I think social hacking is far harder than trying to find vulnerabilities in a public server. It requires a whole different set of skills -- and I don't view it as being a "soft skill".
Yeah, right. Social Engineering is much easier than gaining access through some 0-day attack you have devised yourself, or even finding some working skiddie method (when dealing with a specific target). For one thing, you don't actually need any actual skill, you just need to be a good liar and have a good story. That's not skills, it's just a sociopathic trait some people are born with.
