Since people are more gullible and less secure than software, I'm wondering what percentage of your "hacking time" do you spend on some form of social engineering (e.g. phishing)?