Mom & Hacker tote bag

Product Page

Don't sell moms short when it comes to technology in general and hacking in particular. My mom may not have been a malware reverser, but she was certainly able to exploit technological loopholes.

What are the chances hackers will take the year off?

from here and here

There's a security vulnerability in the secure boot feature of modern computers. While the patch for this 0-day was already released, it won't be enabled by default until Q1 2024. That's a long time to wait for a fix. In theory you can probably enable this fix sooner than that, but most people aren't even going to be aware of it, so most of the vulnerable computer population will remain vulnerable for basically a year, giving attackers ample opportunity to take advantage of it.

Never tempt fate or hackers

found on Izismile

You might think that the only way they could get into your WiFi is by guessing your super powerful secret password, but not only is your password probably not as strong as you think it is, it's also probably not the only way in. WiFi routers have vulnerabilities just like other computerized systems.

Advanced Persistent Teens

from here and here

So I had kind of gotten the impression that the age of children being a significant online threat was a thing of the past. With all the talk about the commercialization and professionalization of the threat landscape I thought that meant the kids in the past had grown up and professionalized while the next generation of kids did something else entirely. Apparently I was wrong. Kids are apparently still a significant part of the threat landscape.

I guess I really shouldn't be surprised, though. All the intellectual and social rewards that drew kids to it in the past are still there now, and now there's the addition of financial rewards too. There's little reason for the next generation of kids to go elsewhere when what they want is right there.

Kids Meet A Hacker

Watch on YouTube

It's funny how at least one little girl already knows that she's got to stop giving him information. I'm sure she'll have great OpSec when she grows up.

Hackers Gonna Hack case

Product Page

The typeface for this could have been anything, but the monochrome green on black binary code is a nice touch.

Don't tempt fate or hackers

found on Reddit

As a general rule it's best not to make a target out of yourself. Remember that the nail that sticks out gets hammered down.

Jake Davis: How We Hack The Planet

Watch on YouTube

I've seen a number of talks with Jake Davis, and he's good at telling funny stories, but this one includes a story about meeting up with Aaron Barr (of HBGary Federal fame), which makes it extra interesting.

Not Even A Kid Can Hack This poster

Product Page

Those sound like famous last words, if you ask me. I have a feeling he simply asked the wrong kid.

How the mighty have fallen

from here and here

This has definitely not been Russia's year. Not only has their misguided invasion gone horribly wrong, now their hacktivists can't even pwn a seemingly easy target like Eurovision. Russia sure has lost a lot of respect on the world stage.

So much for that cert

from here and here

It's not like you can actually prove someone is ethical. That interpretation of the Certified Ethical Hacker could never work, even though it's exactly the message it sends. In reality, all the certification really means is that the certificate holder has a certain set of skills associated with ethical hacking. Just because someone has all the skills of a banker doesn't mean you should trust them with your money and as it turns out this supposed ethical hacker shouldn't be trusted with your money either.

Too bad for the other (presumably) more ethical hackers who made that certificate part of their professional reputation - this crook has damaged it's value, perhaps significantly.

Black Hat board game

Watch on YouTube

Sometimes a picture alone isn't enough to decide whether you want a thing. I think that's especially true of something like a board game. You really need to see it in action to get a feel for it, and this video review of Black Hat the board game seems to accomplish just that.

Someone's going to be so grounded

from here and here

Something tells me this young man won't be able to use the Internet at home for quite some time now that reporters have tipped off his mom about what he's been up to. You may not be able to charge a minor through the legal system, but minors are still subject to the authority of their parents.

Proof of compromise when you're broke

found on Izismile

If the crook wants to prove they have access they have to do something, and when there's no money in the account, the only way your balance can go is up. 

I Know Your Password case

Product Page

If you want someone to give you space while you're talking on the phone, this may be just the thing to get them to back up and give you some privacy.

TimTom : Learning to Hack as a Kid

Watch on YouTube

This is a very relatable story. Almost too relatable. Did he hack my brain? It's also very well told

They each could use a taste of their own medicine

from here and here

Both Russia and China have a reputation for hacking others. It's nice to see one or both of them on the receiving end for a change. 

Governor find the Internet

from here and here (image source)

Missouri Governor Mike Parson has decided that a journalist reporting a security flaw in a state website must be a hacker and that the paper that published the story did so to embarrass the state. I guess by making him open his mouth they succeeded. 

Watch this hacker break into a company

Watch on YouTube

Some hackers exploit machines, others exploit people.

Better hope no one makes them a better offer

from here

I wondered about using that term, but ex-US intelligence officer going to work for a foreign power and hacking anyone they're paid to hack, including their own countrymen, seems to fit the cyber mercenary label to a T. Hiring someone like that to protect your VPN customers seems a little bit like asking a fox to guard a hen house.