Social Engineering

Social engineering means tricking people into handing over confidential information or doing something for you, usually something bad. It doesn't attack software or hardware. It attacks the human part of security.

• A phishing email that gets you to type in your password.
• Someone pretending to be from IT so you let them into a system.

It works because people are usually the weakest link in the security chain. Attackers lean on psychology so victims break the usual security rules without even noticing. The best defense is awareness and education, which mostly means being skeptical and double-checking who you're talking to.

There's a second meaning in attention hacking, or attention farming. Here it means using human psychology to grab someone's attention and keep it, usually for money or influence. You see it in social media design, clickbait articles, and sensational headlines. They play on emotions, biases, and curiosity, and the goal is more engagement, more ad revenue, or pushing a certain narrative. Social networks keep you hooked with endless scrolling, notifications, and engagement rewards.

That raises real ethical questions. These tricks can pull people away from actual human connection and real-world work toward digital interactions tuned for profit or platform growth.