Pretexting [8:21 am]
An NYTimes look at the technique of “pretexting” at the heart of the recent brouhaha over at HP: An Industry Is Based on a Simple Masquerade
People who obtain calling records often use a technique known as pretexting — using a pretext, like masquerading as a customer, to get a company to disclose information. Their shady subculture has been getting renewed attention since the revelation last week that a subcontractor for an investigative firm working for Hewlett-Packard used pretexting to obtain the call records of company board members and reporters.
It is hard to quantify the size of the telephone pretexting economy. But in recent years it has turned into a small industry, with dozens of Web sites offering calling records to anyone with a credit card, for a modest fee. Their main customers appear to be private investigators, although some in that field criticize the practice.
[...] Pretexters often use techniques similar to those employed by identity thieves to obtain not only telephone records but also other private data. Robert Douglas, an information security consultant and former private detective, said they often called telephone companies armed with some personal information, like a customer’s Social Security number, mailing address or date of birth. Then they charm and cajole the phone company employee into thinking they are the actual customer.
“They have the knack,†Mr. Douglas said. “It’s more art than science.â€
Many professionals pretexters, including those who have used the practice to build lucrative data brokering businesses, are reluctant to discuss their methods. At a Congressional hearing in June, 11 of the witnesses who were called refused to answer questions, invoking their Fifth Amendment right against self-incrimination.
[...] Mr. Douglas, the security consultant, agreed that the carriers faced a tough balancing act. “We’re in the McDonald’s generation. Everybody wants information and they don’t want to wait for it,†he said. “That’s why these guys win.â€
APWire coverage of the hearing: Lawmakers to Crack Down on Data Brokers - pdf; the FTC’s description of what it sees as pretexting enforcement options (via Orin Kerr’s weblog)
From the WaPo: When a Stranger Calls, Beware of The Pretext - pdf
Later: deep waters for HP getting deeper — House Panel and U.S. Attorney Join H.P. Inquiry; HP Scandal Widens With U.S. Probes - pdf — and a big article in Newsweek: Suspicions and Spies in Silicon Valley - pdf; see also E-Mail Offers Peek Into Debate
Later — a board chairman ejected: Spying Uproar Causes Shuffle in Boardroom

