After reading this article from symantec I got to think how much all these social engineering techniques rely on the authentication system of users, a password.
Considering three different additional methods of authentication, smartcard, mobile phone and biometrics, how much do these make social engineering harder?
A smart card that is not easily copyable can be still borrowed out too a "friendly" sys admin. A mobile phone is maybe not so easily borrowed out, but users will be happy to read the authentication code from it. Biometrics seems harder, but depending on the system the biometrics (like fingerprint) can be "copied".
With just password authentication, social engineering attacks seems to be the weak link. Will using any of the two-factor methods described above make social engineering so hard that hackers will not even bother trying?