Hackers, security pros talk penetration testing, social engineering