on Planet Earth 2002 Hacker Conference will take place this weekend.
[06:21.100 --> 06:22.300]  Friday, July 12th.
[06:22.400 --> 06:24.920]  Sunday, July 14th, 2001.
[06:24.980 --> 06:26.000]  I don't quite know.
[06:28.380 --> 06:29.900]  This is AT&T after all.
[06:30.180 --> 06:34.720]  In New York City, this conference will be a gathering of over 5,000 computer hackers.
[06:34.720 --> 06:38.980]  Well, they really anticipate a lot more people than we actually thought we'd get ourselves.
[06:40.060 --> 06:44.440]  Guest speakers, computer enthusiasts, and then they give the website, which was nice.
[06:47.360 --> 06:58.580]  In 1994, 1997, and 2000, at the previous HOPE Hackers on Planet Earth conferences, live demonstrations of social engineering techniques were performed in front of thousands of hackers and other attendees.
[06:58.840 --> 07:00.080]  The hacker panel...
[07:00.080 --> 07:01.920]  This is like a PR announcement for us.
[07:02.160 --> 07:02.830]  It's great.
[07:03.760 --> 07:05.220]  The hacker panel...
[07:05.220 --> 07:12.270]  In fact, I'm wondering if somebody actually managed to get this issued as an AT&T memorandum who doesn't work for AT&T.
[07:14.150 --> 07:22.360]  The hacker panel dialed live into AT&T offices and centers and demonstrated how to get proprietary information by pretending to be an AT&T employee and customer.
[07:22.650 --> 07:23.220]  Okay?
[07:23.660 --> 07:31.040]  These calls were recorded and videotaped by the hackers and are sold as instructional material at future hacker conferences.
[07:37.470 --> 07:41.190]  There is a very high likelihood that AT&T will be a target again this weekend.
[07:43.970 --> 07:45.390]  Does anyone have their phone number?
[07:45.510 --> 07:46.370]  I don't have their phone number.
[07:46.370 --> 07:49.050]  If anyone has AT&T corporate security phone number, please let us know.
[07:50.350 --> 07:51.310]  It's on the memo?
[07:53.910 --> 07:54.550]  Oh, Lord!
[08:02.600 --> 08:03.760]  We don't have to do anything.
[08:04.160 --> 08:05.080]  They do it all themselves.
[08:06.700 --> 08:09.360]  We were scraping for ideas and they just gave them all to us.
[08:10.380 --> 08:11.880]  We're never going to be able to get through now.
[08:13.600 --> 08:17.520]  Okay, the social engineering contest is scheduled for Sunday, July 14th at 4 p.m. Eastern time, 1 p.m. Pacific time.
[08:19.840 --> 08:23.060]  During this period, hackers may be dialing into AT&T to get information.
[08:23.740 --> 08:34.210]  AT&T network security would like to warn our employees to be on guard this entire weekend for any unknown person calling and claiming to be an AT&T employee to request proprietary information or claiming to be an AT&T customer with unusual requests.
[08:34.480 --> 08:47.660]  Remember, if anyone who is unknown to you calls for proprietary information or makes unusual requests, please follow your procedure by requesting additional information to ensure the person is who they say they are before giving out any information.
[08:48.360 --> 08:53.740]  If the person is claiming to be an AT&T employee, please request name, call back, and HR ID number.
[08:53.860 --> 08:54.660]  Hmm, that's interesting.
[08:54.760 --> 08:55.310]  Now we know that.
[08:58.460 --> 09:00.310]  Do you have my HR ID number?
[09:00.340 --> 09:01.260]  I seem to have forgotten it.
[09:03.660 --> 09:04.620]  Then verify...
[09:04.620 --> 09:05.570]  Human resources ID.
[09:06.400 --> 09:07.760]  Is that a human resources ID?
[09:08.260 --> 09:08.740]  Okay.
[09:09.060 --> 09:17.260]  Then verify through POST or the email global address list if the information is correct and even request to call the employee back at their contact number.
[09:17.640 --> 09:30.080]  If the person is claiming to be an AT&T customer, verify this by requesting additional info on their account like address and social security number, which I never gave to AT&T, and even request to call the person back at their contact number listed on the account.
[09:30.860 --> 09:32.580]  Please be on guard for any unusual request.
[09:32.760 --> 09:37.940]  Verify the person is an AT&T employee or legitimate customer, and if they have a need to know the information they are asking.
[09:38.120 --> 09:41.060]  If you can verify employment or number, don't give out the information.
[09:41.260 --> 09:49.060]  If you are still in doubt regarding the legitimacy of the caller, then speak to a supervisor regarding the situation before proceeding further, and inform the caller you will call them back.
[09:49.240 --> 09:53.710]  If you still have questions, you can call the security hotline, which number is on here, which I'd be a fool to read here.
[09:55.830 --> 10:00.500]  Remember, you do not want to be the lucky guest of honor on a telephone call from the hacker conference this weekend.
[10:03.040 --> 10:04.940]  What ever happened to Jim two years ago, anyway?
[10:05.220 --> 10:10.020]  With thousands of hackers listening to you and attempting to scam AT&T out of proprietary information, please be on guard.
[10:11.720 --> 10:12.120]  Well...
[10:12.120 --> 10:14.800]  If that's not an invitation, I don't know what is.
[10:24.010 --> 10:29.050]  I honestly don't know if this number is right, or if it's not going to work, or if it's busy, or whatever.
[10:32.650 --> 10:33.910]  Great, okay, it's been tried.
[10:35.110 --> 10:37.710]  Okay, well, you know, we can try something, I guess.
[10:37.890 --> 10:39.170]  I don't know how well this is going to work.
[10:39.910 --> 10:41.090]  Is this phone actually hooked up?
[10:41.170 --> 10:42.050]  Let's see if we can get a dial tone.
[10:44.990 --> 10:45.770]  Still got those clicks.
[10:45.890 --> 10:46.070]  Okay.
[10:46.470 --> 10:49.170]  It's going to be extremely loud when I dial, so please turn down the audio.
[10:49.510 --> 10:50.930]  Now, they can hear me on this?
[10:51.590 --> 10:52.290]  Okay, great.
[10:54.290 --> 10:55.270]  It's not breaking the dial tone.
[11:00.230 --> 11:01.270]  It's not breaking the dial tone.
[11:01.790 --> 11:02.030]  Okay.
[11:04.770 --> 11:05.850]  I think that's the phone.
[11:06.410 --> 11:06.890]  Uh-oh.
[11:07.530 --> 11:09.210]  This is going to make a horrible off-the-hook noise.
[11:14.320 --> 11:18.580]  Okay, well, why does this might tell a social engineering story while we're getting the technical snafus worked out?
[11:21.650 --> 11:22.770]  Yeah, introduce yourselves.
[11:23.030 --> 11:23.810]  I need a microphone.
[11:24.170 --> 11:24.810]  There we are.
[11:25.350 --> 11:34.030]  Well, yeah, I just kind of didn't really know I was going to be on this panel today, but to take up some time, I have some real funny social engineering stories.
[11:34.370 --> 11:39.630]  Some of them I tried to get okayed with my partner in crime, but I couldn't seem to find him.
[11:40.110 --> 11:45.070]  Probably some of the best social engineering that we ever did was with the Caldor telephone system.
[11:46.270 --> 11:58.670]  Back in the day, before Caldor went bankrupt, for reasons which I'm not entirely sure of, they used to have a PBX system, you know, Private Branch Exchange, which had a number very similar to their actual store number.
[11:58.870 --> 12:06.070]  I think the last four digits of the number were something like 6670, and the actual PBX number was 6668.
[12:06.470 --> 12:08.170]  It was just a couple digits off.
[12:08.550 --> 12:12.010]  To the untrained ear, it would sound like you were hung up on.
[12:12.090 --> 12:12.850]  You'd get a dial tone.
[12:13.170 --> 12:17.510]  But we were smart enough to know that it was a PBX and it needed a four-digit code to get in.
[12:17.790 --> 12:28.310]  So for a while, we didn't quite know what the code was until one night we were on a conference call and we said, you know what, let's try CALD for Caldor.
[12:29.630 --> 12:31.650]  2253, I think it was, and it let us right in.
[12:31.650 --> 12:44.250]  And a friend of mine happened to be quite familiar with their phone system and knew that once you got into the internal phone system, all you had to dial was 63 and your call would be transferred over to the store's PA system.
[12:48.070 --> 12:53.950]  So from anywhere in the world, you could take control of any Caldor phone system, any PA system.
[12:54.170 --> 12:58.830]  They all had the same code on it in the entire east coast of the United States, 2253.
[12:59.310 --> 13:04.790]  So we used to call up, we actually, we read the entire first page of Clockwork Orange over the PA system.
[13:07.070 --> 13:11.650]  We used to put ridiculous items on sale for the first 10 people that can get to the back of the store.
[13:11.830 --> 13:14.810]  You know, the 10 discs Sony CD changer will be $20.
[13:16.550 --> 13:20.030]  A 10% discount for anybody wearing red, things like that.
[13:21.350 --> 13:23.610]  Please clean up the zebra shit in the men's section.
[13:25.110 --> 13:26.150]  That kind of stuff.
[13:26.150 --> 13:29.250]  We used to play Ministry over the PA system.
[13:31.090 --> 13:40.790]  Finally, they caught on and realized that the way that they could stop us from taking total control over the store would be to make a page over us.
[13:40.870 --> 13:42.410]  So we'd have a good five or six seconds.
[13:43.010 --> 13:45.210]  And then somebody would make a page over us.
[13:45.310 --> 13:48.070]  But the funny thing about it was, they always thought it was somebody in the store.
[13:49.350 --> 13:55.110]  They had no idea there was any way in which somebody from outside the store could get into their phone system.
[13:55.990 --> 14:03.590]  And other stores where, busier stores where people would be stocking up at night, we'd get on the PA system and say, I'm in the store.
[14:17.220 --> 14:17.980]  That was fun.
[14:18.080 --> 14:20.920]  We also got a couple H2K2 attendees this weekend.
[14:21.040 --> 14:26.560]  I don't know if anybody got a call from Jonathan Guile at the front desk, just to make sure everybody was very okay.
[14:26.840 --> 14:31.140]  And we'd like to tell our H2K attendees the rules very clearly about the hotel.
[14:31.800 --> 14:34.220]  Most specifically, that lights out were at 10 p.m.
[14:35.900 --> 14:37.980]  People caught on when we said that.
[14:38.180 --> 14:39.900]  But up until then, it was pretty funny.
[14:40.420 --> 14:41.960]  Well, that was us, if you got a call.
[14:43.700 --> 14:45.760]  Anyone else have any other funny stories?
[14:46.260 --> 14:46.860]  In short Cheshire?
[14:48.740 --> 14:50.560]  That's Republican Sunshion is the question.
[14:51.480 --> 14:52.080]  That's true.
[14:53.400 --> 14:55.040]  There's a time I...
[14:55.840 --> 14:56.900]  Okay, is my mic hot?
[14:57.180 --> 14:57.600]  Thank you.
[14:58.700 --> 15:03.740]  I used to play with the Marisat Network, the Maritime Communications Satellite Network, back in the 70s.
[15:04.040 --> 15:06.000]  I went to a West Coast computer fair.
[15:06.440 --> 15:08.500]  This was back when I lived in New York City.
[15:08.540 --> 15:11.560]  And I was playing on Marisat, the Maritime Communications Satellite.
[15:11.720 --> 15:18.060]  And from here, we're only about 40 miles from Southbury, where the Atlantic Satellite Station is for the Atlantic satellites.
[15:18.460 --> 15:29.180]  I went to California to visit a ComSat General Earth Station and was invited into, by the station engineer.
[15:30.320 --> 15:33.220]  Because the station manager was out of town when I called up to request.
[15:33.680 --> 15:36.000]  Basically, I was reporting for ROM Magazine.
[15:36.440 --> 15:42.760]  The fellow who was the personal computer editor of the New York Times was a friend of mine and was starting to ROM Magazine at the time, read-only magazine.
[15:43.180 --> 15:47.160]  So, as communications editor of ROM, I called and asked for a tour of the Earth Station.
[15:47.800 --> 15:53.880]  The station engineer invited me in and we're talking to the telex and telephone operators.
[15:54.340 --> 16:09.600]  Now, they're rather confused because while they have to place the telephone calls for the guys on the ships all the time, it wasn't automatic service in those early days, they were surprised that there was so much work on the telex call they had them do as well.
[16:10.020 --> 16:13.440]  Now, I had it over on them because I had been to a ship and they hadn't.
[16:13.440 --> 16:17.100]  So, I explained about my buddy Antonio on the Italica.
[16:17.280 --> 16:25.220]  I just took the bus out of Port Authority across the River to Secaucus and visited his ship when his ship had docked.
[16:25.800 --> 16:29.680]  He still had to run up and down the ladders, passing message traffic for the captain.
[16:30.160 --> 16:41.820]  He had to sit with the ear cans, listening to Morse code from ROM, because Mirosat was still too expensive to use on a day-to-day basis, typing into a Ditto master to run off a daily newspaper for the crew.
[16:41.820 --> 16:46.900]  He also had to keep his radars working for the ship, safety of life at sea issues.
[16:47.160 --> 16:54.860]  He still had the 500 kilohertz radios he had to keep a watch on in case of a seaborne disaster they could respond to.
[16:55.040 --> 16:57.260]  That was back in the days when Morse code was still king.
[16:59.460 --> 17:03.860]  And, ladies, any work these guys can slough off onto anybody else, you're going to see it.
[17:04.920 --> 17:11.620]  Well, after my host heard this story about the guys on the ships, he's looking at me with a swill in the look of respect, because I actually know what I'm talking about.
[17:11.720 --> 17:12.880]  I've actually been out on the ships.
[17:14.340 --> 17:17.440]  We leave that room, and we're in the corridor.
[17:17.560 --> 17:20.260]  My girlfriend, who's with us on the tour, asks him a question.
[17:20.460 --> 17:22.200]  I don't even know what it was at the time.
[17:22.200 --> 17:26.840]  But while he's answering that, I'm looking at the company bulletin board next to us.
[17:26.920 --> 17:29.600]  You know, the local softball league sports company picnic is coming up.
[17:29.980 --> 17:34.240]  And the telex from Washington, subject, unauthorized access to Mirasat-Cheshire.
[17:38.060 --> 17:45.700]  And if this Cheshire character were to pop up on your terminal to hit the figs D to catch the answer back from his terminal, we can find out where the hell he is.
[17:46.180 --> 17:56.940]  Well, of course, I was using a Model 33 Teletype from my place of business, where we had Model 33s with the Altair 8800 computers and the acoustic coupler.
[17:57.100 --> 18:00.780]  That's how I got into the TWX Teletype network, which sent me out to Mirasat.
[18:02.400 --> 18:09.960]  But seeing that memo on the wall from Washington, that's why I went 3,000 miles to visit an earth station before I went 40 miles up the road.
[18:18.690 --> 18:20.850]  Okay, we're going to try this again.
[18:21.730 --> 18:22.550]  This is a warning.
[18:22.670 --> 18:24.790]  I'm going to pick up the phone so we don't deafen the people in the audience.
[18:26.330 --> 18:26.730]  Yeah.
[18:28.090 --> 18:28.490]  Okay.
[18:30.490 --> 18:30.890]  Excellent.
[18:33.190 --> 18:35.330]  Keep in mind, also, some people can read touch tone here.
[18:46.470 --> 18:50.630]  You have dialed a number that is not available from your calling area.
[18:55.500 --> 18:56.460]  Those bastards.
[18:58.160 --> 19:00.320]  The calling area, no doubt, in this block.
[19:00.660 --> 19:01.140]  That's...
[19:02.480 --> 19:06.620]  You have dialed a number that is not available from your calling area.
[19:15.140 --> 19:15.620]  Okay.
[19:16.560 --> 19:19.160]  The suggestions we're getting are to opt-diver.
[19:19.280 --> 19:20.920]  Well, the thing is, okay, here's the problem.
[19:22.020 --> 19:23.780]  You can talk about this problem, Bernie.
[19:25.060 --> 19:35.620]  We probably had to make about 25 or 30 telephone calls over the past two or three weeks to get Verizon to simply install two regular phone lines up here on the 18th floor of the hotel.
[19:36.740 --> 19:37.220]  Just...
[19:37.220 --> 19:38.280]  I hung up.
[19:39.100 --> 19:39.580]  There.
[19:40.140 --> 19:41.000]  You're hung up now.
[19:41.460 --> 19:41.620]  Okay.
[19:42.920 --> 19:46.220]  Just unbelievable mistakes Verizon was making.
[19:46.440 --> 19:50.260]  Every conceivable step of the way, if there was any possible way to get something wrong, they did.
[19:50.380 --> 19:53.000]  And they even figured out ways I couldn't figure out to get this wrong.
[19:54.440 --> 20:00.000]  Up until yesterday, we finally had everything working, including a long-distance service on both lines.
[20:00.000 --> 20:03.640]  And today, no long-distance service on either line.
[20:03.760 --> 20:06.900]  In fact, there's just no long-distance carrier on either line.
[20:06.940 --> 20:11.700]  So, we had to get some AT&T calling cards to make these long-distance calls with.
[20:11.800 --> 20:13.220]  So, you have to bear with a little extra dialing.
[20:13.900 --> 20:17.100]  Could I make a quick announcement apropos of Bernie's story?
[20:17.400 --> 20:20.160]  I actually run a website, VerizonEatsPoop.com.
[20:21.840 --> 20:27.220]  It was out of commission for a while, but we're back up and running, selling T-shirts and making Verizon mad.
[20:27.220 --> 20:29.620]  So, we hope to see a grievance from Bernie soon.
[20:33.940 --> 20:37.320]  Okay, so we have someone donated some AT&T calling cards to us.
[20:37.440 --> 20:39.780]  Not, you know, someone else's.
[20:40.140 --> 20:42.420]  The prepaid calling cards, which...
[20:42.820 --> 20:44.120]  I'm not sure if this will allow us...
[20:45.760 --> 20:46.380]  What's this?
[20:48.800 --> 20:49.280]  This.
[20:50.160 --> 20:53.140]  Someone also handed us an HR ID number, which they somehow got.
[21:00.490 --> 21:02.990]  So, the idea is I'm going to try to call the 800 number off this thing.
[21:03.070 --> 21:03.590]  Is that going to work?
[21:03.830 --> 21:04.830]  Well, we can try, I guess.
[21:05.350 --> 21:05.650]  All right.
[21:06.330 --> 21:08.330]  So, the first thing we do is we call the...
[21:09.350 --> 21:10.950]  Of course, my code's going to go out to the world.
[21:17.730 --> 21:18.810]  Oops, I mis-dialed.
[21:18.850 --> 21:19.110]  I'm sorry.
[21:21.130 --> 21:21.690]  It happens.
[21:22.170 --> 21:22.810]  All right, let's try again.
[21:30.460 --> 21:34.660]  You have dialed a number that is not available from your calling area.
[21:35.040 --> 21:38.020]  Did they cut us off completely from 800 numbers too?
[21:38.700 --> 21:39.640]  You know, I wonder...
[21:40.760 --> 21:47.760]  It makes me wonder if the person who wrote that memo had anything to do with the change of service on these lines overnight.
[21:47.840 --> 21:50.240]  You have dialed a number that is not available from your calling area.
[21:50.240 --> 21:51.640]  1-800 number.
[21:52.500 --> 21:52.800]  Okay.
[21:58.070 --> 21:59.030]  Again, get ready.
[21:59.690 --> 22:00.650]  Okay, what am I doing?
[22:02.830 --> 22:05.110]  All right, we'll try 10-10-288 so it happens.
[22:16.310 --> 22:17.390]  AT&T.
[22:17.870 --> 22:21.230]  To close the call, please have a number that you are calling.
[22:21.610 --> 22:23.750]  For 00 info, U.S.
[22:23.890 --> 22:25.190]  directory, press 1.
[22:25.910 --> 22:30.490]  For other requests, please say information or credit now.
[22:31.490 --> 22:34.490]  For rates, terms, and conditions, press 0.
[22:36.030 --> 22:36.930]  What am I doing?
[22:37.910 --> 22:39.770]  Please hold for operator assistance.
[22:40.830 --> 22:42.210]  I'm going to ask her for help.
[22:56.320 --> 22:58.060]  AT&T, how may I help you?
[22:58.280 --> 22:59.020]  Yes, hi.
[22:59.400 --> 23:01.100]  We're trying to get out on this line.
[23:01.100 --> 23:05.220]  I'm calling from AT&T Repair, HRID 847-5324.
[23:06.560 --> 23:08.900]  We're having trouble reaching 800 numbers on this line.
[23:09.060 --> 23:10.720]  Are you able to patch us through?
[23:11.800 --> 23:13.200]  Not an 800 number, I can't.
[23:13.260 --> 23:13.680]  I'm sorry.
[23:13.960 --> 23:15.500]  Any other number I can, but I'm toll-free.
[23:15.960 --> 23:17.580]  I'm sorry, I'm not getting you.
[23:17.980 --> 23:20.100]  I cannot dial any toll-free number for you at all.
[23:20.540 --> 23:21.760]  I'll transfer you to the Supervisor.
[23:21.960 --> 23:22.340]  All right, thanks.
[23:26.450 --> 23:28.360]  AT&T Supervisor, sorry for any trouble.
[23:28.520 --> 23:29.180]  Can I help you?
[23:30.190 --> 23:31.300]  Yes, actually, hi.
[23:31.680 --> 23:34.180]  This is Randy Reaver from Repair.
[23:35.520 --> 23:39.860]  We're working on a line in the Hotel Pennsylvania, and we're trying to get out on the 800 line.
[23:41.080 --> 23:42.460]  And we're having trouble with that.
[23:42.700 --> 23:44.260]  I was wondering if you might be able to help us.
[23:44.720 --> 23:49.880]  I'm very sorry, sir, but the operators are not able to dial 1-800 numbers.
[23:50.160 --> 23:51.780]  Well, what happens if you try?
[23:52.620 --> 23:54.160]  I won't be able to try, sir.
[23:54.360 --> 23:54.780]  I'm sorry?
[23:55.120 --> 23:57.220]  I'm sorry, I will not be able to try.
[23:57.680 --> 24:04.900]  If this is 800 repair, I can give you the number if you want to try to reach the 800 repair service center.
[24:05.320 --> 24:06.680]  800 repair service center?
[24:06.860 --> 24:07.460]  Sure, why not?
[24:07.980 --> 24:13.080]  The number to call is 1-800-322-3000.
[24:18.940 --> 24:19.280]  Hello?
[24:19.620 --> 24:19.640]  Randy?
[24:20.060 --> 24:20.900]  Did you get the number?
[24:21.040 --> 24:21.660]  No, I didn't get it.
[24:22.260 --> 24:23.160]  Hey, Randy, I'm sorry.
[24:23.280 --> 24:24.420]  You said you were with repair.
[24:24.500 --> 24:25.000]  Is that correct?
[24:25.520 --> 24:25.820]  It's wrong?
[24:25.940 --> 24:26.040]  Yeah.
[24:26.420 --> 24:26.700]  Okay.
[24:26.700 --> 24:27.620]  So I had the TV on.
[24:27.940 --> 24:28.680]  All right, then, Randy.
[24:28.780 --> 24:31.120]  Then you should know what number you need to contact.
[24:31.640 --> 24:32.600]  Well, that's the problem.
[24:32.680 --> 24:34.920]  I'm trying to contact that 800 number, and it's not going through.
[24:35.200 --> 24:36.020]  Well, Randy, I'm sorry.
[24:36.120 --> 24:36.920]  I won't be able to help you.
[24:36.980 --> 24:37.340]  I'm sorry?
[24:37.760 --> 24:39.900]  I'm sorry, I will not be able to assist you.
[24:41.220 --> 24:42.840]  You know, this is why we don't make any money.
[24:43.260 --> 24:44.840]  We don't cooperate with each other.
[24:46.060 --> 24:47.120]  Okay, thanks, anyway.
[24:47.280 --> 24:47.980]  All right, good thing.
[24:56.630 --> 25:04.490]  What do we call?
[25:04.630 --> 25:05.570]  What number do we actually got?
[25:08.710 --> 25:11.090]  Okay, this is our code, and I'm going through the 800.
[25:11.230 --> 25:11.850]  Okay, we'll try that.
[25:17.370 --> 25:18.130]  What's ringing?
[25:18.450 --> 25:19.050]  What's ringing?
[25:20.110 --> 25:27.890]  Okay, someone donated another card to us that supposedly will allow us to call 800 numbers, so we're going to try that.
[25:33.390 --> 25:39.690]  Please try to contain your enthusiasm, because it's difficult to explain the sound of hundreds of people laughing.
[25:47.990 --> 25:49.970]  Please enter your card number.
[25:54.920 --> 25:56.160]  How come I'm not hearing this?
[25:58.660 --> 26:00.740]  Actually, can we turn down the audio this time?
[26:02.600 --> 26:06.300]  See, you're turning the audio up for the things we shouldn't be hearing and turning it down for the things we should.
[26:06.400 --> 26:06.860]  Okay, thank you.
[26:08.680 --> 26:09.380]  Okay, up now.
[26:11.900 --> 26:13.860]  That is an invalid card number.
[26:14.260 --> 26:16.000]  Please enter your card number.
[26:16.220 --> 26:17.040]  Okay, I'm going to try again.
[26:17.100 --> 26:18.160]  Maybe I took too long.
[26:19.980 --> 26:20.340]  No.
[26:22.750 --> 26:23.630]  Okay.
[26:26.010 --> 26:26.890]  Okay.
[26:26.890 --> 26:29.730]  Please enter the telephone number you wish to dial now.
[26:30.550 --> 26:31.150]  Okay.
[26:35.090 --> 26:35.610]  Okay.
[26:35.610 --> 26:40.630]  You have two hours, one minute for this call.
[26:45.280 --> 26:45.790]  Oh.
[26:47.900 --> 26:49.400]  You know what that means, right?
[26:49.920 --> 26:51.080]  That's busy circuits.
[26:51.220 --> 26:54.620]  That means they're getting so many calls that they can't even give us a busy signal.
[26:54.620 --> 26:54.920]  Oh, well.
[26:55.680 --> 26:55.790]  Okay.
[26:56.020 --> 26:57.140]  So much for AT&T.
[26:57.280 --> 26:58.200]  I think...
[26:58.200 --> 26:58.500]  Thanks.
[26:59.020 --> 27:02.620]  That's the same thing.
[27:04.160 --> 27:04.640]  It's the same thing.
[27:04.760 --> 27:04.840]  Yeah.
[27:05.200 --> 27:06.480]  AT&T is unreachable.
[27:06.660 --> 27:09.680]  I have a feeling that an operator read the memo, too, and she seemed awfully suspicious.
[27:17.000 --> 27:22.820]  Not only that, the point of view from a directory assistance operator is we do not have access to any method of dialing a call anymore.
[27:23.500 --> 27:27.860]  The software comes up, it pops up telling us where you're calling from, where you're calling to.
[27:27.860 --> 27:31.760]  All we can do is feed you to Jane, the Jane Barbie recording, giving you the number.
[27:32.840 --> 27:38.500]  Jane can then give you the option of dialing that number, but we don't have that capability as directory assistance operators anymore.
[27:38.680 --> 27:42.920]  And that's what I do in my day job, is I'm a directory assistance operator, so that's the word.
[27:43.040 --> 27:43.420]  Sorry, guys.
[27:44.260 --> 27:44.640]  That's right.
[27:44.660 --> 27:45.540]  You actually do this.
[27:45.790 --> 27:48.600]  You actually play with the consoles and know what happens.
[27:48.600 --> 27:50.900]  What happens if you actually try to dial an 800 number?
[27:51.020 --> 27:53.080]  I mean, punching in the numbers, it just won't work?
[27:53.220 --> 27:55.020]  I don't have a field to enter that number into.
[27:56.040 --> 27:56.400]  Wow.
[27:56.400 --> 27:59.140]  Where I do have a field, I can enter numbers into.
[27:59.760 --> 28:02.290]  It just doesn't let me send calls anymore.
[28:03.050 --> 28:03.460]  Interesting.
[28:04.240 --> 28:07.280]  Okay, so basically, social engineering is lying.
[28:07.850 --> 28:14.550]  It's saying things to people that are not true and trying to get information from them that they're not supposed to give you because they believe you're somebody that you're not.
[28:16.000 --> 28:17.080]  It's really that simple.
[28:17.320 --> 28:18.180]  Anybody can do it.
[28:18.520 --> 28:20.700]  And I'm sure we all have at some point.
[28:20.760 --> 28:25.040]  Maybe members of the audience would like to share some of their experiences a little bit later on as well.
[28:26.310 --> 28:28.280]  I'd like to still try a couple of things.
[28:28.940 --> 28:30.480]  You know, if we can...
[28:30.480 --> 28:32.200]  Well, I'd love to try Verizon, but do we have...
[28:32.200 --> 28:33.700]  They tend to close on Sundays.
[28:33.700 --> 28:34.290]  That's the problem.
[28:35.140 --> 28:37.220]  Why do we schedule these things for Sundays all the time?
[28:38.050 --> 28:39.320]  We should have a talk about that.
[28:42.110 --> 28:42.920]  How about...
[28:42.920 --> 28:46.640]  Okay, the retail industry, as Alex said, is great.
[28:46.640 --> 28:52.920]  You can have all kinds of fun with people in retail, doing all kinds of things, telling you things you're not supposed to know.
[28:54.320 --> 28:56.820]  Does anybody have a favorite retail place?
[28:59.240 --> 29:00.540]  Okay, everyone has one, apparently.
[29:00.680 --> 29:01.660]  Radio Shack would be great.
[29:04.780 --> 29:05.420]  All right.
[29:07.160 --> 29:08.260]  How about Starbucks?
[29:10.480 --> 29:11.160]  All right.
[29:13.220 --> 29:16.400]  I have the page open to Starbucks, so I figure I'll give them a try.
[29:18.160 --> 29:18.660]  All right.
[29:19.140 --> 29:19.520]  Dial tone?
[29:22.540 --> 29:23.500]  Just doing two?
[29:24.200 --> 29:24.680]  Okay.
[29:27.880 --> 29:29.640]  Maybe turn that down a little bit, thank you.
[29:31.660 --> 29:32.280]  Okay, up now.
[29:47.460 --> 29:49.040]  Starbucks 92nd and 3rd, can I help you?
[29:49.480 --> 29:52.540]  Yeah, this is Randy over at Network Headquarters.
[29:53.060 --> 29:54.140]  What store number is this?
[29:55.040 --> 29:56.920]  Excuse me, it's 7407.
[29:57.300 --> 29:58.080]  7407, okay.
[29:58.520 --> 30:00.820]  Did you report a problem with your wireless network?
[30:02.120 --> 30:02.960]  You know what?
[30:03.120 --> 30:04.080]  Hold on one second.
[30:04.340 --> 30:04.580]  Okay.
[30:04.680 --> 30:06.160]  I personally didn't put...
[30:06.160 --> 30:06.980]  Thank you.
[30:26.000 --> 30:27.460]  Hey Randy, what was this phone number?
[30:28.960 --> 30:29.360]  Hello?
[30:29.820 --> 30:29.900]  Yeah.
[30:29.900 --> 30:36.060]  I believe the problem is actually with our modem, but the guy who is looking into it, I can give you him in one second.
[30:36.360 --> 30:37.160]  I'm sorry, can you speak up?
[30:37.180 --> 30:37.980]  I'm having trouble with this phone.
[30:38.320 --> 30:38.720]  Oh, I'm sorry.
[30:39.400 --> 30:41.640]  I said I think it's more of our modem.
[30:42.500 --> 30:45.760]  Okay, tell me what the problem is, because we're on top of this...
[30:45.760 --> 30:54.380]  Personally, last night I was trying to close the credit card batch, and it kept resulting in a communication error.
[30:54.740 --> 30:56.120]  What was the communications error?
[30:56.260 --> 30:56.920]  What was the exact error?
[30:57.060 --> 30:57.220]  Do you know?
[30:57.360 --> 30:59.160]  I didn't exactly specify.
[30:59.320 --> 31:01.720]  I just said communication error, and the batch wouldn't settle.
[31:02.520 --> 31:04.600]  Okay, so basically you have an unsettled batch?
[31:04.800 --> 31:05.200]  That's right.
[31:05.520 --> 31:06.920]  Okay, now what's happening today?
[31:07.040 --> 31:08.260]  Are you able to process credit cards?
[31:09.000 --> 31:14.920]  Credit is going through, Starbucks cards are going through, you know, at the register stations, but...
[31:15.580 --> 31:16.700]  Are they authorizing?
[31:17.220 --> 31:17.660]  Yes.
[31:17.660 --> 31:18.840]  They are authorizing?
[31:19.000 --> 31:19.200]  Yes.
[31:19.360 --> 31:20.780]  Okay, how...
[31:20.780 --> 31:21.940]  Do you have a total on the batch?
[31:22.100 --> 31:23.200]  Is it getting...
[31:24.000 --> 31:26.280]  Is it getting huge, or is this a crisis?
[31:27.040 --> 31:28.120]  Let me check this out for you.
[31:28.120 --> 31:28.380]  Thank you.
[31:29.140 --> 31:34.060]  We're almost at $300 right now for credit cards, but that includes from last night.
[31:35.420 --> 31:35.900]  Okay.
[31:36.020 --> 31:37.260]  Do you know from what time last night?
[31:37.780 --> 31:38.900]  From last time.
[31:38.900 --> 31:40.520]  We close at 11 o'clock.
[31:41.520 --> 31:41.900]  Okay.
[31:42.660 --> 31:44.260]  Now, you're dialing out on...
[31:44.260 --> 31:46.280]  Have you contacted Verizon about this problem?
[31:46.760 --> 31:48.120]  Verizon, I don't believe so.
[31:48.440 --> 31:54.960]  But, like I said, our store manager called about this, so I'm not sure what steps he took.
[31:55.360 --> 32:01.280]  All right, the problem, it's probably a communications protocol error of some sort, but we're trying to pin down.
[32:01.400 --> 32:03.740]  Do you know what part of the country you're dialing to?
[32:03.840 --> 32:06.920]  Is it the 800 number, or is it something up in the Northwest?
[32:08.720 --> 32:11.100]  Do you have the number that the modem actually dials out to?
[32:12.020 --> 32:13.540]  No, I honestly don't.
[32:13.580 --> 32:15.180]  Is there any way I can find that?
[32:15.740 --> 32:17.440]  Are you near the modem yourself right now?
[32:18.220 --> 32:19.040]  Yes, I am.
[32:19.300 --> 32:19.440]  Okay.
[32:20.020 --> 32:22.620]  If you could just read the numbers on the bottom of the modem, that would be helpful.
[32:23.380 --> 32:23.520]  Okay.
[32:24.180 --> 32:24.560]  Hang on.
[32:39.890 --> 32:40.970]  Are you looking...
[32:40.970 --> 32:42.490]  Which numbers are you looking for?
[32:43.190 --> 32:44.810]  Anything resembling a phone number.
[32:45.530 --> 32:45.850]  Okay.
[32:54.340 --> 32:56.300]  Anything written in by hand would be good, too.
[33:12.150 --> 33:12.570]  You know what?
[33:12.670 --> 33:14.410]  I don't have either one.
[33:15.510 --> 33:16.670]  Well, what kind of modem is it?
[33:16.830 --> 33:17.110]  Do you...
[33:17.110 --> 33:17.730]  U.S. Robotics.
[33:20.130 --> 33:20.450]  56K.
[33:21.290 --> 33:22.570]  Oh, it's a 56K modem.
[33:22.670 --> 33:23.830]  Okay, that could be part of the problem.
[33:23.930 --> 33:28.790]  I know we've been having some handshake problems with 56K in our headquarters.
[33:31.630 --> 33:32.230]  Okay.
[33:33.650 --> 33:34.250]  What's...
[33:34.250 --> 33:39.490]  Do you have a listing of when the batch began, the exact time?
[33:39.610 --> 33:39.990]  That would help.
[33:41.910 --> 33:42.510]  Sure.
[33:42.510 --> 33:45.010]  In fact, if you had that first transaction, that would really help.
[33:45.210 --> 33:46.510]  From today or from yesterday?
[33:46.670 --> 33:47.130]  From yesterday.
[33:48.450 --> 33:49.730]  Because that's when the problem began.
[34:05.640 --> 34:06.580]  Hold on one second.
[34:09.910 --> 34:11.970]  I'm going to have to call up the report for it.
[34:15.340 --> 34:17.040]  Can you give me just a minute?
[34:17.480 --> 34:18.340]  I'm sorry, speak up?
[34:18.600 --> 34:19.600]  Could you give me just a minute?
[34:19.780 --> 34:20.020]  Yeah.
[34:20.260 --> 34:20.460]  All right.
[34:38.620 --> 34:38.980]  Yeah.
[34:43.120 --> 34:43.800]  Can I get...
[34:43.800 --> 34:44.000]  Okay.
[34:44.280 --> 34:46.080]  He can't hear right now, I don't believe.
[34:47.180 --> 34:47.720]  Hello, sir?
[34:49.540 --> 34:53.000]  Well, basically, we're just going to see how much he gives us.
[34:57.350 --> 34:58.910]  Yeah, we'll get all the numbers.
[35:00.730 --> 35:01.110]  Sure.
[35:30.550 --> 35:32.950]  See, the thing with social engineering, you have to be patient sometimes.
[35:32.950 --> 35:39.510]  And sometimes it takes time to get information from people and there's long gaps of silence.
[35:44.190 --> 35:44.830]  Okay.
[35:44.950 --> 35:45.170]  Hello.
[35:46.150 --> 35:46.770]  Yeah.
[35:47.330 --> 35:58.210]  The first one from yesterday was an American Express transaction for $3.57 and the time was at 7.09 and 50 seconds.
[35:58.210 --> 35:59.530]  Good morning.
[35:59.710 --> 35:59.810]  Good morning.
[35:59.810 --> 36:01.280]  Was that $3.57?
[36:02.190 --> 36:02.730]  That's right.
[36:03.870 --> 36:04.290]  Okay.
[36:05.910 --> 36:06.850]  American Express...
[36:06.850 --> 36:08.190]  Was that American Express Optima?
[36:08.310 --> 36:09.390]  American Express...
[36:09.390 --> 36:10.650]  Do you have the number there?
[36:11.150 --> 36:14.690]  I actually do not.
[36:14.850 --> 36:28.190]  Let me get the...
[36:29.860 --> 36:31.960]  If you have the name on the card too, that might help.
[36:54.150 --> 37:01.220]  If you have the name on the card too, that might help.
[37:01.220 --> 37:01.560]  What's the expiration date?
[37:01.940 --> 37:02.640]  What's the expiration date?
[37:02.780 --> 37:04.940]  It's 1-0-0-3.
[37:05.190 --> 37:06.480]  1-0-0-3.
[37:07.320 --> 37:07.650]  Okay.
[37:07.720 --> 37:08.230]  And what's your name again?
[37:08.420 --> 37:09.040]  My name's Sean.
[37:09.260 --> 37:09.600]  Sean.
[37:09.900 --> 37:12.800]  Sean, we'll give you a call back and tell you how this worked out.
[37:12.880 --> 37:14.400]  We're going to try and work things out on this end.
[37:14.400 --> 37:17.760]  But if anyone else calls about this, just refer them...
[37:17.760 --> 37:22.070]  Just tell them that we'll get back to you in about an hour or so.
[37:22.320 --> 37:22.650]  Okay.
[37:23.000 --> 37:23.400]  Thank you.
[37:23.610 --> 37:23.880]  All right.
[37:23.940 --> 37:24.480]  Have a good day.
[37:33.360 --> 37:34.100]  Good save.
[37:36.580 --> 37:38.380]  These people are so easily educated.
[37:46.980 --> 37:49.040]  That's the first one we picked too.
[37:49.140 --> 37:49.840]  The first Starbucks.
[37:52.220 --> 37:52.700]  Boy.
[37:53.200 --> 38:00.360]  Now imagine, you know, there's retail outlets everywhere and people like that on the phone everywhere that will just give out information to anybody asking for it.
[38:00.480 --> 38:02.580]  I mean, I was making things up on the fly.
[38:02.760 --> 38:03.300]  Network headquarters.
[38:03.380 --> 38:04.220]  I didn't even get the name right.
[38:04.460 --> 38:05.680]  I don't know where I am.
[38:06.260 --> 38:12.760]  Imagine if I had sat down, figured it all out, come up with a name, come up with a call back phone number, come up with a place, you know, that actually exists.
[38:14.060 --> 38:16.180]  You know, I could have gotten all kinds of information.
[38:16.180 --> 38:18.000]  You can get people to turn things off.
[38:18.200 --> 38:19.950]  You know, it's possible...
[38:20.660 --> 38:24.240]  You know, if you're really good at this kind of thing, you can have them closed down for the day, you know?
[38:26.280 --> 38:27.760]  We have a data problem.
[38:33.460 --> 38:35.980]  But, you know, if you're into social engineering...
[38:39.160 --> 38:40.300]  Low-frequency noises.
[38:42.060 --> 38:49.080]  Basically, my philosophy is that you do it for fun or you do it for information, but you don't do it to, you know, to cause unnecessary mayhem.
[38:51.440 --> 38:57.240]  For instance, years ago, I used a Roam phone system on a college campus.
[38:57.520 --> 38:59.540]  And they had a great feature known as Star 8.
[38:59.620 --> 39:01.760]  I don't know if anybody has ever used a ROHM PBX.
[39:02.500 --> 39:04.380]  Star 8 opens a speaker on any phone.
[39:04.500 --> 39:05.240]  It's really kind of cool.
[39:06.780 --> 39:12.220]  You basically dial Star 8, then the extension, and the phone goes boop, and you're on their speaker.
[39:12.220 --> 39:22.140]  Well, imagine, you know, computer sync labs were basically sync sites where people are all working on, you know, their programs or reports or whatever.
[39:22.440 --> 39:27.120]  And there's, you know, a guy in the front sitting there making sure that people go in, have ID and that kind of thing.
[39:27.200 --> 39:27.940]  He's got a phone there.
[39:28.260 --> 39:32.260]  Well, imagine that phone going boop, attention, their computer center will be closing in 10 minutes.
[39:32.500 --> 39:34.600]  And there's nothing he can do about it.
[39:34.660 --> 39:37.000]  And especially if you have somebody there telling you what he looks like.
[39:37.000 --> 39:38.720]  He said, don't pay attention to the guy in the red shirt.
[39:38.720 --> 39:39.780]  He doesn't even work here.
[39:43.940 --> 39:48.300]  You can have all kinds of fun just by, you know, figuring out how systems work and things like that.
[39:49.000 --> 39:49.560]  I don't know.
[39:49.600 --> 39:50.340]  You guys might tell stories?
[39:50.480 --> 39:52.100]  I'll try to find something else here, maybe.
[39:52.580 --> 39:53.340]  Do I have a mic?
[39:55.520 --> 39:56.060]  I guess so.
[39:56.660 --> 40:04.360]  I remember back at the first HOPE, back in 94, 8 years ago, did anybody ever play with Encore Telephone?
[40:05.740 --> 40:12.400]  Yeah, they were, I think it was a prerequisite to have an IQ under 60 in order to get a job at Encore.
[40:12.600 --> 40:15.520]  I mean, these were some of the dumbest people you'll ever meet in your entire life.
[40:15.860 --> 40:17.560]  No offense if anybody's from Encore.
[40:17.960 --> 40:28.080]  But all you needed to do to verify that you were an Encore employee was to have their password, which changed every season just about.
[40:28.080 --> 40:31.340]  And I remember, I believe that the password during the H2...
[40:31.340 --> 40:34.500]  HOPE, the first HOPE, which was during the summer, was summer.
[40:34.900 --> 40:37.200]  And then it changed to autumn the next season.
[40:38.700 --> 40:40.740]  At one point it changed to couch, I remember.
[40:40.840 --> 40:46.880]  But the best way to get the password from them was to just pretend that you were an Encore operator and that somehow your lines got crossed.
[40:47.020 --> 40:48.660]  So they say, hello Encore, can I help you?
[40:48.700 --> 40:50.060]  And you say, hello Encore, can I help you?
[40:50.940 --> 40:54.420]  And then you'd say to them, uh-oh, I think we've got a crosstalk on the line.
[40:54.540 --> 40:55.720]  We're going to have to trouble code this.
[40:56.340 --> 40:58.500]  And they said, what trouble code should I make this?
[40:58.600 --> 40:59.360]  And they said, oh, this and that.
[40:59.480 --> 41:00.120]  And they said, oh, I'm sorry.
[41:00.180 --> 41:02.620]  I need the Encore password to verify you're really from Encore.
[41:06.000 --> 41:06.320]  Thanks.
[41:12.340 --> 41:14.820]  And then you'd have the password, and it was ridiculous.
[41:15.140 --> 41:22.020]  So we used to call up Encore and say, very similar to what Emmanuel did, and say, you know, we're from Network Operations Center.
[41:22.560 --> 41:23.300]  Oh, I'm sorry.
[41:23.360 --> 41:24.320]  The password is summer.
[41:24.520 --> 41:25.840]  Let me verify myself very quickly.
[41:26.180 --> 41:29.380]  And we used to figure out what every key on their keyboard did.
[41:29.440 --> 41:31.400]  So we knew just about all their commands.
[41:31.500 --> 41:36.060]  What we'd like to do best was say, all right, we've heard, we just made crap up.
[41:36.220 --> 41:39.700]  Like, your hard drive isn't cross-linked to the fiber optic network properly.
[41:41.420 --> 41:44.020]  And we think you're getting a lot of ID10T errors.
[41:44.240 --> 41:46.440]  You know, if you spell that out, it spells idiot.
[41:48.680 --> 41:51.280]  So we used to tell them, we need you to do something as soon as possible.
[41:51.380 --> 41:54.300]  Can you hold the control key, the alt key, and then hit the delete key?
[41:56.140 --> 41:57.800]  And say, now what does your screen say?
[41:57.960 --> 41:59.900]  Oh, it's counting some memory or something.
[42:00.560 --> 42:01.660]  All right, what does it go up to?
[42:02.620 --> 42:03.660]  Oh, 4,000.
[42:03.800 --> 42:04.520]  Oh, my God.
[42:04.700 --> 42:04.860]  All right.
[42:06.800 --> 42:07.760]  You got a big problem.
[42:07.760 --> 42:14.100]  I need to disconnect your keyboard, wrap it up quickly, and start waving it until your supervisor comes over.
[42:21.850 --> 42:23.200]  You could do any number of things.
[42:23.360 --> 42:28.120]  We had them disconnect the headsets, go over and walk over and tell the supervisor they had an ID10T error.
[42:30.200 --> 42:31.400]  They were a lot of fun.
[42:31.400 --> 42:35.960]  I mean, another great thing about them was, you'd call them up, you'd get a dial tone.
[42:36.240 --> 42:37.320]  They didn't have A and I.
[42:37.580 --> 42:41.650]  So you could put in the telephone number that you wanted to be calling from.
[42:41.940 --> 42:43.040]  And they were ridiculous.
[42:43.200 --> 42:45.650]  So we used to put in a number from Anchorage, Alaska every time.
[42:46.080 --> 42:47.620]  And a third party billed people.
[42:47.820 --> 42:48.810]  It was a lot of fun.
[42:49.520 --> 42:52.040]  It's too bad, you know, I think they're hiring smarter people now.
[42:58.680 --> 42:59.820]  Anyone else have any questions?
[42:59.930 --> 43:02.560]  Why don't we take questions or anything like that.
[43:03.270 --> 43:05.690]  More chance for more feedback, literally.
[43:07.060 --> 43:08.610]  I guess there's no microphone there, or is there?
[43:08.900 --> 43:09.310]  Okay, great.
[43:09.930 --> 43:20.120]  Have you been approached by either law agencies or the government to, I don't know, help, you know, do demonstrations and stuff to help educate, you know, some of their people about this thing?
[43:20.120 --> 43:21.930]  Well, I mean, what's there to educate?
[43:22.080 --> 43:25.350]  It's just basically don't tell people things if you don't know who they are, you know?
[43:26.520 --> 43:27.810]  How hard is that to explain to them?
[43:27.810 --> 43:29.080]  For 50 bucks, they can attend this seminar.
[43:29.690 --> 43:29.850]  Yeah.
[43:31.360 --> 43:43.880]  But I mean, you know, with all the garbage going on right now with the 9-11 and stuff and Homeland Security coming into place, I'm sure there are a lot of people that could probably, if they're just even vaguely familiar with how things go internally in the federal government,
[43:44.150 --> 43:49.200]  to, you know, pull techniques to get information that they're not supposed to be getting a hold of that actually hasn't...
[43:49.200 --> 43:57.500]  I mean, as long as there are human beings involved, there will always be trust issues where you can fool somebody into thinking that, you know, you're somebody you're not over the telephone.
[43:58.000 --> 43:59.480]  Obviously, it's a lot harder to do this in person.
[43:59.580 --> 44:01.060]  There are people who can do it in person as well.
[44:01.770 --> 44:05.280]  But over the phone, you know, it's relatively easy.
[44:05.560 --> 44:09.900]  So, I guess the rule of thumb is don't give out sensitive information over the phone regardless.
[44:10.560 --> 44:14.480]  You know, that's... and use encryption when you do things over the internet.
[44:15.860 --> 44:16.460]  Anyone else?
[44:20.240 --> 44:21.960]  We're starting to run low on time, I think.
[44:22.060 --> 44:25.300]  Yeah, we are running low on time and it takes energy.
[44:27.540 --> 44:29.840]  All right, give me a second to look something up.
[44:29.840 --> 44:31.120]  Real quick.
[44:31.610 --> 44:32.960]  Legally, how far...
[44:46.680 --> 44:49.760]  All right, but there's no guarantees these are going to work, you know.
[44:49.920 --> 44:50.780]  I could look like an idiot.
[44:51.100 --> 44:52.620]  Legally, how far can you go?
[44:53.200 --> 44:57.140]  Like, who can you represent yourself as and still stay legally?
[44:57.140 --> 44:59.640]  Like, without, you know, you can't represent yourself as a...
[44:59.640 --> 45:00.680]  Not our problem.
[45:02.860 --> 45:03.300]  Um...
[45:03.300 --> 45:05.040]  All right, I'm just going to try something at random.
[45:06.420 --> 45:06.860]  Um...
[45:06.860 --> 45:09.640]  This may not even work, so don't count that much.
[45:10.440 --> 45:10.920]  Dalton, please?
[45:13.560 --> 45:14.400]  There's no Dalton.
[45:16.020 --> 45:16.460]  Oh.
[45:17.480 --> 45:18.260]  There we go.
[45:28.880 --> 45:31.040]  Thank you for calling the Russian Tea Room.
[45:31.040 --> 45:37.340]  You may now make a reservation online by visiting www.RussianTeaRoom.com.
[45:38.140 --> 45:46.340]  If you know your party's three-digit extension, you may enter it at any time, or press pound for the Russian Tea Room Executive Office directory.
[45:47.060 --> 45:49.040]  For reservations, press one.
[45:49.420 --> 45:51.620]  For private dining, press two.
[45:52.060 --> 45:55.460]  For the Russian Tea Room Restaurant directory, press three.
[45:58.430 --> 45:59.890]  One moment, please.
[46:10.080 --> 46:11.760]  Thank you for calling the Russian Tea Room.
[46:11.880 --> 46:12.460]  This is Asha.
[46:12.540 --> 46:13.310]  How can I assist you?
[46:13.500 --> 46:13.960]  Uh, yeah.
[46:14.040 --> 46:14.140]  Hi.
[46:14.160 --> 46:16.300]  My wife made reservations tonight at 8.30.
[46:17.120 --> 46:19.000]  Um, and I need to change those.
[46:19.350 --> 46:20.000]  To what time?
[46:20.660 --> 46:21.770]  Uh, to, um...
[46:22.420 --> 46:23.230]  What time do you close?
[46:23.900 --> 46:25.080]  The last thing tonight?
[46:25.400 --> 46:26.700]  Um, what's your... what's the last name?
[46:26.920 --> 46:28.140]  Well, that's another problem.
[46:28.270 --> 46:30.640]  My wife, um, I'm not sure what name she used.
[46:31.000 --> 46:31.800]  Was it Hanson?
[46:32.020 --> 46:32.350]  I'm sorry?
[46:32.760 --> 46:33.160]  Hanson?
[46:33.400 --> 46:34.380]  Yeah, yeah, okay.
[46:34.620 --> 46:35.980]  What first name did she give?
[46:36.140 --> 46:36.420]  Peter.
[46:36.420 --> 46:37.440]  Peter Hanson, yeah.
[46:38.020 --> 46:39.060]  You see, that's not my name.
[46:39.160 --> 46:40.420]  That was one of my pen names.
[46:40.520 --> 46:40.940]  I'm a writer.
[46:41.220 --> 46:41.420]  Oh.
[46:41.620 --> 46:42.580]  In fact, I have a book coming out.
[46:42.880 --> 46:43.680]  Well, never mind that.
[46:44.300 --> 46:46.420]  Um, it's, um, uh, 8.30.
[46:47.040 --> 46:48.600]  Um, this is what she has it for.
[46:48.680 --> 46:49.540]  And what time is the last meeting?
[46:49.800 --> 46:50.730]  Um, hold on, okay?
[46:50.850 --> 46:50.980]  One minute.
[46:50.980 --> 46:51.270]  Thank you.
[47:14.500 --> 47:15.340]  Should I do this?
[47:15.440 --> 47:17.480]  I mean, the guy's gonna be...
[47:17.480 --> 47:18.700]  You should always call back.
[47:18.700 --> 47:18.780]  Yeah, we'll call back.
[47:18.960 --> 47:20.580]  Yeah, we'll call back later and fix it.
[47:20.740 --> 47:21.020]  Thank you so much, sir.
[47:21.760 --> 47:23.460]  The last meeting is at 9 o'clock.
[47:24.180 --> 47:25.040]  I'm sorry, say that again?
[47:25.200 --> 47:27.060]  The last meeting is at 9 o'clock.
[47:27.260 --> 47:27.800]  9 o'clock.
[47:27.920 --> 47:30.340]  Okay, um, you might as well move it to there.
[47:31.340 --> 47:33.200]  Um, did she leave a contact number on there?
[47:33.640 --> 47:35.200]  Um, 2-0-1.
[47:35.380 --> 47:35.640]  Uh-huh.
[47:35.880 --> 47:37.680]  3-1-4-8-2-8-3.
[47:38.080 --> 47:38.400]  Okay.
[47:38.920 --> 47:39.940]  Uh, wait, one more time, what was that?
[47:40.240 --> 47:40.740]  I'm sorry?
[47:40.960 --> 47:41.520]  2-0-1, what?
[47:41.900 --> 47:42.660]  3-1-4.
[47:42.900 --> 47:43.120]  Uh-huh.
[47:43.240 --> 47:43.920]  8-2-8-3.
[47:44.100 --> 47:44.760]  8-2-8-3?
[47:44.920 --> 47:45.080]  Yes.
[47:45.520 --> 47:45.840]  Okay.
[47:46.360 --> 47:46.740]  All right.
[47:46.840 --> 47:47.820]  I'll have a talk with her.
[47:47.900 --> 47:49.240]  But that would be fine if you could change that.
[47:49.280 --> 47:49.560]  Thank you.
[47:49.700 --> 47:49.940]  Okay.
[47:50.140 --> 47:50.420]  Bye-bye.
[48:01.250 --> 48:03.070]  We have to make this complete, all right?
[48:03.130 --> 48:03.710]  We have to...
[48:06.430 --> 48:06.910]  All right.
[48:08.970 --> 48:11.990]  We need the calling card that allows us to call local number.
[48:12.110 --> 48:12.670]  Okay, we have a dial tone?
[48:13.630 --> 48:13.950]  Okay.
[48:14.850 --> 48:17.370]  Thanks, everybody, for donating these cards, by the way, and dialing.
[48:17.650 --> 48:17.930]  Hey, man.
[48:18.390 --> 48:19.230]  Don't be there yet.
[48:21.090 --> 48:22.190]  No, that would be unfair.
[48:26.450 --> 48:27.730]  It was 9 o'clock, right?
[48:28.010 --> 48:28.110]  Yeah.
[48:28.190 --> 48:28.390]  Okay.
[48:31.250 --> 48:31.890]  Did she get it?
[48:34.130 --> 48:35.390]  It's 3-1...
[48:38.270 --> 48:39.090]  We're sorry.
[48:39.330 --> 48:40.870]  All circuits are busy now.
[48:41.410 --> 48:42.170]  We need another card.
[48:42.470 --> 48:42.470]  Okay.
[48:42.850 --> 48:43.450]  We need another card.
[48:43.550 --> 48:43.970]  Another card.
[48:44.630 --> 48:46.790]  It's got to be a local number, though, because we don't...
[48:47.230 --> 48:47.450]  Sure.
[48:47.450 --> 48:48.230]  We can't call 8-1-8.
[48:49.530 --> 48:49.970]  Okay.
[48:52.490 --> 48:53.250]  We're sorry.
[48:53.570 --> 48:54.750]  All circuits are...
[48:55.350 --> 48:55.790]  Okay.
[48:55.890 --> 48:56.130]  Dial tone?
[49:04.180 --> 49:06.160]  Please enter your PIN number now.
[49:06.520 --> 49:07.180]  All right, all right, all right.
[49:13.180 --> 49:17.600]  You have three dollars, six cents.
[49:17.980 --> 49:20.740]  Please enter your destination number now.
[49:26.050 --> 49:27.650]  Please be quiet on this.
[49:27.810 --> 49:31.130]  You have one hour, forty, five minutes.
[49:33.030 --> 49:37.050]  Your call has been forwarded to an automatic voice message system.
[49:38.810 --> 49:39.850]  Milford Hanson.
[49:40.170 --> 49:41.010]  Milford Hanson.
[49:41.150 --> 49:42.170]  Is not available.
[49:42.550 --> 49:43.370]  At the tone.
[49:43.670 --> 49:44.890]  Please record your message.
[49:48.070 --> 49:49.670]  Yeah, ma'am, that's just for Peter Hanson.
[49:49.730 --> 49:50.870]  This is Russian Tea Room calling.
[49:51.130 --> 49:56.890]  Because of a health inspector that we weren't expecting, we have to move your reservation to 9 o'clock.
[49:57.370 --> 49:58.710]  Sorry for the inconvenience.
[49:58.890 --> 50:00.450]  Please call us if you have any questions.
[50:00.950 --> 50:01.230]  Thank you.
[50:01.430 --> 50:01.570]  Bye.
[50:14.830 --> 50:17.070]  Well, that's one restaurant I can never go to again.
[50:19.410 --> 50:25.310]  But we will call them and put the reservation back the way it was a little later on, so that the Hansons aren't disturbed.
[50:27.110 --> 50:28.050]  Any other questions?
[50:28.190 --> 50:29.210]  Because we're pretty much out of time.
[50:29.970 --> 50:31.790]  That's what social engineering is all about.
[50:31.950 --> 50:32.670]  Usually it's fun.
[50:32.930 --> 50:34.090]  Sometimes it's very informative.
[50:34.090 --> 50:44.090]  If we knew people there that we had to find information about, it's useful to have these tricks at your disposal, where you know you can get people to trust you and tell you things.
[50:44.230 --> 50:49.650]  Fortunately, we had no idea who we were talking to today, so it was just a demonstration of, you know, random data.
[50:50.050 --> 50:57.870]  But if you're trying to find somebody, trying to track somebody down, work out something, it can be very useful to get people to trust you.
[50:58.070 --> 50:59.430]  And there are ways of doing it.
[50:59.510 --> 51:00.410]  There are ways of not doing it.
[51:01.190 --> 51:02.530]  Sounding flustered is always good.
[51:02.630 --> 51:04.010]  I sounded a bit flustered that time.
[51:04.110 --> 51:06.890]  I was the crazy husband and didn't know what his wife was doing.
[51:07.670 --> 51:18.770]  Having a foreign accent, boy, that really gets you all kinds of things, because people just don't want to continue talking to somebody that doesn't understand what you're saying and keeps asking you to repeat yourself and makes up bizarre words and things like that.
[51:20.010 --> 51:24.790]  There's all kinds of different tactics, but the beauty of the telephone is if it doesn't work, you just hang up and try again.
[51:25.030 --> 51:27.350]  You know, and you get a whole new person and you can start from scratch.
[51:27.550 --> 51:37.710]  And it's also kind of a stepping stone because you get some information the first time which you can use the second time and just keep building until you know more about what you're trying to find out than the person you're talking to.
[51:37.890 --> 51:40.650]  And you can have them even change information like we just did here.
[51:42.330 --> 51:46.470]  So, does anybody else have any questions or comments from the podium?
[51:47.810 --> 51:48.190]  No?
[51:48.410 --> 51:48.510]  All right.
[51:48.610 --> 51:49.290]  Well, thanks, everybody, for coming.
[51:53.650 --> 51:56.330]  Please collect your calling cards, whoever gave them to us.
[51:58.530 --> 51:59.290]  These are ours.
[52:01.310 --> 52:03.850]  We really do have to call them and change that back.
[53:26.760 --> 53:28.440]  What does your plan look like?
[53:28.560 --> 53:31.660]  I need to eat a slice of pizza if you want to go to Sbarro's.
[53:31.880 --> 53:34.480]  And then I'm getting interviewed by Eli at 530.
[53:34.720 --> 53:35.680]  My light is on now?
[53:35.700 --> 53:36.320]  Do you want to be there for my interview?
[53:36.520 --> 53:36.880]  Do you want to be there for my interview?