The whole point of social engineering is that, no matter how good the protocol you use, if there is a point of failure involving a person (like a tech support g

The whole point of social engineering is that, no matter how good the protocol you use, if there is a point of failure involving a person (like a tech support guy with access to a console), then it will fail. The only solution is to remove these sort of powers from your general tech support guy and let them in the hands of a few highly technical, well trained, well paid staff members (presumably managers?). Of course, I made the blind assumption that your average support staff member is not paranoid enough, but based on my acquaintance with a few guys in the business it seems to me that the salary is not high enough to expect well trained technical stuff doing support. I might be wrong, and in that case I would gladly know which companies employ such well trained staff, so that I can move my servers there.