Ver:
Obtención de
información a base de rebuscar en los cubos de basura.
A method of social
engineering in which criminals raid rubbish bins to gather telling personal
information.
http://www.getsafeonline.org/
Dumpster Diving is obtaining
passwords and corporate directories by searching through discarded media.
http://www.sans.org/security-resources/glossary-of-terms/
Dumpster diving is looking
for treasure in someone else's trash. (A dumpster is a large trash container.)
In the world of information technology, dumpster diving is a technique used to
retrieve information that could be used to carry out an attack on a computer
network. Dumpster diving isn't limited to searching through the trash for
obvious treasures like access codes or passwords written down on sticky notes.
Seemingly innocent information like a phone list, calendar, or organizational
chart can be used to assist an attacker using social engineering techniques to gain access to the network. To
prevent dumpster divers from learning anything valuable from your trash,
experts recommend that your company establish a disposal policy where all
paper, including print-outs, is shredded in a cross-cut shredder before being
recycled, all storage media is erased, and all staff is educated about the
danger of untracked trash.
http://searchsecurity.techtarget.com/