From: ep (captgoodnight@hotmail.com)
Date: Fri Jun 22 2007 - 19:55:34 EDT
Shoot a email asking for the call.
Receive call, put on hold.
Cause a conflict on the callers end somehow, some way.
Listen...
Maybe offer to fix...
Hehe,
--ep
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of ebk_lists@hotmail.com
Sent: Friday, June 22, 2007 10:11 AM
To: pen-test@securityfocus.com
Subject: Re: listening to people/offices when on-hold on the phone
This has sorta happened to me. I was on "hold" with our higher SOC for a
terribly long time, and I started complaining. I didn't realize that they
could hear me/were still listening. But I didn't even have the luxury of
Beethoven. :(
I agree it's an interesting concept, but I don't know how much value you
would actually gain by doing it. You would need some sort of bait to have
your mark call you and/or stay on the line long enough for you to collect
any data that you might be able to get.
Another potential is using this idea:
http://www.theinternetpatrol.com/keyboard-sound-spying-gives-away-whats-bein
g-typed
Get them on the phone, and get them to log in to their account, do something
else that requires typing their password. Perhaps you can record the
keystrokes and determine what it is?
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic See HOW Now with our 20/20
program!
http://www.cenzic.com/c/2020
------------------------------------------------------------------------
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!
http://www.cenzic.com/c/2020
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:53 EDT