Penetration Testing: Re: listening to people/offices when on-hold on the phone

[ebk_lists () hotmail com]

This has sorta happened to me. I was on "hold" with our higher SOC for a terribly long time, and I started complaining. 
I didn't realize that they could hear me/were still listening. But I didn't even have the luxury of Beethoven. :(

I agree it's an interesting concept, but I don't know how much value you would actually gain by doing it. You would 
need some sort of bait to have your mark call you and/or stay on the line long enough for you to collect any data that 
you might be able to get.

Another potential is using this idea:

http://www.theinternetpatrol.com/keyboard-sound-spying-gives-away-whats-being-typed

Get them on the phone, and get them to log in to their account, do something else that requires typing their password. 
Perhaps you can record the keystrokes and determine what it is?

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------