I Made Stupid Decisions As

Companies Spend Millions Of Dollars On Firewalls And Secure Access Devices, And It's Money Wasted Because None Of These Measures Address The Weakest Link In The Security Chain: The People Who Use, Administer And Operate Computer Systems

I'm Still A Hacker. I Get Paid For It Now. I Never Received Any Monetary Gain From The Hacking I Did Before. The Main Difference In What I Do Now Compared To What I Did Then Is That I Now Do It With Authorization.

I Can Go Into Linkedin And Search For Network Engineers And Come Up With A List Of Great Spear-phishing Targets Because They Usually Have Administrator Rights Over The Network. Then I Go Onto Twitter Or Facebook And Trick Them Into Doing Something, And I Have Privileged Access.

The Perfect Pin Is Not Four Digits And Not Associated With Your Life, Like An Old Telephone Number. It's Something Easy For You To Remember And Hard For Other People To Guess.

Social Engineering Is Using Deception, Manipulation And Influence To Convince A Human Who Has Access To A Computer System To Do Something, Like Click On An Attachment In An E-mail.