10.4: Social Engineering in Hollywood
- Page ID
- 91393
\( \newcommand{\vecs}[1]{\overset { \scriptstyle \rightharpoonup} {\mathbf{#1}} } \)
\( \newcommand{\vecd}[1]{\overset{-\!-\!\rightharpoonup}{\vphantom{a}\smash {#1}}} \)
\( \newcommand{\id}{\mathrm{id}}\) \( \newcommand{\Span}{\mathrm{span}}\)
( \newcommand{\kernel}{\mathrm{null}\,}\) \( \newcommand{\range}{\mathrm{range}\,}\)
\( \newcommand{\RealPart}{\mathrm{Re}}\) \( \newcommand{\ImaginaryPart}{\mathrm{Im}}\)
\( \newcommand{\Argument}{\mathrm{Arg}}\) \( \newcommand{\norm}[1]{\| #1 \|}\)
\( \newcommand{\inner}[2]{\langle #1, #2 \rangle}\)
\( \newcommand{\Span}{\mathrm{span}}\)
\( \newcommand{\id}{\mathrm{id}}\)
\( \newcommand{\Span}{\mathrm{span}}\)
\( \newcommand{\kernel}{\mathrm{null}\,}\)
\( \newcommand{\range}{\mathrm{range}\,}\)
\( \newcommand{\RealPart}{\mathrm{Re}}\)
\( \newcommand{\ImaginaryPart}{\mathrm{Im}}\)
\( \newcommand{\Argument}{\mathrm{Arg}}\)
\( \newcommand{\norm}[1]{\| #1 \|}\)
\( \newcommand{\inner}[2]{\langle #1, #2 \rangle}\)
\( \newcommand{\Span}{\mathrm{span}}\) \( \newcommand{\AA}{\unicode[.8,0]{x212B}}\)
\( \newcommand{\vectorA}[1]{\vec{#1}} % arrow\)
\( \newcommand{\vectorAt}[1]{\vec{\text{#1}}} % arrow\)
\( \newcommand{\vectorB}[1]{\overset { \scriptstyle \rightharpoonup} {\mathbf{#1}} } \)
\( \newcommand{\vectorC}[1]{\textbf{#1}} \)
\( \newcommand{\vectorD}[1]{\overrightarrow{#1}} \)
\( \newcommand{\vectorDt}[1]{\overrightarrow{\text{#1}}} \)
\( \newcommand{\vectE}[1]{\overset{-\!-\!\rightharpoonup}{\vphantom{a}\smash{\mathbf {#1}}}} \)
\( \newcommand{\vecs}[1]{\overset { \scriptstyle \rightharpoonup} {\mathbf{#1}} } \)
\( \newcommand{\vecd}[1]{\overset{-\!-\!\rightharpoonup}{\vphantom{a}\smash {#1}}} \)
\(\newcommand{\avec}{\mathbf a}\) \(\newcommand{\bvec}{\mathbf b}\) \(\newcommand{\cvec}{\mathbf c}\) \(\newcommand{\dvec}{\mathbf d}\) \(\newcommand{\dtil}{\widetilde{\mathbf d}}\) \(\newcommand{\evec}{\mathbf e}\) \(\newcommand{\fvec}{\mathbf f}\) \(\newcommand{\nvec}{\mathbf n}\) \(\newcommand{\pvec}{\mathbf p}\) \(\newcommand{\qvec}{\mathbf q}\) \(\newcommand{\svec}{\mathbf s}\) \(\newcommand{\tvec}{\mathbf t}\) \(\newcommand{\uvec}{\mathbf u}\) \(\newcommand{\vvec}{\mathbf v}\) \(\newcommand{\wvec}{\mathbf w}\) \(\newcommand{\xvec}{\mathbf x}\) \(\newcommand{\yvec}{\mathbf y}\) \(\newcommand{\zvec}{\mathbf z}\) \(\newcommand{\rvec}{\mathbf r}\) \(\newcommand{\mvec}{\mathbf m}\) \(\newcommand{\zerovec}{\mathbf 0}\) \(\newcommand{\onevec}{\mathbf 1}\) \(\newcommand{\real}{\mathbb R}\) \(\newcommand{\twovec}[2]{\left[\begin{array}{r}#1 \\ #2 \end{array}\right]}\) \(\newcommand{\ctwovec}[2]{\left[\begin{array}{c}#1 \\ #2 \end{array}\right]}\) \(\newcommand{\threevec}[3]{\left[\begin{array}{r}#1 \\ #2 \\ #3 \end{array}\right]}\) \(\newcommand{\cthreevec}[3]{\left[\begin{array}{c}#1 \\ #2 \\ #3 \end{array}\right]}\) \(\newcommand{\fourvec}[4]{\left[\begin{array}{r}#1 \\ #2 \\ #3 \\ #4 \end{array}\right]}\) \(\newcommand{\cfourvec}[4]{\left[\begin{array}{c}#1 \\ #2 \\ #3 \\ #4 \end{array}\right]}\) \(\newcommand{\fivevec}[5]{\left[\begin{array}{r}#1 \\ #2 \\ #3 \\ #4 \\ #5 \\ \end{array}\right]}\) \(\newcommand{\cfivevec}[5]{\left[\begin{array}{c}#1 \\ #2 \\ #3 \\ #4 \\ #5 \\ \end{array}\right]}\) \(\newcommand{\mattwo}[4]{\left[\begin{array}{rr}#1 \amp #2 \\ #3 \amp #4 \\ \end{array}\right]}\) \(\newcommand{\laspan}[1]{\text{Span}\{#1\}}\) \(\newcommand{\bcal}{\cal B}\) \(\newcommand{\ccal}{\cal C}\) \(\newcommand{\scal}{\cal S}\) \(\newcommand{\wcal}{\cal W}\) \(\newcommand{\ecal}{\cal E}\) \(\newcommand{\coords}[2]{\left\{#1\right\}_{#2}}\) \(\newcommand{\gray}[1]{\color{gray}{#1}}\) \(\newcommand{\lgray}[1]{\color{lightgray}{#1}}\) \(\newcommand{\rank}{\operatorname{rank}}\) \(\newcommand{\row}{\text{Row}}\) \(\newcommand{\col}{\text{Col}}\) \(\renewcommand{\row}{\text{Row}}\) \(\newcommand{\nul}{\text{Nul}}\) \(\newcommand{\var}{\text{Var}}\) \(\newcommand{\corr}{\text{corr}}\) \(\newcommand{\len}[1]{\left|#1\right|}\) \(\newcommand{\bbar}{\overline{\bvec}}\) \(\newcommand{\bhat}{\widehat{\bvec}}\) \(\newcommand{\bperp}{\bvec^\perp}\) \(\newcommand{\xhat}{\widehat{\xvec}}\) \(\newcommand{\vhat}{\widehat{\vvec}}\) \(\newcommand{\uhat}{\widehat{\uvec}}\) \(\newcommand{\what}{\widehat{\wvec}}\) \(\newcommand{\Sighat}{\widehat{\Sigma}}\) \(\newcommand{\lt}{<}\) \(\newcommand{\gt}{>}\) \(\newcommand{\amp}{&}\) \(\definecolor{fillinmathshade}{gray}{0.9}\)The following video clips are from movies. I’ve done my best to curate a small, digestible, binge-worthy list of clips from movies you may not have seen. Two thoughts:
-
You should watch all of these movies, especially Sneakers
-
I’ve provided commentary to contextualize the clips.
Matchstick Men
Matchstick Men is a 2003 movie about con men. Starring Nicolas Cage (Roy), Sam Rockwell (Frank), and Alison Lohman (Angela), the movie chronicles the scamming tricks of the trio. Things start to heat up as the movie unfurls in unsuspecting ways.
There are two clips worth looking at. In this one, Frank sets his mark up by guaranteeing that they have won a high-end prize (a new car, a trip, etc.). Once he establishes rapport--note that he gets to know how many grandchildren the mark has), he pulls his AUTHORITY card; he tells them that they are on the hook for the sales tax. The AUTHORITY is fortified by Roy posing as a Frank’s boss:
https://www.youtube.com/watch?v=GwQdBsTpmOM
In this second clip, Angela is learning how to scam. In the previous scene, she accompanies Roy's character into a convenience store. They buy a lotto ticket for today, but select four of the five numbers from yesterday’s winning numbers. Then they distress the ticket by rubbing it on surfaces so it looks like it’s been through the wash. They take special care to rub off the date of the ticket. Angela comes into a laundromat and subtly suggests to a patron that a found lottery ticket might be a winner. Note that this scam relies on a few things - AUTHORITY of a (fake) winning lotto ticket, RAPPORT of a young, polite, innocent girl, a HUNGRY MARK (the con men bank on patrons of a laundromat to have lotto dreams), and INCEPTION of the idea (the mark is the one who advances the plan -- of her own volition).
Sneakers
Sneakers is a 1992 movie about penetration testers that totally stands the test of time. In this scene, the team is attempting to break into a rather secure building. One of the plants, River Phoenix (Carl) has arrived before the infiltration occurs. His AUTHORITY is asserted because of his costume and his delivery of Drano. Carl is arguing with the front desk guard who is not expecting the delivery. Quickly we see Robert Redford (Martin) establish IDENTITY and PRETEXT in his first contact. He has a LEGITIMATE REASON for being in the building; there is a party on the fourth floor and he is expecting the cake to be delivered. Luckly, Martin sees the delivery and vanishes from the front desk. He arrives a few seconds later with a cake so big he can’t reach his ID card (which clearly he doesn’t have anyhow). Tension is rising as the security guard’s argument with Carl escalates. There is CONFUSION and URGENCY (remember, the cake is late!) as Martin tries to get the guard to buzz him in. Only the first 40 seconds are relevant to the conversation of social engineering:
Wolf of Wall Street
The 2013 movie Wolf of Wall Street is a true story of Jordan Belfort (played by Leonardo DiCaprio), a huckster who made a fortune selling “penny stocks” or “pink sheet stock”. His rise to crime and corruption is a fascinating story.
In this scene, Belfort, coming off a job at a big brokerage firm, brings his guile to a small outfit that specializes in cheap stocks. Belfort brings URGENCY into his conversations with his marks, AUTHORITY because of his knowledge, and leverages EXPLOIT (the “pink sheets” are not really regulated like blue chip stocks are).
This clip has some vulgar language and may not be appropriate for some audiences; watching this clip is optional!
https://youtu.be/nJzo5TDfamk?t=166
In this second clip, we see Belfort training his new employees how to scam marks. There are a number of tactics here that work out well for the crew. They establish URGENCY by saying that these stocks are going to go up immediately, and waiting until then will be too late. They established PEDIGREE with a firm name that is completely made up -- Stratton Oakmont. Even their logo inspires pride, tradition, knowledge, and trust. The crew establishes AUTHORITY by reciting stocks of big, well-known companies in an effort to sell “penny stocks”.
This clip has some vulgar language and may not be appropriate for some audiences; watching this clip is optional!
Hackers
In the 1995 movie Hackers, Johnny Lee Miller plays Dade, a talented hacker. In this scene, Dade calls a local TV station and using CONFUSION and KNOWLEDGE successfully convinces an unsuspecting employee to reveal the phone number for the modem to the station. This lets him change the TV programming schedule so the station broadcasts an episode of The Outer Limits.
Catch Me if You Can
The true story of Frank Abagnale is captured in the 2002 film Catch Me If You Can. Frank Abagnale was a true con artist -- most notable for faking (convincingly) as a pilot, doctor, and lawyer. The following clip shows how Frank (Leonardo DiCaprio) realized how effective AUTHORITY is. He shows up to his first day at a public high school after spending his childhood in a public school. He’s wearing a suit jacket and is mistaken for the substitute teacher. Note the DUAL REALITY that he employs (the students believe he is assigned to the class for the first time, meanwhile the actual substitute teacher is convinced that he is always the substitute for Roberta):
https://www.youtube.com/watch?v=KAeAqaA0Llg
Though not portrayed in the film, there was another stunt Frank orchestrated that relied on the AUTHORITY of a uniform. He brought a chair to a bank one night and sat outside the nighttime deposit box. He also rented a security guard outfit. He fashioned a sign that read, “Deposit broken. Please leave money with the Guard.” Between the outfit and the SOCIAL CONTRACT of the patrons (they certainly did not want to be embarrassed by not trusting the guard!), it was enough to convince patrons that their money was safe.
In another scene of Catch Me If You Can, Frank is caught by FBI agent Carl Hanratty (Tom Hanks) who has been pursuing Frank for a while now. Frank emerges from the bathroom of the apartment he is renting only to find Agent Hanratty with his gun drawn. Frank quickly realizes that Agent Hanratty does not know what he looks like, so he convinces Hanratty that he is a Secret Service agent who is also hot on the trail of Abagnale, too. By using AUTHORITY, INSIDER KNOWLEDGE (about how the Secret Service works) and DUAL REALITY (he convinces Hanratty that his neighbor, Murphy, has already caught Abagnale while Murphy has no idea what is going on - Frank even covers any confused response Murphy may have had with a cough):