pull down to refresh
This is a very good idea. I'm not brave enough, though.
reply
I think with enough information, someone could pull this off. With some public information that seems private, like a store ID that usually only managers care about, you could fake legitimacy. Combined with being there to help (which isn’t wrong), I think the employees or shift manager would trust enough to let the social engineer try.
The excuse for not knowing what they’re doing could be, “Oh, that’s an old version of our interface.”
reply
Just pretend you're from Square, there to fix their terminal because you've received reports of failed bitcoin payments, then show them this post. The merchant will think Square is extremely proactive, Square gets another merchant accepting bitcoin, and you can finally pay in bitcoin. Win-win-win!