Where does the attacker get our information?
Our information can be found in the following
- Public Phone Directory
- Authority Listing
Some country authority publish limited information on individual and company in the web for public to access.
Unless the privacy setting in the Facebook is set correctly, else the public can view your post and personal information.
Your personal detail : education history, employment history and other can be found. Unless privacy is properly set.
Name and address can be found
Some company website have their organization chart, contact and other information published in the Internet.
We need to balance the information had is available from the web.
Attacker can get information through Inference Attack.