Question

Performing a shoulder surfing in order to check other’s password is ____________ ethical practice.

(a) a good

(b) not so good

(c) very good social engineering practice

(d) a bad

I had been asked this question during an interview for a job.

The query is from Ethics of Ethical Hacking topic in division Security Ethics, Security Breach Scenarios & Corporate Security of Cyber Security

Answer 1

Right choice is (d) a bad

Easiest explanation: Overlooking or peeping into someone’s system when he/she is entering his/her password is a bad practice and is against the ethics of conduct for every individual. Shoulder surfing is a social engineering attack approach used by some cyber-criminals to know your password and gain access to your system later.