0:00 Music 0:06 So talking about cell phones, cell phones, I can say that iPhones 0:15 and Androids, like currently not that much vulnerable, but there are possibility for people to run remote administration tools against your phones. 0:28 And I have, I've been working for a while in Android security in Samsung Research America, and I was attacking Android badly with physical attacks. 0:42 With ninja cables and different stuff. 0:45 So that vector is still there. 0:50 I guess it will be fixed. 0:53 But I'm just saying, if somebody is trying to attack you badly with physical devices, you can be affected. 1:02 That is, I'm saying for sure, because you can generate the malicious code, which will act as a keyboard, and the keyboard is supported by Android. 1:16 So it will open the terminal or it will go and download the Manisha software from the website. 1:24 And it will allow it to be run. 1:27 That was tested. 1:28 I have videos of this. 1:30 I will check if I can show them live because I have those videos. 1:38 So also local area networks and Wi-Fi, those two things are also getting hacked a lot. 1:49 So when you connect to Wi-Fi, yesterday we spoke about captive portals. 1:55 So remember that... 1:58 All the protocols which you are using, if they are not HTTPS or they are sending the data like clear text, guys can just try to steal this data. 2:13 I remember like 10 years ago, I was using this software. 2:18 In their scepter. 2:24 Sniffer. 2:27 There is this guy. 2:35 This guy, Interceptor NG. 2:37 This is really crazy guy. 2:39 He spent all his life doing this software. 2:45 You can see that he started in 2011 and the latest release in 2022, but he is still active. 2:56 So if you download this tool for Windows, you can try to see. 3:07 All the possible traffic which is going on through. 3:11 You can do some research activities with that stuff. 3:15 And also this guy, he has a telegram. 3:19 And YouTube. 3:21 I just wanted you to see this guy. 3:24 He is like acting like, you know, like real badass hacker. 3:28 He's so funny. 3:30 And he is, you know, he is good. 3:34 But also he's acting like this. 3:37 This guy, look. 3:38 I just wanted to show you this guy. 3:43 Where is this guy? 3:45 So he's like wearing mask. 3:53 So something like this. 3:55 You got the point, right? 3:57 So like different masks. 4:02 So this guy created this tool, which is barely legal or illegal. 4:07 I'm not even sure about this software. 4:11 But what it does, it is sniffing traffic. 4:14 It is causing other devices to go through this stuff. 4:20 It is using IRPS spoofing, DNS spoofing. 4:24 So all types of spoofing. 4:27 You can use it. 4:28 And yeah, it works like this. 4:33 The HCP spoofing. 4:34 So all the possible spoofing is used on this tool. 4:42 So I remember myself, I ran that software once. 4:48 It was like, you know, many, many years ago. 4:51 So I ran it once. 4:53 That ICQ, think about this. 4:57 I was able just to run, just to click that stuff. 5:02 And ladies which were sitting in the same restaurant, they were chatting in ICQ. 5:08 And we were just seeing what they were chatting about. 5:12 So because ICQ was not secure, ICQ Messenger, this one, 5:20 So it was like extremely popular in post-Soviet countries. 5:25 And yeah, this one. 5:28 This messenger. 5:29 It was the same time when it was... 5:32 MSN Messenger and our Messenger. 5:35 So they compete. 5:37 Miranda also was one of the clients for that stuff. 5:42 So this is ICQ. 5:43 So I'm just telling you that as I remember, Skype and ICQ was possible to just read messages like this. 5:51 So nowadays, it's not that scary. 5:55 Not that scary. 5:56 If you're using the modern messengers, it should not be some guy who will just sit and read your messages. 6:02 But in my life, I had such experience. 6:05 And it was a little bit terrifying.
0:00 Music 0:06 So talking about cell phones, cell phones, I can say that iPhones 0:15 and Androids, like currently not that much vulnerable, but there are possibility for people to run remote administration tools against your phones. 0:28 And I have, I've been working for a while in Android security in Samsung Research America, and I was attacking Android badly with physical attacks. 0:42 With ninja cables and different stuff. 0:45 So that vector is still there. 0:50 I guess it will be fixed. 0:53 But I'm just saying, if somebody is trying to attack you badly with physical devices, you can be affected. 1:02 That is, I'm saying for sure, because you can generate the malicious code, which will act as a keyboard, and the keyboard is supported by Android. 1:16 So it will open the terminal or it will go and download the Manisha software from the website. 1:24 And it will allow it to be run. 1:27 That was tested. 1:28 I have videos of this. 1:30 I will check if I can show them live because I have those videos. 1:38 So also local area networks and Wi-Fi, those two things are also getting hacked a lot. 1:49 So when you connect to Wi-Fi, yesterday we spoke about captive portals. 1:55 So remember that... 1:58 All the protocols which you are using, if they are not HTTPS or they are sending the data like clear text, guys can just try to steal this data. 2:13 I remember like 10 years ago, I was using this software. 2:18 In their scepter. 2:24 Sniffer. 2:27 There is this guy. 2:35 This guy, Interceptor NG. 2:37 This is really crazy guy. 2:39 He spent all his life doing this software. 2:45 You can see that he started in 2011 and the latest release in 2022, but he is still active. 2:56 So if you download this tool for Windows, you can try to see. 3:07 All the possible traffic which is going on through. 3:11 You can do some research activities with that stuff. 3:15 And also this guy, he has a telegram. 3:19 And YouTube. 3:21 I just wanted you to see this guy. 3:24 He is like acting like, you know, like real badass hacker. 3:28 He's so funny. 3:30 And he is, you know, he is good. 3:34 But also he's acting like this. 3:37 This guy, look. 3:38 I just wanted to show you this guy. 3:43 Where is this guy? 3:45 So he's like wearing mask. 3:53 So something like this. 3:55 You got the point, right? 3:57 So like different masks. 4:02 So this guy created this tool, which is barely legal or illegal. 4:07 I'm not even sure about this software. 4:11 But what it does, it is sniffing traffic. 4:14 It is causing other devices to go through this stuff. 4:20 It is using IRPS spoofing, DNS spoofing. 4:24 So all types of spoofing. 4:27 You can use it. 4:28 And yeah, it works like this. 4:33 The HCP spoofing. 4:34 So all the possible spoofing is used on this tool. 4:42 So I remember myself, I ran that software once. 4:48 It was like, you know, many, many years ago. 4:51 So I ran it once. 4:53 That ICQ, think about this. 4:57 I was able just to run, just to click that stuff. 5:02 And ladies which were sitting in the same restaurant, they were chatting in ICQ. 5:08 And we were just seeing what they were chatting about. 5:12 So because ICQ was not secure, ICQ Messenger, this one, 5:20 So it was like extremely popular in post-Soviet countries. 5:25 And yeah, this one. 5:28 This messenger. 5:29 It was the same time when it was... 5:32 MSN Messenger and our Messenger. 5:35 So they compete. 5:37 Miranda also was one of the clients for that stuff. 5:42 So this is ICQ. 5:43 So I'm just telling you that as I remember, Skype and ICQ was possible to just read messages like this. 5:51 So nowadays, it's not that scary. 5:55 Not that scary. 5:56 If you're using the modern messengers, it should not be some guy who will just sit and read your messages. 6:02 But in my life, I had such experience. 6:05 And it was a little bit terrifying.