A couple of weeks ago I went on a social engineering job with a colleague. It was pretty easy, but part of this was because my colleague had persuaded the department manager to sent an e-mail throughout the department which was basically a clearance for everything we where going to do.
So last week I went again, and had expected it to be much harder, but it was nothing like that. Access to the building was secured by RFID readers but tailgating was easy, the employee just kept the door open for us! We stayed in the building for an hour, and visited almost all rooms. Just a couple of people asked us who we where, and what our business was but they where easily fooled by some stupid explanation, which if you think about it doesn’t fit the situation.
Last night I was think about this, and came to the conclusion that out of security aspect, most people are way to friendly and trustful.
But from a human aspect it is kind of nice to have a chat with someone, even if you don’t know him/her.