WEBVTT 1 00:00:00.000 --> 00:00:02.359 All right, so are you ready to dive into some hacking? 2 00:00:02.560 --> 00:00:04.360 I know, I know the word hacking can sound a 3 00:00:04.360 --> 00:00:07.120 little intimidating, like something out of a movie, right, but 4 00:00:07.240 --> 00:00:10.519 trust me, it's way more fascinating in real life. 5 00:00:10.599 --> 00:00:13.320 Oh absolutely, and it's something everyone should understand a bit better, 6 00:00:13.519 --> 00:00:14.919 even if you're not a tech expert. 7 00:00:15.039 --> 00:00:18.120 Exactly, And that's why we're doing this deep dive into 8 00:00:18.160 --> 00:00:20.480 this book. You ready for the title, maybe with it? 9 00:00:20.960 --> 00:00:25.239 Hacking Linux The Complete Beginner's Programming System Guide with practical 10 00:00:25.239 --> 00:00:29.320 hacking tools and essential basics of hack includes Cali Linux, 11 00:00:29.359 --> 00:00:32.920 step by step security testing and penetration testing. 12 00:00:33.240 --> 00:00:35.439 Oho. Okay, they weren't messing around. 13 00:00:35.200 --> 00:00:37.280 With that title, right straight to the point, and that's 14 00:00:37.320 --> 00:00:39.000 what we're going to do today too. We'll break it 15 00:00:39.000 --> 00:00:42.039 all down the tactics hackers use, the tools they use, 16 00:00:42.320 --> 00:00:44.640 what it all means for you and me. Think of 17 00:00:44.679 --> 00:00:48.880 this deep dive as your cybersecurity boot camp, but way 18 00:00:48.960 --> 00:00:49.479 more fun. 19 00:00:49.560 --> 00:00:52.079 It's like getting a peak behind the curtain, right exactly. 20 00:00:52.560 --> 00:00:55.600 Okay, so let's start with the basics. We've all heard 21 00:00:55.640 --> 00:01:01.159 about these basic PC protection steps, installing antivirus software, setting 22 00:01:01.240 --> 00:01:04.480 up a firewall, backing up your data, but here's the question, 23 00:01:05.079 --> 00:01:08.719 are those really enough these days? I mean, everything's online 24 00:01:08.760 --> 00:01:11.319 and there always seems to be a new threat popping up. 25 00:01:11.519 --> 00:01:13.680 That's the big question, isn't it. It's like building a house. 26 00:01:13.760 --> 00:01:16.319 Sure you need a good foundation, but you also need 27 00:01:16.439 --> 00:01:19.840 strong walls, a secure roof. You got to think about 28 00:01:19.879 --> 00:01:21.480 all those extra layers of protection. 29 00:01:21.640 --> 00:01:24.040 Okay, ditch the construction metaphors for a sec let's talk 30 00:01:24.040 --> 00:01:28.599 about those hacker tactics. The book mentions some really sneaky stuff, 31 00:01:28.680 --> 00:01:31.599 like keyloggers. I mean, what even is a keylogger? 32 00:01:31.959 --> 00:01:35.280 So imagine someone secretly recording every key you press on 33 00:01:35.319 --> 00:01:38.959 your keyboard. Yeah everything? Okay, that's unsettling, right, And that's 34 00:01:39.040 --> 00:01:42.239 essentially what a keylogger does. It captures your emails, your passwords, 35 00:01:42.280 --> 00:01:43.599 your bank details, everything. 36 00:01:43.719 --> 00:01:46.040 Oh wow, that's why those virtual keyboards pop up on 37 00:01:46.079 --> 00:01:46.920 banking sites. 38 00:01:46.760 --> 00:01:49.680 Right exactly. They may it much harder for keyloggers to 39 00:01:49.760 --> 00:01:51.239 grab that sensitive information. 40 00:01:51.480 --> 00:01:53.599 Ah, that makes sense. So when I'm doing my online 41 00:01:53.640 --> 00:01:56.079 banking and I'm like pecking at the screen like I'm 42 00:01:56.079 --> 00:01:59.920 playing a piano, that's why pretty much. Okay, But those keyloggers, 43 00:02:00.040 --> 00:02:01.400 they're not always bad, right, You're. 44 00:02:01.359 --> 00:02:07.040 Right, Sometimes they're used for legitimate reasons, like in some companies, 45 00:02:07.040 --> 00:02:10.560 they might use them to monitor employee activity, especially in 46 00:02:10.639 --> 00:02:14.479 industries where security is super important. It's about making sure 47 00:02:14.520 --> 00:02:16.960 everyone's following the rules and keeping things safe. 48 00:02:17.039 --> 00:02:19.000 Oh okay. Interesting. So it's a tool that can be 49 00:02:19.080 --> 00:02:21.159 used for good or bad. I guess it depends on 50 00:02:21.199 --> 00:02:22.159 who's behind the keyboard. 51 00:02:22.159 --> 00:02:24.039 It all comes down to intent absolutely. 52 00:02:24.479 --> 00:02:27.400 Okay. So, speaking of double edged swords, let's talk about 53 00:02:27.439 --> 00:02:31.879 denial of service attacks DOS attacks or d DOSS attacks. 54 00:02:32.560 --> 00:02:35.879 The book describes this as like flooding a website with 55 00:02:35.919 --> 00:02:37.479 so much traffic that it crashes. 56 00:02:37.599 --> 00:02:40.479 It's like that old saying too many cooks in the kitchen, right, or. 57 00:02:40.400 --> 00:02:43.439 Like trying to fit a thousand elephants through a revolving door. 58 00:02:43.879 --> 00:02:47.919 Chaos here, chaos. And what's interesting is both activists, you know, 59 00:02:48.000 --> 00:02:51.360 people hacking for a cause, and the bad guys, the 60 00:02:51.400 --> 00:02:54.560 black hat hackers, they both use this tactic. 61 00:02:54.960 --> 00:02:57.520 Oh wow, So even the tools used for good can 62 00:02:57.560 --> 00:02:59.240 be twisted for bad purposes. 63 00:02:59.360 --> 00:03:00.319 It happens all the time. 64 00:03:00.520 --> 00:03:03.199 Okay, that's a lot to think about. But before we 65 00:03:03.240 --> 00:03:05.159 get lost in the ethics of all this, I want 66 00:03:05.159 --> 00:03:09.120 to talk about another technique. The book mentions social engineering. 67 00:03:09.560 --> 00:03:12.680 It seems like hacking isn't always about you know, crazy 68 00:03:12.759 --> 00:03:16.879 coding skills. Sometimes it's about good old fashioned trickery. 69 00:03:17.199 --> 00:03:20.120 You got it. Social engineering is all about the human 70 00:03:20.159 --> 00:03:23.520 element taking advantage of our trust, our willingness to help. 71 00:03:24.039 --> 00:03:27.840 There are two main types, really, psychological and technical. 72 00:03:27.919 --> 00:03:29.280 Okay, so break goes down for me. 73 00:03:29.400 --> 00:03:32.919 So on the psychological side, think of like pretexting, Like 74 00:03:33.360 --> 00:03:36.400 a hacker might call you pretending to be from say 75 00:03:36.759 --> 00:03:39.120 tech support. They try to trick you into giving them 76 00:03:39.159 --> 00:03:39.759 sensitive info. 77 00:03:39.919 --> 00:03:41.960 Oh wow, so you think you're talking to someone legitimate 78 00:03:42.039 --> 00:03:43.719 and they're actually a hacker exactly. 79 00:03:43.840 --> 00:03:47.479 And then there's name dropping, casually mentioning familiar names to 80 00:03:47.479 --> 00:03:48.159 gain your trust. 81 00:03:48.319 --> 00:03:50.439 It's like that scene in every spy movie where the 82 00:03:50.520 --> 00:03:52.960 agent uses a fake ID and a charming smile to 83 00:03:52.960 --> 00:03:56.199 get past security. So what about the technical side of 84 00:03:56.199 --> 00:03:57.080 social engineering. 85 00:03:57.319 --> 00:04:02.000 On the technical side, it's all about using technology to deceive. 86 00:04:02.599 --> 00:04:05.599 You've probably seen those phishing emails. They look so real 87 00:04:06.159 --> 00:04:08.280 they might lure you into clicking on a bad link 88 00:04:08.400 --> 00:04:09.960 or downloading something you shouldn't. 89 00:04:10.080 --> 00:04:12.360 Like those emails that say you won the lottery even 90 00:04:12.400 --> 00:04:13.520 though you never bought a ticket. 91 00:04:13.719 --> 00:04:16.759 Exactly as a reminder that things aren't always what they seem, 92 00:04:17.079 --> 00:04:17.879 even online. 93 00:04:17.920 --> 00:04:19.680 So it seems like a good hacker needs to be 94 00:04:19.879 --> 00:04:22.519 part tech whiz, part master manipulator. 95 00:04:22.600 --> 00:04:24.959 It's a unique skill set, that's for sure, it is. 96 00:04:25.279 --> 00:04:27.759 But let's move on from the techniques and talk about 97 00:04:27.759 --> 00:04:32.399 the tools. The book mentions building a hacking environment, and 98 00:04:32.439 --> 00:04:34.800 it keeps coming back to this thing called Collie Linux. 99 00:04:35.720 --> 00:04:38.720 For someone who doesn't speak code, what is Callie Linux 100 00:04:39.120 --> 00:04:42.040 and why is it so popular in the cybersecurity world. 101 00:04:42.519 --> 00:04:46.079 Think of Callie Linux as a hacker's toolbox, but like 102 00:04:46.519 --> 00:04:47.879 the ultimate Deluxe version. 103 00:04:47.959 --> 00:04:50.240 Okay, so it's packed with all sorts of tools. 104 00:04:49.879 --> 00:04:53.560 And software exactly. It's specifically designed for penetration testing and 105 00:04:53.600 --> 00:04:54.639 security assessments. 106 00:04:54.759 --> 00:04:58.120 So it's kind of like a digital Swiss Army Knife 107 00:04:58.199 --> 00:05:02.759 for cybersecurity pros. Analogy, Okay, that makes sense. But the 108 00:05:02.800 --> 00:05:07.120 book mentions three ways to install Collie Linux directly on 109 00:05:07.160 --> 00:05:10.240 your hard drive, using a multi boot setup, or running 110 00:05:10.279 --> 00:05:13.560 it in a virtual machine. For someone who's just starting out, 111 00:05:13.879 --> 00:05:14.920 what's the best way to go? 112 00:05:15.160 --> 00:05:19.199 I definitely recommend a virtual machine, especially for beginners. 113 00:05:19.279 --> 00:05:20.319 What's the advantage there? 114 00:05:20.639 --> 00:05:24.959 So with the virtual machine, you're creating a safe, isolated environment. 115 00:05:25.639 --> 00:05:28.560 It's like a sandbox where you can experiment without risking 116 00:05:28.600 --> 00:05:29.519 your actual computer. 117 00:05:29.879 --> 00:05:33.439 Ah okay, so I can play around with potentially dangerous 118 00:05:33.480 --> 00:05:36.800 tools without worrying about messing up my whole system. Precisely, 119 00:05:36.879 --> 00:05:39.040 it's like those cooking shows where they have separate ovens 120 00:05:39.040 --> 00:05:39.920 for each contestant. 121 00:05:40.000 --> 00:05:43.120 Ah, exactly. Each virtual machine is like its own little kitchen. 122 00:05:43.360 --> 00:05:45.800 I love that analogy. Okay, so virtual machines are the 123 00:05:45.800 --> 00:05:48.639 way to go for safety. But the book also stresses 124 00:05:48.680 --> 00:05:51.600 that you should only download that Collie Linux installation file 125 00:05:51.680 --> 00:05:55.079 from a trusted source. Oh, absolutely right, because downloading from 126 00:05:55.079 --> 00:05:57.839 a shady site is like accepting candy from a stranger 127 00:05:57.879 --> 00:05:58.240 in a van. 128 00:05:58.600 --> 00:06:01.120 You never know what you're going to get. Stick to 129 00:06:01.160 --> 00:06:04.839 the official Collie Linux website to be safe. Got it. Okay. 130 00:06:04.839 --> 00:06:06.920 So once you've got your virtual sandbox set up and 131 00:06:07.000 --> 00:06:11.160 Collie Linux is installed, the book starts talking about vulnerabilities 132 00:06:11.160 --> 00:06:14.319 and exploits. It's kind of like a hacker's treasure hunt, right. 133 00:06:14.439 --> 00:06:15.439 It is a bit like that. 134 00:06:15.600 --> 00:06:18.439 You find the weakness, figure out how to exploit it, 135 00:06:18.800 --> 00:06:19.959 and boom, you're in. 136 00:06:20.120 --> 00:06:22.920 It's a constant back and forth between security pros trying 137 00:06:22.920 --> 00:06:25.839 to lock things down and hackers trying to find those cracks. 138 00:06:26.160 --> 00:06:30.439 Every system has vulnerabilities, every single one. Okay, that's a 139 00:06:30.439 --> 00:06:31.800 little unsettling. 140 00:06:31.360 --> 00:06:32.160 It's the reality. 141 00:06:32.759 --> 00:06:35.279 So how do they find those weaknesses? I mean, the 142 00:06:35.319 --> 00:06:39.120 book mentions these vulnerability scanners nick too and Nessus. They 143 00:06:39.160 --> 00:06:40.920 sound like something out of a sci fi movie. 144 00:06:40.959 --> 00:06:41.800 They do, don't they. 145 00:06:42.279 --> 00:06:44.560 So what do these scanners actually do? 146 00:06:44.759 --> 00:06:48.519 Think of them like digital bloodhounds sniffing out weaknesses. They 147 00:06:48.600 --> 00:06:52.959 probe systems looking for known vulnerabilities. Basically, they're looking for 148 00:06:52.959 --> 00:06:54.279 any way a hacker could get in. 149 00:06:54.399 --> 00:06:56.959 Okay and Neessus, you said it can do two types 150 00:06:57.000 --> 00:06:57.519 of scans. 151 00:06:57.839 --> 00:07:00.000 Yeah, intrusive and non intrusive. 152 00:07:00.160 --> 00:07:03.800 What's the difference. Well, an intrusive scan is more aggressive. 153 00:07:04.439 --> 00:07:08.480 It actively tests the system's defenses, which is helpful for 154 00:07:08.600 --> 00:07:12.319 uncovering deep rooted problems, but it might cause some hiccups 155 00:07:12.319 --> 00:07:12.879 along the way. 156 00:07:13.439 --> 00:07:15.560 So it's a thorough check up, but it might shake 157 00:07:15.600 --> 00:07:17.639 things up a bit, exactly. And what about the non 158 00:07:17.639 --> 00:07:18.439 intrusive scan. 159 00:07:18.720 --> 00:07:22.120 A non intrusive scan is more gentle. It gathers information 160 00:07:22.199 --> 00:07:25.680 about the system without actively poking and prodding it. 161 00:07:25.639 --> 00:07:28.079 So it's like taking a look around without touching anything. 162 00:07:28.439 --> 00:07:28.920 You got it? 163 00:07:29.120 --> 00:07:31.759 Okay, that makes sense. But then there's this other tool, 164 00:07:32.040 --> 00:07:35.000 metasploit that one seems less about just scanning and more 165 00:07:35.000 --> 00:07:37.399 about actively exploiting vulnerabilities. 166 00:07:37.560 --> 00:07:40.680 Right. Metasploit is a framework that security professionals use to 167 00:07:40.759 --> 00:07:43.600 simulate attacks that use it to see how well a 168 00:07:43.680 --> 00:07:44.920 system can defend itself. 169 00:07:45.040 --> 00:07:48.199 So it's like a virtual training ground for cybersecurity experts. 170 00:07:48.199 --> 00:07:49.639 Absolutely, that's kind of cool. 171 00:07:49.639 --> 00:07:52.240 Actually, But let's say I'm using metasploit to simulate an 172 00:07:52.279 --> 00:07:55.959 attack and I find a vulnerability. What happens next? How 173 00:07:56.000 --> 00:07:58.120 do I actually get into the system? 174 00:07:58.240 --> 00:08:00.839 That's where payloads come in. Payloads, Yeah, think of it 175 00:08:00.879 --> 00:08:03.439 as the code that gets executed on the target system 176 00:08:03.480 --> 00:08:04.519 once you've found a way in. 177 00:08:04.800 --> 00:08:07.839 Ah. Okay, So it's like choosing the right tool for 178 00:08:07.920 --> 00:08:10.160 the job, depending on what you want to do exactly. 179 00:08:10.600 --> 00:08:13.439 There are all sorts of payloads, each with a different purpose. 180 00:08:13.680 --> 00:08:15.600 Like some give you a command line on the target 181 00:08:15.600 --> 00:08:18.319 system so you can control it remotely. Others give you 182 00:08:18.360 --> 00:08:21.240 access to the target's desktop. It really depends on what 183 00:08:21.319 --> 00:08:22.120 you're trying to achieve. 184 00:08:22.399 --> 00:08:26.160 Wow, So it's like having a whole arsenal of digital 185 00:08:26.199 --> 00:08:28.000 weapons at your disposal in a way. 186 00:08:28.120 --> 00:08:28.319 Yes. 187 00:08:28.720 --> 00:08:30.560 Okay, but let's bring this back to the real world 188 00:08:30.600 --> 00:08:34.399 for a second. What are some examples of real world 189 00:08:34.519 --> 00:08:38.080 vulnerabilities that hackers have exploited, you know, something our listeners 190 00:08:38.159 --> 00:08:38.639 might remember. 191 00:08:39.759 --> 00:08:41.720 Well, one that comes to mind is the heart bleed bug. 192 00:08:41.960 --> 00:08:44.679 Heart bleed, Yeah, there's this discovered back in twenty fourteen. 193 00:08:44.840 --> 00:08:47.799 It affected open SSL, which is a piece of software 194 00:08:47.879 --> 00:08:50.320 used to encrypt communications online, so like. 195 00:08:50.320 --> 00:08:52.679 When you're shopping online or checking your bank account, that 196 00:08:52.759 --> 00:08:54.039 kind of encryption exactly. 197 00:08:54.360 --> 00:08:57.399 And this bug it was like a leaky faucet in 198 00:08:57.440 --> 00:09:00.879 a bank vault. It allowed attackers to potentially steal sensitive 199 00:09:00.919 --> 00:09:04.559 information passwords, credit card numbers, you name. 200 00:09:04.399 --> 00:09:07.519 It, from websites and servers that we're using this vulnerable 201 00:09:07.600 --> 00:09:10.039 version of OpenSSL. That's terrifying. 202 00:09:10.159 --> 00:09:11.799 It was a big deal. It showed how even a 203 00:09:11.879 --> 00:09:15.279 seemingly small vulnerability can have massive consequences. 204 00:09:15.360 --> 00:09:18.360 So it's like one tiny crack in the armor and 205 00:09:18.399 --> 00:09:19.960 the whole castle can crumble. 206 00:09:20.759 --> 00:09:21.799 That's a good way to put it. 207 00:09:21.799 --> 00:09:24.559 It really highlights how important it is to stay informed 208 00:09:24.600 --> 00:09:26.440 about these security threats. 209 00:09:26.200 --> 00:09:29.919 Right absolutely, and to patch those vulnerabilities as soon as possible. 210 00:09:30.039 --> 00:09:32.080 It's a constant arms race between the good guys and 211 00:09:32.120 --> 00:09:34.279 the bad guys, that's for sure. Okay, well, that's a 212 00:09:34.320 --> 00:09:37.000 lot to digest for now, but don't worry. We'll be 213 00:09:37.039 --> 00:09:39.279 back to unpack even more in part two of this 214 00:09:39.360 --> 00:09:39.879 deep dive. 215 00:09:40.279 --> 00:09:42.720 It's a constant battle, for sure. And sometimes it's not 216 00:09:42.759 --> 00:09:45.559 even about breaking into systems. It's about manipulating the data 217 00:09:45.600 --> 00:09:46.440 that's already there. 218 00:09:46.679 --> 00:09:50.039 Data manipulation. That sounds even sneakier it is. 219 00:09:50.080 --> 00:09:53.080 It's like, instead of robbing a bank, you subtly change 220 00:09:53.120 --> 00:09:57.000 the account balances, a slow, quiet erosion of trust. 221 00:09:57.240 --> 00:09:59.840 Okay, that's kind of freaky. And the book gives us 222 00:10:00.000 --> 00:10:04.039 example of Juniper Networks. They make networking equipment, right, yeah, 223 00:10:04.080 --> 00:10:07.399 big company, and back in twenty fifteen they discovered that 224 00:10:07.480 --> 00:10:12.000 their systems had been compromised for three years. Can you 225 00:10:12.080 --> 00:10:15.080 imagine someone had planted backdoors in their code? 226 00:10:15.200 --> 00:10:16.440 It was classic Spiona. 227 00:10:16.600 --> 00:10:18.440 So the goal wasn't to make a big splash. It 228 00:10:18.480 --> 00:10:20.440 was to stay hidden exactly. 229 00:10:20.559 --> 00:10:24.759 They wanted to watch, maybe manipulate data, but without anyone noticing. 230 00:10:24.840 --> 00:10:30.480 It's like a ghost in the machine, secretly changing things. Okay, 231 00:10:30.519 --> 00:10:33.399 that's some serious Orwellian stuff right there, and you know, 232 00:10:33.399 --> 00:10:36.360 speaking of manipulation. The book also talks about cloud security. 233 00:10:36.559 --> 00:10:39.200 We're all using cloud services more and more these days, 234 00:10:39.240 --> 00:10:42.000 but what are the risks? What kind of unique challenges 235 00:10:42.080 --> 00:10:42.799 does that create? 236 00:10:43.039 --> 00:10:45.720 Well, one of the biggest concerns is data sovereignty. 237 00:10:46.039 --> 00:10:47.120 Data sovereignty, what's that? 238 00:10:47.440 --> 00:10:50.440 Basically, when you store data in the cloud, you might 239 00:10:50.440 --> 00:10:52.840 not know where it physically lives. Okay, could be in 240 00:10:53.039 --> 00:10:56.360 servers anywhere in the world, and different countries have different 241 00:10:56.440 --> 00:10:58.120 laws and regulations about data. 242 00:10:58.159 --> 00:11:01.000 Oh I see, So like my data could end up 243 00:11:01.039 --> 00:11:03.320 somewhere with weaker privacy laws. 244 00:11:03.360 --> 00:11:06.519 Exactly, and that can create all sorts of legal headaches, 245 00:11:06.639 --> 00:11:08.240 especially for companies. 246 00:11:07.879 --> 00:11:10.159 Right because companies have to follow all sorts of regulations 247 00:11:10.200 --> 00:11:14.720 about handling personal data. Okay, that makes sense. What other 248 00:11:14.840 --> 00:11:17.480 cloud security issues? Should people be aware of? 249 00:11:17.879 --> 00:11:18.639 Data breaches? 250 00:11:18.879 --> 00:11:20.320 Right? Those are always in the news. 251 00:11:20.399 --> 00:11:25.240 Cloud providers, they're a big target for hackers and if 252 00:11:25.240 --> 00:11:28.519 their systems get breached, a lot of companies could be effected. 253 00:11:28.600 --> 00:11:30.600 It's like a domino effect, right, Yeah. 254 00:11:30.399 --> 00:11:33.919 One breach can impact so many businesses and individuals. 255 00:11:34.360 --> 00:11:37.879 So knowing that, what can companies do to make their 256 00:11:37.919 --> 00:11:39.320 cloud data more secure. 257 00:11:39.840 --> 00:11:42.519 Well, end to end encryption is really important. What does 258 00:11:42.559 --> 00:11:45.399 that do It make sure your data is scrambled before 259 00:11:45.399 --> 00:11:48.879 it leaves your control, and it stays scrambled even when 260 00:11:48.919 --> 00:11:50.879 it's being stored and processed in the cloud. 261 00:11:51.200 --> 00:11:52.879 So even if someone gets their hands on the data, 262 00:11:52.960 --> 00:11:53.559 they can't. 263 00:11:53.360 --> 00:11:55.799 Read it exactly. It's like putting it in a lock 264 00:11:55.840 --> 00:11:57.120 box that only you have the key to. 265 00:11:57.440 --> 00:12:00.440 Makes sense. Any other tips for companies. 266 00:12:00.360 --> 00:12:03.639 Yeah, definitely do your research. When you're choosing a cloud provider. 267 00:12:03.679 --> 00:12:06.480 You got to make sure they have top notch security measures, 268 00:12:06.919 --> 00:12:10.720 things like strong access controls, multi factor authentication. 269 00:12:10.320 --> 00:12:12.600 Right, So don't just assume they have everything covered. 270 00:12:12.759 --> 00:12:16.440 Definitely not, and you should regularly audit your cloud environment 271 00:12:16.519 --> 00:12:18.639 make sure everything is still locked down tight. 272 00:12:19.320 --> 00:12:20.879 So it's an ongoing process. 273 00:12:20.919 --> 00:12:24.559 Absolutely. Cloud security is a partnership between the provider and 274 00:12:24.600 --> 00:12:27.240 the customer. Both sides have to be proactive. 275 00:12:27.440 --> 00:12:30.080 Okay, good advice. So now let's shift gears a bit. 276 00:12:30.480 --> 00:12:34.320 The book talks about this huge career potential in cybersecurity. 277 00:12:34.720 --> 00:12:37.080 It mentions it's a trillion dollar. 278 00:12:36.879 --> 00:12:38.679 Industry and growing every day. 279 00:12:38.799 --> 00:12:43.480 Yeah, and with hundreds of thousands of unfilled jobs globally. Wow. 280 00:12:43.759 --> 00:12:45.879 Sounds like a pretty good career path to consider. 281 00:12:46.039 --> 00:12:48.399 It's booming, that's for sure, and it's not hard to 282 00:12:48.440 --> 00:12:51.519 see why. The more reliant we become on technology, the 283 00:12:51.559 --> 00:12:53.039 more we need people to protect it. 284 00:12:53.360 --> 00:12:56.519 Yeah, it's like the new Wild West out there, digitally speaking. 285 00:12:56.879 --> 00:12:58.840 But it's not all just about shooting from the hip, 286 00:12:59.039 --> 00:12:59.720 right Yeah. 287 00:12:59.759 --> 00:12:59.840 No. 288 00:13:00.279 --> 00:13:04.440 The book breaks down these cybersecurity careers into three core areas, 289 00:13:04.720 --> 00:13:10.679 security management, offensive cybersecurity, and defensive cybersecurity. Can you give 290 00:13:10.759 --> 00:13:13.679 us a quick overview of what each one entails? 291 00:13:14.320 --> 00:13:19.080 Sure? So, security management that's all about overseeing the big 292 00:13:19.159 --> 00:13:21.200 picture of security for an organization. 293 00:13:21.240 --> 00:13:22.960 Okay, so like the strategic planning. 294 00:13:22.720 --> 00:13:28.679 Exactly, risk assessment, policy development, incident response. It's all about leadership. 295 00:13:28.240 --> 00:13:30.919 Got it. So if you're someone who likes to think 296 00:13:30.960 --> 00:13:34.200 strategically and be in charge, that might be a good fit. 297 00:13:34.320 --> 00:13:38.759 What about offensive cybersecurity? That sounds a bit more action packed. 298 00:13:38.960 --> 00:13:41.320 It is. That's where the ethical hackers come in. They're 299 00:13:41.320 --> 00:13:44.559 the ones proactively trying to find and exploit vulnerabilities. 300 00:13:44.039 --> 00:13:46.320 So they're basically trying to hack their own systems in. 301 00:13:46.279 --> 00:13:49.360 A controlled way. Yes, the idea is to find the 302 00:13:49.399 --> 00:13:51.200 weaknesses before the bad guys. 303 00:13:50.960 --> 00:13:54.240 Do that's pretty cool. And what about the defensive cybersecurity folks. 304 00:13:54.320 --> 00:13:57.399 Are they trying to build like impenetrable walls. 305 00:13:57.639 --> 00:14:01.000 You could say that they're focused on protecting systems from attacks, 306 00:14:01.200 --> 00:14:05.120 making sure those walls are strong, implementing fire walls, intrusion 307 00:14:05.159 --> 00:14:08.120 detection systems, all those layers of protection we talked about 308 00:14:08.159 --> 00:14:09.200 earlier makes sense. 309 00:14:09.279 --> 00:14:12.879 So you've got your strategists, your attackers, and your defenders 310 00:14:13.159 --> 00:14:16.960 all working together to keep things secure. That's the idea, okay, 311 00:14:17.000 --> 00:14:19.200 But let's talk about the money for a second. The 312 00:14:19.240 --> 00:14:22.440 book mentions some of the highest paying jobs in cybersecurity 313 00:14:23.039 --> 00:14:28.399 security analysts, IT security consultants, cybersecurity engineers, and of course 314 00:14:28.440 --> 00:14:32.519 the big one, the chief information security officer, the CISO. 315 00:14:32.840 --> 00:14:35.039 Yeah, those rules are definitely in high demand and. 316 00:14:34.960 --> 00:14:37.320 They come with a hefty paycheck. So what does a 317 00:14:37.320 --> 00:14:39.519 security analyst do day to day? 318 00:14:39.919 --> 00:14:44.440 They're like the detectives of the cybersecurity world, monitoring systems, 319 00:14:44.480 --> 00:14:48.679 looking for suspicious activity, analyzing breaches. They're always on the 320 00:14:48.679 --> 00:14:49.600 lookout for threats. 321 00:14:50.000 --> 00:14:53.279 Sounds intense. What about the IT security consultants. 322 00:14:52.759 --> 00:14:55.399 They're more like advisors. They work with companies to figure 323 00:14:55.399 --> 00:14:58.000 out how secure they are, identify any weaknesses. 324 00:14:58.120 --> 00:15:00.480 So like a cybersecurity checkup exactly. 325 00:15:00.480 --> 00:15:03.200 They come in, do an assessment, make recommendations. 326 00:15:03.240 --> 00:15:06.039 Okay, that makes sense. And cybersecurity engineers what do they do. 327 00:15:06.399 --> 00:15:10.759 They're the builders. They design, implement and manage the security systems. 328 00:15:11.120 --> 00:15:13.240 They need to be really tech savvy and stay on 329 00:15:13.279 --> 00:15:14.919 top of all the latest trends. 330 00:15:14.639 --> 00:15:18.440 So always learning, always, And then you've got the CISO, 331 00:15:19.840 --> 00:15:20.639 the top dog. 332 00:15:21.080 --> 00:15:24.519 Yeah, they're the ones responsible for the whole cybersecurity strategy 333 00:15:24.960 --> 00:15:27.480 for a company. They're the ones who have to answer 334 00:15:27.480 --> 00:15:28.679 if something goes wrong. 335 00:15:29.039 --> 00:15:31.200 So a lot of responsibility. So for any of our 336 00:15:31.240 --> 00:15:34.200 listeners who are thinking, hey, maybe cybersecurity is for me, 337 00:15:35.120 --> 00:15:36.240 what advice. 338 00:15:35.919 --> 00:15:37.960 Would you give them, I'd say go for it. It's 339 00:15:37.960 --> 00:15:40.879 a growing field. Yeah, and the job security is fantastic 340 00:15:41.399 --> 00:15:43.320 and there are so many different paths you can take. 341 00:15:43.519 --> 00:15:45.840 You can go the self taught route, take online courses, 342 00:15:45.879 --> 00:15:48.360 get a formal degree, or even get certified. 343 00:15:48.919 --> 00:15:51.639 And the book even has this story about someone who 344 00:15:52.360 --> 00:15:55.879 switched careers later in life, started in it at thirty 345 00:15:56.039 --> 00:15:58.879 and ended up in a high paying cybersecurity role. So 346 00:15:58.960 --> 00:16:00.600 it's never too late, righty ever too. 347 00:16:00.519 --> 00:16:04.480 Late if you're passionate about technology and you're willing to learn, 348 00:16:05.080 --> 00:16:06.960 there's a place for you in cybersecurity. 349 00:16:07.120 --> 00:16:11.720 Okay, so let's dive into a slightly different area, reverse engineering. 350 00:16:11.960 --> 00:16:15.000 The book describes it as taking something apart to understand 351 00:16:15.039 --> 00:16:18.279 how it works, and in cybersecurity it's often used to 352 00:16:18.320 --> 00:16:19.399 analyze malware. 353 00:16:19.559 --> 00:16:22.240 Right, that's right. It's like being a digital detective. 354 00:16:22.360 --> 00:16:25.440 Instead of a crime scene, you're dissecting a piece of 355 00:16:25.519 --> 00:16:27.200 malicious code exactly. 356 00:16:27.360 --> 00:16:29.080 You're trying to figure out how it works, what it's 357 00:16:29.080 --> 00:16:30.960 designed to do, and how to stop it. 358 00:16:31.120 --> 00:16:33.759 So it's like taking apart a bomb to see how 359 00:16:33.799 --> 00:16:34.519 to diffuse it. 360 00:16:34.600 --> 00:16:35.559 That's a good analogy. 361 00:16:35.679 --> 00:16:38.240 And to do that. What kind of tools do security 362 00:16:38.279 --> 00:16:39.159 professionals use? 363 00:16:39.320 --> 00:16:43.440 Well, there are debuggers and decompilers for starters, Okay. 364 00:16:43.200 --> 00:16:45.000 Can you explain what those do. I'm not a coder. 365 00:16:45.159 --> 00:16:48.039 Sure. A debugger lets you step through code line by line. 366 00:16:48.639 --> 00:16:51.120 You can see how the program is executing, what values 367 00:16:51.120 --> 00:16:53.879 are being stored. It's like slowing down a movie and 368 00:16:53.919 --> 00:16:55.840 watching each frame carefully, so. 369 00:16:55.759 --> 00:16:58.039 You can see exactly what the malware is doing at 370 00:16:58.080 --> 00:16:59.279 each step exactly. 371 00:16:59.840 --> 00:17:03.120 And the decompiler tries to translate machine code, which is 372 00:17:03.159 --> 00:17:07.400 the language computers understand back into something humans can read. 373 00:17:07.559 --> 00:17:10.960 So it's like cracking a secret code in a way. Yes, okay, 374 00:17:11.000 --> 00:17:14.799 that makes sense. The book also mentions something called sandboxes. 375 00:17:15.440 --> 00:17:18.720 What are those and why are they important for analyzing malware? 376 00:17:19.000 --> 00:17:22.400 A sandbox is basically a safe space. It's an isolated 377 00:17:22.480 --> 00:17:24.839 environment where you can run untrusted code. 378 00:17:24.920 --> 00:17:27.480 Okay, So if you're analyzing a piece of malware, you 379 00:17:27.599 --> 00:17:28.720 run it in a sandbox. 380 00:17:28.920 --> 00:17:32.079 Exactly. It's like a quarantine zone. You can observe what 381 00:17:32.119 --> 00:17:35.480 the malware does without it affecting your actual computer. 382 00:17:35.319 --> 00:17:38.640 So you can poke and prod at it without risking 383 00:17:38.799 --> 00:17:39.400 an infection. 384 00:17:39.680 --> 00:17:43.160 Precisely. It's a crucial tool for malware analysis, and. 385 00:17:43.079 --> 00:17:46.480 The book says that virtualization has made malware analysis much 386 00:17:46.559 --> 00:17:49.400 easier and safer. Can you explain how that works? 387 00:17:49.519 --> 00:17:53.680 Sure. Virtualization lets you create multiple virtual machines on one 388 00:17:53.759 --> 00:17:57.640 physical computer. Each virtual machine is isolated from the others, 389 00:17:57.839 --> 00:17:58.359 so you can. 390 00:17:58.319 --> 00:18:01.359 Run malware in one virtual maan and not worry about 391 00:18:01.359 --> 00:18:02.400 it affecting the others. 392 00:18:02.480 --> 00:18:04.880 Exactly, it's like having multiple lab environments. 393 00:18:05.000 --> 00:18:07.160 Okay, that makes a lot of sense. So we've talked 394 00:18:07.200 --> 00:18:10.240 a lot about software security, but what about hardware? Can 395 00:18:10.279 --> 00:18:11.599 hardware be compromised too. 396 00:18:11.960 --> 00:18:15.759 Absolutely. Hardware security is often overlooked, but it's just as 397 00:18:15.799 --> 00:18:17.319 important as software security. 398 00:18:17.400 --> 00:18:21.400 So malware can infect like my printer or my router. 399 00:18:21.880 --> 00:18:24.799 It can infect firmware, which is the software that controls 400 00:18:24.799 --> 00:18:29.240 hardware devices, and even hardware components themselves can be vulnerable. 401 00:18:29.440 --> 00:18:31.160