Tuesday, December 19, 2006

Pretexting

"Pretexting" is variously defined as impersonation of someone in order to obtain proivate information, or in a wider definition, creating a fictional scenario in order to persuade someone to do something they otherwise would not do. Earlier this year, the Chair of Hewlett Packard's board left after accusations that private detectives had impersonated members of the HP board in order to obtain their phone records (this was in pursuit of a leaker on the board). There was also a Congressional investigation at which HP management testified (and refused to testify). Because many authorities are quite slack in the way they implement security, often asking only for date of birth, mother's maiden name etc., pretexting is likely to continue. In the US California legislators introduced a bill aimed at stopping the practice, but Wired News claims it was killed by the Motion Picture industry, who claimed they used it as a method of tracking file-sharers.

No comments: