The tips for avoiding elicitation are as follows:
- Elicitation is the art of getting answers without asking questions. In other words, elicitation is what you say and how you say it. Based on NSA, elicitation is the process of extracting information from something or someone, and what you say and how you say it will determine your success.
- The weakest links in an information-security chain are the people and social networks.
- Social interaction with humans is much easier to manipulate than complex IT systems.
- Tools are an important aspect of social engineering, but they do not make the social engineer. A tool alone is useless; but the knowledge of how to leverage and utilize that tool is invaluable (Christopher Hadnagy).
- The best counter measure against elicitation is to know what to say and how much you say. This also applies to social media websites; sharing is good but...
