3 ms·

Social engineering at its finest.

• incongruity 7y ago
  Which is why their compliance process wasn’t rigorous enough. As others have said, requiring evidence of University IRB review (which it doesn’t sound like they did) would have been a way to require more safeguards. Yes, bad actors could and maybe would have still abused the system, it makes their work harder and more visible.
• xorcist 7y ago
  You don't need much social engineering to fool someone whose paycheck depends on being fooled.