Shoulder Surfing

The most basic technique is Shoulder Surfing. It's used to collect passcodes, often from Debit/Credit card terminals and ATM machines. It is both simple to pull off, and fortunately simple to counter.






Check out the view from Dave's phone:






And when Lloyd the Contractor adjusts his body position:







In this case a user will likely use either a phone or their own eyes and memory to look over a person’s shoulder to get passwords and codes to restricted areas.  Physically blocking them with your body is always the best way to stop them from viewing the information.  This is not limited to doorways though.  Let’s look at another example of shoulder surfing: 




Once again, look at the views through Dave's phone.








Next up, "Tailgating"

No comments:

Post a Comment