Both social engineering and ...

Both social engineering and technical attacks played a big part in what I was able to do. It was a hybrid. I used social engineering when it was appropriate, and exploited technical vulnerabilities when it was appropriate.
 See image
 Kevin Mitnick

Quotes from the same author

The methods that will most effectively minimize the ability of intruders to compromise information security are comprehensive user training and education. Enacting policies and procedures simply won't suffice. Even with oversight the policies and procedures may not be effective: my access to Motorola, Nokia, ATT, Sun depended upon the willingness of people to bypass policies and procedures that were in place for years before I compromised them successfully.
 See image
 Kevin Mitnick
I could have evaded the FBI a lot longer if I had been able to control my passion for hacking.
 See image
 Kevin Mitnick
I did get a huge endorphin rush when I was able to crack a system because it was like a video game.
 See image
 Kevin Mitnick
Any type of operating system that I wanted to be able to hack, I basically compromised the source code, copied it over to the university because I didn't have enough space on my 200 megabyte hard drive.
 See image
 Kevin Mitnick
You can never protect yourself 100%. What you do is protect your self as much as possible and mitigate risk to an acceptable degree. You can never remove all risk.
 See image
 Kevin Mitnick