<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The Social Engineer</title>
	<atom:link href="http://thesocialengineer.co.uk/feed/" rel="self" type="application/rss+xml" />
	<link>http://thesocialengineer.co.uk</link>
	<description>Social Engineering, the human element</description>
	<lastBuildDate>Wed, 09 Nov 2011 09:46:02 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>How safe is your credit card number with merchants?</title>
		<link>http://thesocialengineer.co.uk/how-safe-is-your-credit-card-number-with-merchants/</link>
		<comments>http://thesocialengineer.co.uk/how-safe-is-your-credit-card-number-with-merchants/#comments</comments>
		<pubDate>Wed, 09 Nov 2011 09:46:02 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[Improving Security]]></category>
		<category><![CDATA[The Dangers]]></category>
		<category><![CDATA[PCI compliance]]></category>
		<category><![CDATA[personal details]]></category>
		<category><![CDATA[ssl certificates]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=112</guid>
		<description><![CDATA[In the UK at least, there are rules outlining how merchants deal with credit cards and other secure information. This set of rules is maintained by the PCI Security Standards Council. The main credit card issuers have all agreed to implement these standards when issuing their compliance requirements to merchants. This means that merchants have [...]]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/how-safe-is-your-credit-card-number-with-merchants/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>GlobalSign Comodo Compromise</title>
		<link>http://thesocialengineer.co.uk/globalsign-comodo-compromise/</link>
		<comments>http://thesocialengineer.co.uk/globalsign-comodo-compromise/#comments</comments>
		<pubDate>Fri, 25 Mar 2011 09:29:19 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[The Dangers]]></category>
		<category><![CDATA[extended validation]]></category>
		<category><![CDATA[ssl certificates]]></category>
		<category><![CDATA[ssl padlock]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=108</guid>
		<description><![CDATA[Looks like a high profile SSL certificate compromise from well known provider Comodo. Dear Customer, As a valued GlobalSign Partner we would like to make you aware of our official company statement on the recent Comodo compromise. ########## On March 23 2011, the Certification Authority Comodo announced it had mis-issued 9 SSL Certificates to high [...]]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/globalsign-comodo-compromise/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Would you send money to help a friend?</title>
		<link>http://thesocialengineer.co.uk/would-you-send-money-to-help-a-friend/</link>
		<comments>http://thesocialengineer.co.uk/would-you-send-money-to-help-a-friend/#comments</comments>
		<pubDate>Wed, 16 Mar 2011 11:35:41 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[Improving Security]]></category>
		<category><![CDATA[The Dangers]]></category>
		<category><![CDATA[email spoofing]]></category>
		<category><![CDATA[personal details]]></category>
		<category><![CDATA[social engineering]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=106</guid>
		<description><![CDATA[I&#8217;ve read a several articles about this in the past few weeks. Someone hacks an email account and uses the account&#8217;s own contact list to ask &#8216;friends&#8217; and contacts for money citing some personal tragedy or immediate need. Often these people interact with the contacts using the terminology, phrases, sign off names of their victim [...]]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/would-you-send-money-to-help-a-friend/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Your Valuable Information</title>
		<link>http://thesocialengineer.co.uk/your-valuable-information/</link>
		<comments>http://thesocialengineer.co.uk/your-valuable-information/#comments</comments>
		<pubDate>Thu, 10 Feb 2011 09:49:28 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[The Dangers]]></category>
		<category><![CDATA[Personal Information]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=102</guid>
		<description><![CDATA[You may know that I operate a webhosting company. I find it amazing some of the information that people give out without even thinking. Take for example a simple question the other day that required us to transfer a domain name from another domain registrar. The client had been in contact with the third party [...]]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/your-valuable-information/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Google SSL</title>
		<link>http://thesocialengineer.co.uk/google-ssl/</link>
		<comments>http://thesocialengineer.co.uk/google-ssl/#comments</comments>
		<pubDate>Mon, 24 May 2010 08:06:10 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[Improving Security]]></category>
		<category><![CDATA[Google SSL]]></category>
		<category><![CDATA[ssl certificates]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=98</guid>
		<description><![CDATA[<a href="https://www.google.com">Google</a> has made SSL available for the .com version of its search engine. It has not been rolled out to the specific country code Google versions as of yet but surely it cannot be far off.]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/google-ssl/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>&#8216;Sucker&#8217; List discovered by Financial Services Authority</title>
		<link>http://thesocialengineer.co.uk/sucker-list-discovered-by-financial-services-authority/</link>
		<comments>http://thesocialengineer.co.uk/sucker-list-discovered-by-financial-services-authority/#comments</comments>
		<pubDate>Wed, 19 May 2010 09:29:27 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[The Dangers]]></category>
		<category><![CDATA[boiler rooom]]></category>
		<category><![CDATA[FSA]]></category>
		<category><![CDATA[personal details]]></category>
		<category><![CDATA[phone fraud]]></category>
		<category><![CDATA[pump and dump]]></category>
		<category><![CDATA[social engineering]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=94</guid>
		<description><![CDATA[An <a href="http://www.fsa.gov.uk/pages/Library/Communication/PR/2010/082.shtml">article</a> on the FSA's site shows that the scamming industry is still alive and well. 38,000 UK names have been discovered on a list used by fraudsters dealing in worthless stocks and shares.]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/sucker-list-discovered-by-financial-services-authority/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>WEP &amp; WPA wireless in business</title>
		<link>http://thesocialengineer.co.uk/wep-wpa-wireless-in-business/</link>
		<comments>http://thesocialengineer.co.uk/wep-wpa-wireless-in-business/#comments</comments>
		<pubDate>Fri, 14 May 2010 08:38:26 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[The Dangers]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[wep cracking]]></category>
		<category><![CDATA[wireless encryption]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=86</guid>
		<description><![CDATA[It's quite trivial these days to crack a WEP password. A post in a forum I saw a couple of weeks back had a 12 second record! A fundamental flaw in the way WEP recycles its encryption key over and over means that if you collect enough packets, the key can be easily decrypted.]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/wep-wpa-wireless-in-business/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>SPF records. The real McCoy</title>
		<link>http://thesocialengineer.co.uk/spf-records-the-real-mccoy/</link>
		<comments>http://thesocialengineer.co.uk/spf-records-the-real-mccoy/#comments</comments>
		<pubDate>Tue, 11 May 2010 07:30:57 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[Improving Security]]></category>
		<category><![CDATA[The Dangers]]></category>
		<category><![CDATA[email spoofing]]></category>
		<category><![CDATA[SPF]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=83</guid>
		<description><![CDATA[If you've never heard of SPF (Sender Policy Framework), don't worry, you're probably not an email administrator. SPF was designed as an addition to the email system to prevent sender spoofing. In other words, allowing someone else to send an email pretending they are you.]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/spf-records-the-real-mccoy/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>SSL certificate ssladmin social exploit weakness</title>
		<link>http://thesocialengineer.co.uk/ssl-certificate-ssladmin-social-exploit-weakness/</link>
		<comments>http://thesocialengineer.co.uk/ssl-certificate-ssladmin-social-exploit-weakness/#comments</comments>
		<pubDate>Wed, 05 May 2010 09:19:11 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[The Dangers]]></category>
		<category><![CDATA[social engineering]]></category>
		<category><![CDATA[ssl certificates]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=79</guid>
		<description><![CDATA[ssladmin@ domain name email addresses banned from SSL approval list following an incident where a security expert was allowed to register and subsequently order an SSL certificate for several large webmail providers.]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/ssl-certificate-ssladmin-social-exploit-weakness/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Password reset vulnerabilities</title>
		<link>http://thesocialengineer.co.uk/password-reset-vulnerabilities/</link>
		<comments>http://thesocialengineer.co.uk/password-reset-vulnerabilities/#comments</comments>
		<pubDate>Mon, 03 May 2010 14:33:56 +0000</pubDate>
		<dc:creator>Alan</dc:creator>
				<category><![CDATA[Improving Security]]></category>
		<category><![CDATA[The Dangers]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[personal details]]></category>
		<category><![CDATA[visual password]]></category>

		<guid isPermaLink="false">http://thesocialengineer.co.uk/?p=72</guid>
		<description><![CDATA[Traditional password reset questions such as "Mother's maiden name" or "favourite colour" are too easily guessable by robots from publicly available lists and search engines. Companies use this system to save support costs but we need a new, more robust method to authenticate who you are.]]></description>
		<wfw:commentRss>http://thesocialengineer.co.uk/password-reset-vulnerabilities/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

