WEBVTT - TechStuff Classic: The Worst Hacking Scenes from Hollywood 0:00:04.440 --> 0:00:10.400 Welcome to tech Stuff, a production from iHeartRadio. 0:00:11.800 --> 0:00:13.600 Hey there, and welcome to tech Stuff. 0:00:13.680 --> 0:00:16.720 I'm your host Jonathan Strickland. I'm an executive producer with 0:00:16.800 --> 0:00:19.599 iHeartRadio and how the tech are you? It is time 0:00:19.640 --> 0:00:23.239 for a tech Stuff classic episode, and the episode we're 0:00:23.239 --> 0:00:26.560 about to listen to, the worst hacking scenes from Hollywood, 0:00:26.920 --> 0:00:31.400 is technically part one of a two parter. Shannon Morse 0:00:31.720 --> 0:00:35.640 joined me to talk about hacking scenes in Hollywood. 0:00:36.000 --> 0:00:36.960 Shannon is. 0:00:38.440 --> 0:00:43.280 She's a hacker. She's been doing the hacking routine for 0:00:43.320 --> 0:00:47.800 several years now. She's been covering hacking for years. She's 0:00:47.960 --> 0:00:51.720 very knowledgeable on the subject and was a great partner 0:00:51.800 --> 0:00:55.960 to have to talk about how Hollywood doesn't always get 0:00:56.080 --> 0:01:00.480 hacking quite right. Sit back and enjoy this episode originally 0:01:00.520 --> 0:01:05.440 published September seventh, twenty sixteen. Guys, we've had Shannon on 0:01:05.480 --> 0:01:08.640 the show a few times, and today it's a real treat, really, 0:01:08.880 --> 0:01:13.760 because we're gonna talk about some examples of hacking in 0:01:13.800 --> 0:01:18.160 pop culture and some of the ones that are incredibly awful, 0:01:18.480 --> 0:01:23.920 just terrible inaccurate ways of showing how hacking works, as 0:01:24.000 --> 0:01:26.240 well as talk about something get it more right than 0:01:26.360 --> 0:01:29.000 not right, which is kind of awesome, and I mean 0:01:29.319 --> 0:01:33.959 the start off, we have to admit the real world 0:01:33.959 --> 0:01:38.120 of hacking. While the results can be quite dramatic and 0:01:38.440 --> 0:01:44.400 have a huge effect, the process itself is not always cinematic. 0:01:45.160 --> 0:01:46.319 Nope, it is not. 0:01:47.280 --> 0:01:49.880 Yeah, it's actually pretty boring. There's just a bunch of 0:01:49.880 --> 0:01:51.880 text on the screen and that's about. 0:01:51.600 --> 0:01:55.200 It, right, I mean it's coding, right. 0:01:55.520 --> 0:01:56.280 Yeah, exactly. 0:01:56.320 --> 0:01:58.680 There's a lot of coding involved, a lot of Python 0:01:58.800 --> 0:02:01.920 and BASS scripts and things of that nature, and a 0:02:01.960 --> 0:02:04.960 lot of terminal work. So you don't see very much 0:02:05.040 --> 0:02:09.080 gooey or graphical user interface usage whenever you're running. 0:02:08.880 --> 0:02:11.720 Some kind of hack implementation. A lot of times it's 0:02:11.919 --> 0:02:12.960 just terminal. 0:02:13.200 --> 0:02:17.720 Right, And you know, I understand the need to stretch 0:02:18.040 --> 0:02:21.320 the truth when you're trying to create a really thrilling 0:02:21.760 --> 0:02:24.320 movie or TV show and you want to have something 0:02:24.400 --> 0:02:27.520 interesting to look at, having your characters look at lines 0:02:27.560 --> 0:02:32.239 of code and going through a process of trying to 0:02:33.760 --> 0:02:38.800 create some sort of exploit for a vulnerability that doesn't 0:02:38.840 --> 0:02:41.480 really hold a lot of people like on the edge 0:02:41.520 --> 0:02:43.840 of their seat. So I get it, but it is 0:02:43.960 --> 0:02:47.480 kind of a problem. And I should also mention we're 0:02:47.560 --> 0:02:50.800 using the word hacker today a lot. But of course, 0:02:51.240 --> 0:02:53.760 as I try to mention every time I talk about hacking, 0:02:54.520 --> 0:02:58.440 hacking is a very broad term, and it doesn't necessarily 0:02:58.520 --> 0:03:01.680 mean that you are doing anything illegal, and it certainly 0:03:01.760 --> 0:03:02.440 doesn't even. 0:03:02.240 --> 0:03:04.600 Mean that you're necessarily working on a computer. 0:03:04.760 --> 0:03:07.720 You could be doing some hardware hacks that aren't related 0:03:07.760 --> 0:03:08.520 to software. 0:03:09.880 --> 0:03:11.160 That's important to remember. 0:03:11.200 --> 0:03:13.720 But as far as Hollywood is concerned, there's really only 0:03:13.720 --> 0:03:17.240 one kind of hacking, and that involves trying to break 0:03:17.280 --> 0:03:19.320 into a place that you're not supposed to be in. 0:03:21.120 --> 0:03:24.560 Of course, because those are the most interesting people, they're 0:03:24.600 --> 0:03:27.280 the scary ones, and people are afraid of what they 0:03:27.320 --> 0:03:28.720 don't understand. 0:03:28.720 --> 0:03:32.120 Right, And I imagine that a lot of screenwriters are 0:03:32.160 --> 0:03:36.640 particularly scared of hackers because it's one it's clear that 0:03:36.680 --> 0:03:40.520 they have no understanding whatsoever about it. And two, I 0:03:40.560 --> 0:03:45.240 mean we've seen, especially recently, we've seen some very big 0:03:45.280 --> 0:03:52.320 stories about the entertainment industry running away from hackers attacking. 0:03:52.360 --> 0:03:55.480 And whether it's a hacker who's actually gaining access to 0:03:55.520 --> 0:03:57.920 a system, or it was someone who was on the 0:03:57.920 --> 0:04:01.360 inside who just managed to exploit access in the first place, 0:04:01.360 --> 0:04:04.040 which I would argue really isn't a hack, it's just 0:04:04.120 --> 0:04:08.240 kind of industrial sabotage at that point. But the Sony 0:04:08.320 --> 0:04:10.520 story would be the big example, right. 0:04:10.760 --> 0:04:13.240 Yeah, the Sony story, I think put a lot of 0:04:13.240 --> 0:04:16.719 fear in the entertainment industry, and I feel like the 0:04:16.880 --> 0:04:20.520 entertainment industry as a whole, with very few exceptions, are 0:04:21.240 --> 0:04:24.360 one of the genres that is the farthest behind when 0:04:24.360 --> 0:04:28.200 it comes to their own security and privacy. They're the 0:04:28.279 --> 0:04:30.160 farthest behind when it comes to a lot of things, 0:04:30.200 --> 0:04:33.680 including how they treat their women. But I think that 0:04:33.720 --> 0:04:36.600 it's something that they really need to start focusing on 0:04:36.720 --> 0:04:41.000 and start understanding, not only for their own security, for 0:04:41.040 --> 0:04:44.159 their employees, for the actors and actresses that work there 0:04:44.680 --> 0:04:47.320 for these different companies, but also because they need to 0:04:47.400 --> 0:04:50.960 understand how to actually portray it so that more people 0:04:51.160 --> 0:04:53.720 understand it as a whole and aren't so afraid. 0:04:54.120 --> 0:04:57.719 Right, And so we're going to dive into a discussion 0:04:57.760 --> 0:05:03.960 of some of the more entertaining and often wildly inaccurate 0:05:05.160 --> 0:05:07.320 versions of hacking in film and TV. 0:05:07.920 --> 0:05:09.200 I should also give a shout out. 0:05:09.240 --> 0:05:11.800 A lot of people on my Twitter feed suggested that 0:05:11.839 --> 0:05:16.080 I check out a subreddit. The subreddit is it's a 0:05:16.200 --> 0:05:21.280 Unix system, which is a reference to Jurassic Park. If 0:05:21.279 --> 0:05:23.840 you remember, the young lady runs up to a computer, 0:05:24.000 --> 0:05:25.640 she takes one look at it, she says. 0:05:25.680 --> 0:05:29.640 It's a Unix system. I know this, And then she's. 0:05:29.440 --> 0:05:34.160 Immediately looking at a graphic user interface and identifying one 0:05:34.200 --> 0:05:36.760 block out of like fifty blocks that are on the screen, 0:05:36.800 --> 0:05:40.159 and immediately makes the conclusion that all the files for 0:05:40.240 --> 0:05:44.120 the entire island are accessible from that one terminal. I 0:05:44.160 --> 0:05:47.960 don't know how she knows. That's amazing. It's amazing that 0:05:48.000 --> 0:05:51.640 you automatically know that everything available on the island is 0:05:51.680 --> 0:05:52.719 on that one drive. 0:05:53.360 --> 0:05:55.120 Somehow, I feel like. 0:05:55.120 --> 0:05:57.080 The only way you would know that is if you 0:05:57.160 --> 0:06:01.560 were the information security professional that is working for that company. 0:06:02.440 --> 0:06:06.200 Yeah, yeah, No, she seemed like she was a little 0:06:06.240 --> 0:06:09.320 too young to be a full time employee at that point. 0:06:09.720 --> 0:06:13.560 Exactly so Jurassic Park. While it lends the. 0:06:15.279 --> 0:06:18.599 Quote it's a Unix system to the subreddit, I didn't 0:06:18.600 --> 0:06:21.400 really include it on this list. There is one other 0:06:22.320 --> 0:06:25.880 incredibly famous example that I've talked about on a previous 0:06:25.920 --> 0:06:26.640 episode of Tech. 0:06:26.480 --> 0:06:28.640 Stuff that we will hit. But first I'm going to 0:06:28.640 --> 0:06:30.880 talk about a movie. I haven't actually seen this movie 0:06:30.920 --> 0:06:34.680 but I have seen the sequences that involve hacking. That 0:06:34.760 --> 0:06:35.360 movie is. 0:06:35.279 --> 0:06:38.760 The Core, And in the first sequence I wanted to 0:06:38.760 --> 0:06:42.040 talk about, there's a character whose handle is RAT, which 0:06:42.120 --> 0:06:45.279 could be you know, like remote access trojan or remote 0:06:45.320 --> 0:06:49.240 access terminal, depending upon what acronem you want to look at. 0:06:49.360 --> 0:06:55.200 Often one that is associated with hacking, and Rat is 0:06:55.760 --> 0:06:58.279 caught by the FBI. The sequence in which he's caught, 0:06:58.320 --> 0:07:02.880 he's trying desperately to erase all traces of his activities. 0:07:03.360 --> 0:07:05.600 He's got tons and tons of computers, and he's using 0:07:05.680 --> 0:07:09.720 massive magnets to try and wipe drives, and he's throwing 0:07:11.400 --> 0:07:15.480 CD ROM discs into a microwave and turning it on high, 0:07:15.800 --> 0:07:17.480 you know, the typical stuff. 0:07:17.240 --> 0:07:18.760 We do when the Feds come knocking. 0:07:20.280 --> 0:07:23.240 But but my favorite bit about this little sequence is 0:07:23.600 --> 0:07:27.680 he then is taken to an interrogation and as he's 0:07:27.720 --> 0:07:31.480 being interrogated, he just casually reaches over and grabs a 0:07:31.520 --> 0:07:33.000 guy's cell phone out of his. 0:07:33.000 --> 0:07:35.960 Little holster or his pocket or whatever. But the guy's 0:07:36.120 --> 0:07:37.880 it's just a cell phone. What can he do with that? 0:07:38.520 --> 0:07:41.200 Well, Shannon, you know what people can do with so 0:07:41.280 --> 0:07:43.400 I mean, if you have physical access to a cell phone. 0:07:43.480 --> 0:07:47.600 It's game over. But oh yeah, but what this guy does. 0:07:47.640 --> 0:07:51.000 He doesn't do something to get hold of the guy's contacts. 0:07:51.040 --> 0:07:54.360 He doesn't and this is also pre smartphone. It's really 0:07:54.360 --> 0:07:57.640 a cell phone. He doesn't do anything like that. What 0:07:57.680 --> 0:08:01.680 he does is he takes a little a little chewing 0:08:01.680 --> 0:08:05.200 gum rapper. He dials a couple of numbers on the phone, 0:08:05.640 --> 0:08:08.240 and then he uses the chewing gum rapper to make 0:08:08.360 --> 0:08:13.120 a weird little whistling, humming noise and then casually closes 0:08:13.160 --> 0:08:15.360 the phone, tosses it back to the guy and says 0:08:15.880 --> 0:08:18.720 that phone's got free long distance on it forever. 0:08:21.480 --> 0:08:22.640 That's uh. 0:08:22.760 --> 0:08:23.840 I love this one. 0:08:23.840 --> 0:08:27.120 Hundred accurate to real life. That's exactly how it works. 0:08:27.520 --> 0:08:28.240 Yeah, totally. 0:08:28.600 --> 0:08:32.480 So I'm pretty sure that this is kind of a 0:08:32.720 --> 0:08:35.680 comparison to what people would actually do, which was called 0:08:35.800 --> 0:08:40.040 phone freaking. And this was like before hacking became a 0:08:40.160 --> 0:08:44.320 really big popular norm that you would see in like 0:08:44.440 --> 0:08:45.959 online media that you see. 0:08:46.200 --> 0:08:46.840 In this day. 0:08:47.200 --> 0:08:50.040 Yeah, so back in the day, this guy named Captain Crunch. 0:08:50.720 --> 0:08:54.240 He got his online screen name from opening up a 0:08:54.320 --> 0:08:57.679 Captain Crunch cereal box and getting out a little I 0:08:57.720 --> 0:09:00.000 believe it was a kazoo or something similar to that, 0:09:00.440 --> 0:09:02.680 like a w and if he was able to recreate 0:09:02.760 --> 0:09:05.319 or reproduce the kind of tone that you could put 0:09:05.360 --> 0:09:07.719 into a payphone to allow you to make free long 0:09:07.760 --> 0:09:13.080 distance calls. So they're using that real life scenario to 0:09:13.120 --> 0:09:16.200 their advantage in this movie The Core and making it 0:09:16.200 --> 0:09:17.880 seem like you can do the same thing with. 0:09:17.840 --> 0:09:18.520 A gum wrapper. 0:09:18.880 --> 0:09:21.360 Now, personally, I don't believe that you can do the 0:09:21.360 --> 0:09:23.800 same thing with a gum wrapper. That seems a little 0:09:23.840 --> 0:09:26.480 bit odd. I know that you can make noises with 0:09:26.520 --> 0:09:28.360 things like that. You can also do the same thing 0:09:28.400 --> 0:09:29.960 with the piece of grass if you want to. 0:09:30.160 --> 0:09:32.080 Yeah, yeah you can. 0:09:32.160 --> 0:09:35.440 You can entertain yourself in like a third grade kind 0:09:35.440 --> 0:09:37.440 of way for hours at a time. 0:09:37.559 --> 0:09:41.439 Yes, yeah. Phone freaking really worked on landlines. 0:09:41.520 --> 0:09:45.880 They worked when the phone system wasn't fully digital yet. 0:09:45.960 --> 0:09:48.760 It was a much different system, I mean, and there's 0:09:48.800 --> 0:09:52.960 some very famous people who got their start as phone freaks. 0:09:53.000 --> 0:09:56.360 I mean, Steve Wozniak was in that world. The Wall 0:09:56.520 --> 0:09:59.160 the Great Wahs was one of the freakers of back 0:09:59.200 --> 0:10:03.440 in the seventies. But it was sort of the same 0:10:03.440 --> 0:10:05.320 thing that you would talk about hackers today. They weren't 0:10:05.360 --> 0:10:08.920 necessarily trying to gain the system. 0:10:09.160 --> 0:10:11.440 They were trying to figure out how does this work? 0:10:12.040 --> 0:10:14.800 Right, They were just messing with things. They were trying 0:10:14.840 --> 0:10:17.839 to reverse engineer them and figure out how they work 0:10:17.880 --> 0:10:20.600 and put them back together and let them let these 0:10:21.000 --> 0:10:24.400 different pieces of technology do things that they weren't necessarily 0:10:24.480 --> 0:10:26.520 supposed to do. Yeah, and that's what I love so 0:10:26.600 --> 0:10:27.480 much about hacking. 0:10:28.240 --> 0:10:29.040 But then you bring it. 0:10:28.960 --> 0:10:31.280 To Hollywood and they're like, oh, these are scary people. 0:10:31.360 --> 0:10:33.200 They're all going to end up in the FBI's hands. 0:10:33.240 --> 0:10:35.319 And that's not necessarily true, right. 0:10:35.160 --> 0:10:38.680 And to take something that worked on landlines on a 0:10:38.679 --> 0:10:42.560 payphone basis using a whistle that had I think he 0:10:42.640 --> 0:10:45.120 even modified it slightly so it would make exactly the 0:10:45.120 --> 0:10:48.120 tone he needed to replicate the tones that the phone 0:10:48.160 --> 0:10:50.319 company was using in order to allow for this kind 0:10:50.320 --> 0:10:52.920 of thing to happen. Yeah, it would never work on 0:10:52.960 --> 0:10:54.800 the cell phone range at all. 0:10:55.400 --> 0:10:58.760 And also just what a weird line. 0:10:58.320 --> 0:11:01.800 Like this phone's got free long distance on it forever, 0:11:01.960 --> 0:11:05.600 and you think there's gotta be multiple ways a phone 0:11:05.640 --> 0:11:09.480 company would say, Hey, something weird's going on with this 0:11:09.600 --> 0:11:15.480 one line. But uh, but the core the Corps also 0:11:15.559 --> 0:11:18.360 has another great scene in it with that same hacker, 0:11:18.440 --> 0:11:22.000 same guy rat h And when I see him, I 0:11:22.040 --> 0:11:25.880 always think, uh, he's he's the he's a character who 0:11:25.920 --> 0:11:27.840 also or he's an actor who also play shows up 0:11:27.840 --> 0:11:31.280 as a character on the show Supernatural as a weird, 0:11:31.880 --> 0:11:36.000 reedy looking, uh demon killer guy that you would just 0:11:36.080 --> 0:11:40.040 expect to get completely obliterated the first time he shows up, 0:11:40.040 --> 0:11:42.360 but he turns out to be more capable than you 0:11:42.360 --> 0:11:45.880 would consider based upon his appearance anyway. 0:11:46.760 --> 0:11:50.720 He walks into a cyber cafe. He's got a. 0:11:50.600 --> 0:11:54.640 CD rom I think it even says Kung Fu on it, 0:11:54.679 --> 0:11:57.679 if I'm not mistaken, and he puts it did puts 0:11:57.679 --> 0:12:02.400 it into a cyber cafe computer, and after like leaning 0:12:02.440 --> 0:12:04.400 back and putting his hand up to his face for 0:12:04.440 --> 0:12:11.360 about five seconds, it ends up completely taking over not 0:12:11.480 --> 0:12:15.640 just his computer, but the entire local network, and all 0:12:15.720 --> 0:12:18.520 of the screens in the cyber cafe pop up with 0:12:18.640 --> 0:12:22.240 this image of his rat network. 0:12:22.200 --> 0:12:24.520 Where he has taken over all the computers. 0:12:25.040 --> 0:12:28.000 I don't even know exactly why he's trying to take 0:12:28.040 --> 0:12:30.440 over all the computers, apart from just seeing lots and 0:12:30.480 --> 0:12:34.600 lots of what appears to be news footage which spoiler 0:12:34.640 --> 0:12:37.480 alert there's a thing we can use to get that 0:12:37.520 --> 0:12:38.160 news footage. 0:12:38.200 --> 0:12:41.600 It's called a TV. You can use that without having 0:12:41.640 --> 0:12:42.640 to hack any systems. 0:12:43.160 --> 0:12:47.439 But it's just a weird little moment where he's taken 0:12:47.480 --> 0:12:52.320 over all the computers in the cyber cafe. Now, let's 0:12:52.320 --> 0:12:54.400 go ahead and make some things clear, Shannon. I know 0:12:54.480 --> 0:13:01.199 that you've addressed this on multiple episodes and ways of 0:13:01.400 --> 0:13:04.880 reaching out to your audience. There are certain things you 0:13:04.880 --> 0:13:07.960 should be concerned about when you go and log into 0:13:08.120 --> 0:13:12.080 any kind of local area network, any kind of open 0:13:12.160 --> 0:13:14.920 Wi Fi. If you're going to a coffee shop and 0:13:14.960 --> 0:13:17.400 you're using that kind of Wi Fi, you need to 0:13:17.440 --> 0:13:18.959 be more. 0:13:20.320 --> 0:13:22.680 Aware of potential security problems. 0:13:23.840 --> 0:13:28.559 Yes, absolutely, it's very easy if you're on your local 0:13:28.960 --> 0:13:32.400 coffee shops network or your local hotels network for anybody 0:13:32.400 --> 0:13:36.280 to snoop on what you're doing. You may be using HTTPS, 0:13:36.320 --> 0:13:38.640 but that's not going to keep somebody from understanding what 0:13:38.720 --> 0:13:41.960 sites you are visiting. But even though that data may 0:13:42.000 --> 0:13:45.400 be encrypted, however, they're still collecting. 0:13:44.920 --> 0:13:46.080 That encrypted information. 0:13:46.400 --> 0:13:50.040 And it really just depends on how a website that 0:13:50.080 --> 0:13:52.720 you're visiting is encrypting that information, whether or not they 0:13:52.760 --> 0:13:55.920 would be able to decrypt it after a specific amount 0:13:55.960 --> 0:13:56.240 of time. 0:13:57.000 --> 0:13:58.200 So I always tell. 0:13:58.080 --> 0:14:02.000 People if they're going to use a hotel Wi Fi 0:14:02.120 --> 0:14:05.160 or a coffee shop WiFi, to use a VPN, use 0:14:05.200 --> 0:14:07.760 some way to tunnel your traffic from point A to 0:14:07.800 --> 0:14:10.559 point B so that nobody else on that network will 0:14:10.559 --> 0:14:12.480 be able to see what you're doing. They may see 0:14:12.480 --> 0:14:14.720 that you're logged on, they may see your IP address, 0:14:14.760 --> 0:14:17.719 but they won't know exactly what's going on with your 0:14:17.720 --> 0:14:21.360 traffic while you're connected. So, and I'm pretty sure that 0:14:21.480 --> 0:14:27.040 everybody who generally uses these Wi Fi networks that are 0:14:27.040 --> 0:14:31.440 available for free aren't necessarily using VPNs, But it's a 0:14:31.600 --> 0:14:35.840 huge security risk for pretty much every consumer out there 0:14:35.880 --> 0:14:38.400 that's using these Wi Fi networks. 0:14:38.040 --> 0:14:40.640 Right, And whereas in the core, you know we were talking, 0:14:40.680 --> 0:14:44.440 it's really hardwired computers that are part of the cyber cafe. 0:14:44.480 --> 0:14:46.200 You just sit down at a terminal and log in 0:14:46.280 --> 0:14:48.360 so that you have access to everything on that machine. 0:14:48.640 --> 0:14:51.680 That's scary too. I mean, it's kind of like using 0:14:51.680 --> 0:14:54.280 a computer at the library. You want to be very 0:14:54.320 --> 0:14:56.960 careful about the kinds of activities you do on that 0:14:57.040 --> 0:15:01.240 machine because it's not really you, and you don't really 0:15:01.720 --> 0:15:03.680 you know, and you don't want to go so far 0:15:03.840 --> 0:15:07.000 to cover your tracks that you're actually causing problems for 0:15:07.080 --> 0:15:10.440 the real purpose of that machine. Still not quite sure 0:15:10.480 --> 0:15:11.800 what he was trying to do. It was like he 0:15:11.840 --> 0:15:14.920 was setting up his own little botnet. Also, if you 0:15:15.000 --> 0:15:17.560 are setting up a botnet, probably a bad idea to 0:15:17.600 --> 0:15:20.000 have a graphic pop up on everyone's screen saying, hey, 0:15:20.040 --> 0:15:21.360 your computer's mine now. 0:15:22.080 --> 0:15:27.000 Yeah, so it's In today's age, it is very popular 0:15:27.000 --> 0:15:33.520 for people to use ransomware, which will basically announces its 0:15:33.640 --> 0:15:37.080 availability on your computer. Yeah, it'll announce its presence on 0:15:37.120 --> 0:15:40.360 your machine to let the user know, Hey, I've just 0:15:40.440 --> 0:15:43.680 encrypted all the information, all the photos, all the documents 0:15:43.720 --> 0:15:45.720 that is on your computer. Now you have to pay 0:15:45.760 --> 0:15:48.520 me like one bitcoin to get your data back, and 0:15:48.520 --> 0:15:50.320 then you pay that bitcoin and you may or may 0:15:50.320 --> 0:15:52.960 not get your data back. So, you know, ransomware it's 0:15:52.960 --> 0:15:56.040 a big thing. But in the case of this one, 0:15:56.120 --> 0:15:59.280 in the case of rat yes, you can install like 0:15:59.440 --> 0:16:01.240 malwares something like that on a CD. 0:16:01.400 --> 0:16:02.480 That's entirely possible. 0:16:02.520 --> 0:16:05.040 You can put pretty much anything on a CD, and 0:16:05.080 --> 0:16:09.000 then it looks like he's he's running this CD through 0:16:09.040 --> 0:16:12.960 the entire network, which you can install malware through pivoting 0:16:13.160 --> 0:16:18.040 a network's open ports or open eyps, so that you 0:16:18.120 --> 0:16:21.120 can put the same power on several different computers. But 0:16:21.160 --> 0:16:24.040 it's it's never a good idea to let everybody know 0:16:24.120 --> 0:16:27.040 what the heck you're doing if you're doing something that 0:16:27.080 --> 0:16:29.040 you shouldn't necessarily be doing. 0:16:28.840 --> 0:16:29.520 In the first place. 0:16:29.920 --> 0:16:33.800 Yeah, yeah, I mean again, it's there for dramatic effect. 0:16:34.240 --> 0:16:36.840 But if you're the one person in the cyber cafe 0:16:36.880 --> 0:16:40.600 who isn't visibly freaking out when all the computers switch over, 0:16:41.720 --> 0:16:44.000 here's a here's a little hint, they're going to figure 0:16:44.000 --> 0:16:48.600 out it was you, right, I mean, that's kind of like, 0:16:48.640 --> 0:16:51.040 if you're the one guy not surprised that everything's on fire, 0:16:51.280 --> 0:16:52.720 you probably set the fire. 0:16:53.200 --> 0:16:54.120 I'm just saying. 0:16:55.080 --> 0:16:57.640 Shannon and I will be back to talk more about 0:16:57.880 --> 0:17:10.320 the worst hacking scenes from Hollywood this quick break. Our 0:17:10.359 --> 0:17:13.040 next example comes from one of my favorite movies of 0:17:13.080 --> 0:17:13.760 all time. 0:17:14.040 --> 0:17:16.359 Oh my gosh, me too. I love this movie, The Net. 0:17:17.119 --> 0:17:22.040 Yes, Oh it's so great. It's so cheesy and wonderful. 0:17:22.480 --> 0:17:25.200 The Net also is a movie in which a character 0:17:25.240 --> 0:17:29.639 actually has her identity stolen, and very prescient for its time. 0:17:29.720 --> 0:17:31.680 It's not like it got everything wrong. Some of the 0:17:31.680 --> 0:17:35.360 stuff it actually predicted quite well. For example, best prediction 0:17:35.520 --> 0:17:37.960 of any movie ever it predicted being able to order 0:17:38.000 --> 0:17:45.320 pizza online. This was before the dot com bubble even began. 0:17:45.480 --> 0:17:47.760 This the movie came out in the mid nineties, so 0:17:48.640 --> 0:17:52.600 this was actually pretty advanced. The people behind the film said, 0:17:52.760 --> 0:17:57.240 we wanted to be able to let our character make 0:17:57.280 --> 0:18:03.000 an activity online that would stress how she was distancing 0:18:03.000 --> 0:18:04.000 herself from other people. 0:18:04.040 --> 0:18:05.480 She was trying her best to. 0:18:05.520 --> 0:18:09.160 Limit the amount of interaction she had with other human beings. 0:18:09.520 --> 0:18:14.000 It stresses her loneliness, also her paranoia to some extent, 0:18:14.560 --> 0:18:16.720 and it was a neat way of doing it, and 0:18:16.720 --> 0:18:21.240 it also ended up being accurate. However, that being said, 0:18:21.840 --> 0:18:24.600 there's a bit in the very beginning. It's right when 0:18:24.600 --> 0:18:27.320 she's going to order pizza, when she's on the phone 0:18:27.359 --> 0:18:30.320 with a client and she does essentially tech support and 0:18:30.760 --> 0:18:34.520 really helps people who have been attacked by a virus 0:18:34.600 --> 0:18:39.000 recover their systems, and it takes her like no time 0:18:39.000 --> 0:18:41.359 at all to identify what the virus is on this 0:18:41.480 --> 0:18:44.119 customer's computer, which she does not have access to. 0:18:44.840 --> 0:18:46.240 She's accessing it remotely. 0:18:47.640 --> 0:18:51.159 She identifies the virus, she sequesters the virus. She removes 0:18:51.200 --> 0:18:55.480 the virus, plus apparently does repairs to the system so 0:18:55.040 --> 0:18:58.240 it so it starts working again, and that takes her 0:18:58.880 --> 0:19:00.600 less time than it would take for her to order 0:19:00.640 --> 0:19:06.760 the pizza. That's incredible. I mean, she should Every security 0:19:06.800 --> 0:19:07.720 firm should hire her. 0:19:08.880 --> 0:19:10.240 She's a genius apparently. 0:19:10.400 --> 0:19:12.600 Yeah, so I like making. 0:19:12.320 --> 0:19:15.480 The comparison between Sandra Bullock's character in the Net to 0:19:15.760 --> 0:19:18.640 an actual penetration tester that we have in the two 0:19:18.680 --> 0:19:22.320 thousands or in the twenty tens. In the twenty tens, 0:19:22.440 --> 0:19:26.480 penetration testers go through contracts. They go through a company. 0:19:26.520 --> 0:19:30.320 They're usually hired on by a large firm to go 0:19:30.400 --> 0:19:33.280 through their security and make sure everything's okay. They have 0:19:33.320 --> 0:19:37.000 to write reports, everything has to go through a financial 0:19:37.200 --> 0:19:40.560 financialist before they're actually paid for any of their work. 0:19:41.040 --> 0:19:44.320 They don't actually discuss how much they're getting paid with 0:19:44.640 --> 0:19:47.399 the client. They discuss how much they're getting paid with 0:19:47.480 --> 0:19:51.280 the company that they are salaried through. So in the 0:19:51.320 --> 0:19:55.080 case of Sandra Bullock's character here, she's talking about you know, 0:19:55.600 --> 0:19:58.680 oh yeah, I mean he's like, yeah, I'm gonna pay 0:19:58.880 --> 0:20:00.560 X amount of money and he's like, I don't care 0:20:00.600 --> 0:20:02.520 how much it costs, it's worth it, and that's not 0:20:02.560 --> 0:20:06.080 necessarily something that you would talk to the penetration tester about, right, 0:20:06.440 --> 0:20:09.960 because when you do, they're going to make their they're 0:20:09.960 --> 0:20:11.720 going to make their time with you as a client 0:20:11.840 --> 0:20:14.280 much longer to make it seem like a much more 0:20:14.320 --> 0:20:15.080 important case. 0:20:15.640 --> 0:20:18.520 Yeah, so if you if you do, uh, you know, 0:20:18.880 --> 0:20:20.879 it's kind of like what Scotty would say is that 0:20:20.960 --> 0:20:23.520 he'd say he'd figure out how long it was going 0:20:23.600 --> 0:20:26.560 to take him to do a task, and then he 0:20:26.640 --> 0:20:29.240 would then he would give the captain a time that 0:20:29.400 --> 0:20:31.359 was longer than what it would take him to do. 0:20:32.119 --> 0:20:34.320 In that case, it wasn't so that he could get overtime. 0:20:34.359 --> 0:20:36.320 It was so that he could impress the captain by 0:20:36.359 --> 0:20:37.320 finishing early. 0:20:37.920 --> 0:20:38.120 Right. 0:20:38.200 --> 0:20:39.679 It's like I told you it was going to take 0:20:39.720 --> 0:20:42.399 me three days, but I really put my nose to 0:20:42.440 --> 0:20:44.320 the grindstone and got it done in a day and 0:20:44.359 --> 0:20:48.359 a half and the Captain's and pressed like, wow, you're amazing. 0:20:48.480 --> 0:20:50.919 In this case, it would be yeah, that's probably going 0:20:51.000 --> 0:20:51.439 to take me. 0:20:51.760 --> 0:20:53.879 You know, I don't know a week's worth of work 0:20:53.920 --> 0:20:56.320 and you're done in you know, five hours, then you're 0:20:56.359 --> 0:20:58.840 just billing the time, right. 0:20:59.040 --> 0:21:02.199 So so during the conversation that needs two have, it 0:21:02.320 --> 0:21:05.080 sounds like she's a like she's a red teamer, Like 0:21:05.119 --> 0:21:08.280 she's a penetration tester that works for a big security firm, 0:21:08.720 --> 0:21:12.320 and she's she's talking to her client though, but but 0:21:12.520 --> 0:21:15.360 her actions make me think that she's a freelancer. 0:21:15.760 --> 0:21:17.600 So I'm not sure what's going on here. 0:21:17.640 --> 0:21:20.320 I think that they that it was produced a little 0:21:20.320 --> 0:21:25.040 bit confusingly, But now that I understand how penetration testing works, 0:21:25.520 --> 0:21:28.280 even though I am not one myself, I was quite 0:21:28.280 --> 0:21:30.040 confused by this scene. 0:21:30.240 --> 0:21:33.800 Yeah, I I I think it was. Out of all 0:21:33.840 --> 0:21:36.879