Cybersecurity Expert Answers Hacking Questions From Twitter | Tech Support | WIRED

Facebook Offensive Security Engineer Amanda Rousseau aka "Malware Unicorn" uses the power of Twitter to answer common questions about hacking. As an offensive security engineer, Amanda has seen just about everything when it comes computer hacking. What exactly is the difference between a black hat and a white hat hacker? Is there such thing as a red hat hacker? What's the point of malware, is it just to be annoying? Are people who start DDoS attacks actually hackers? Amanda answers all these Twitter questions, and much more!
Amanda is an Offensive Security Engineer on the Red Team at Facebook and previously worked as a Malware Researcher at Endgame, FireEye, and the U.S. Department of Defense Cyber Crime Center. Follow her on Twitter at: malwareunicorn.org/#/about
Still haven’t subscribed to WIRED on KZbin? ►► wrd.cm/15fP7B7
Get more incredible stories on science and tech with our daily newsletter: wrd.cm/DailyYT
Also, check out the free WIRED channel on Roku, Apple TV, Amazon Fire TV, and Android TV. Here you can find your favorite WIRED shows and new episodes of our latest hit series Tradecraft.
ABOUT WIRED
WIRED is where tomorrow is realized. Through thought-provoking stories and videos, WIRED explores the future of business, innovation, and culture.
Cybersecurity Expert Answers Hacking Questions From Twitter | Tech Support | WIRED
Amanda is an Offensive Security Engineer on the Red Team at Facebook and previously worked as a Malware Researcher at Endgame, FireEye, and the U.S. Department of Defense Cyber Crime Center. Follow her on Twitter at: malwareunicorn.org/#/about

[@goldenalpaca3881]

I love how easily she slips in and out of shitpost mode. A true online perfessional

[@punu3675]

amen

[@MrV902]

"Perfessional" 😂

[@donchodon4245]

She is not…. She is a chick that is trying to act smart but she isn’t

[@andreasisme]

​@@donchodon4245 your comment already shows that she is in fact, smarter than you.

[@donchodon4245]

@@andreasisme she doesn’t even know what a red hat is… I am in cybersecurity since the 90s I know exactly what I do

[@blave5063]

I like how she cracking jokes left, right and center whilst remaining in a serious tone

[@quartd2542]

Her humor is bone dry 🤣😐

[@icefoxxgaming]

She made jokes?

[@thegamergeek1534]

"I don't hate C#. C# hates me." Had me dead.

[@turcaromina]

You can feel the programmer's frustration in that sentence.

[@dhupee]

@@turcaromina every CS people's struggle in one simple sentence Lucky i haven't learn it YET

[@absurdious]

I know nothing about computers, but as a musician I feel the same

[@simonriley1981]

C sharp is literally the definition of pain

[@turcaromina]

@@simonriley1981 It's not that bad, I find programming in java, PHP or Javascript more annoying.

[@severianthefool7233]

I really expected every other comment on here to be a “penetration tester” joke. Proud ah you guys.

[@chico6643]

Now you made me think about it... You can feel disappointed now. Are you happy now, mr?? ARE YOU??

[@MichaelThomas-th9bk]

Too many comments, I wasn't sure where to put one in...

[@NutBuster99]

too less population of 'men of culture' nowadays

[@michaelv9609]

you dirty people

[@P_Wigs]

I actually came here to do exactly that, but now i cant because it wont be funny anymore.

[@iam_a_sad_khan]

she: "why do you go to gym if you're gonna die anyway" me: I don't

[@meli9780]

exactly

[@C_Bat]

you mean you don't die, or go to the gym?

[@iam_a_sad_khan]

@@C_Bat yes

[@epicotakugamer4930]

@@joanaborges9450 This is such a self defeatist comment it makes me cringe.

[@liamscott555]

The Internet:I don't care if someone sees my info, it's already all out there....... Also the internet: I don't want to take the bill Gates tracking vaccine.........😱😱😱😱😱

[@svinjamaria]

most obvious question that nobody asked: "Do you ever say, "I'M IN!"

[@jswa2970]

😂😂😂

[@cosmiccodeconjurer]

they actually do

[@pavletrmcic7759]

That is showmanship, not a real thing.

[@quack3891]

yes I don't, because I'm not a hacker

[@rc9277]

No I just say got it.

[@kaizen7659]

She's eloquent and concise. A lot of geeks (experts) usually use a lot of jargon most laymen can't understand. Her illustrative examples are also easy to relate to.

[@email4664]

@Ryan Harmon She did far better than a lazy, semi-illiterate person like you could ever do.

[@PrivateJoker0119]

most of the time insecure geeks try to appear smart by using deep jargons, most of the time they sound like tryhards tho

[@dria7387]

@@PrivateJoker0119 like your mum 🤣

[@PrivateJoker0119]

@@dria7387 k

[@swagmuffin9000]

If you can explain it to a child, you probably understand it well. It's a saying i think applies to this case.

[@pepsipwns666]

My question would be "How long do you spend furiously typing at a screen with green illegible text going vertically up and down on it?"

[@scruffygaming627]

REAL hackers have at least 3-4 screens of vertical scrolling green non-legible multi-lingual alphanumeric symbols they stare at intently for effect. Pft... newb

[@lachlanmckinnie1406]

Unironically at one point I did have a screen filled with green text. But that was just me going through lists of files (like 20,000+), and sorting them out.

[@DogMason]

I mean you joke but, it is an option. When I am doing basic network diagnosis I always do color 02 first to look more professional :p.

[@scruffygaming627]

@@DogMason lol When I write short windows batch scripts, I also use color 02 so that it looks 'cool'... just something i've done since i was a kid haha Clients are WOW'ed by it. Never mind the clever coding I did, it's the color that impresses them...

[@douwemusic]

Can they go horizontally up and down?

[@InfinitoVezes0]

"You guys stay safe out there" Can't tell if advice... Or *threat*

[@InfinitoVezes0]

@Changkun Li Noted. No need to use an alias, Amanda xD

[@969typO]

hopefully both.

[@asj9837]

i feel that too...

[@NeverDoubtTheWorm]

Ahahahahaha

[@Incognit0777]

Or a *prophecy...*

[@Pond721]

Producer: How many Ethernet cables do you want? Table designer: Yes

[@mehmeh1999]

The real question is how many antennae do you want on a router.

[@shortcirkuitz_unofficial_8814]

"Lets make it look really stereotypical" Producer: "but um... She's a girl... And she's skinny"

[@FeLiNe418]

LOL. Hackers use public WiFi networks.

[@cet6507]

@@mehmeh1999 They aren't just antennae, they're multiple radios on multiple frequencies each with 2 antennae, I assume. Great for sniffing, injecting and MITM'ing a large group of people.

[@mehmeh1999]

@@cet6507 Have you heard of a mystical construct of a joke?

[@mattsmith4589]

I couldn't imagine somebody hacking my pressure cooker that could be crazy dangerous

[@benjaminoechsli1941]

Yeah, that's why I'll never get a "smart" one. 8/

[@2ndEditionBryce]

Think of it this way though. They wouldn't hack your pressure cooker to make it blow up. They would hack it because it may have terrible security and give them an opening into your network.

[@kalikid01]

Gimme your money or your pot roast is ruined.

[@apigeon9884]

I would really hate it if someone overcooked my rice.

[@was3490]

Yea it's not like, you can just unplug it

[@deirdrewhite223]

She gave a lecture for one of my university courses a few years back!

[@hantusangap]

then u fail it?

[@asiamies9153]

@@hantusangap Yes, she failed the lecture

[@taylorpeters2071]

@@asiamies9153 Everyone here just failed cause I hacked your brain....*drops mic* malwareunicorn out

[@Raymond_XL]

Offensive Security Engineer. Man, i wish i had a job title that badass.

[@AlecAkin]

You can have a job title like that!

[@ayushsahu4125]

@deadshot Attacking.

[@JA-nv4zb]

@deadshot lmfao

[@ZedF86]

Just become a really obnoxious security engineer and they may call you that.

[@ayushsahu4125]

@@ZedF86 Or just say the n word

[@thtotaku]

"If anything, you're considered as collateral damage." *That's a lot of damage.*

[@danh.5998]

She just sawed that boat in half!

[@aeringothyk5445]

Collateral damage? US Government: Hold My Beer

[@illuminocalypse5210]

@@danh.5998 'Aht's a lawta daah-midge!

[@scruffygaming627]

Not really. You don't matter. It's like accidentally stepping on an ant while doing your shopping. Do you ever consider the ant you may step on without knowing?

[@o9-535]

A bit much

[@peculiarjohn6900]

Have you ever been on a project where someone in a suit behind you nervously yells, "ENHANCE!," and then you press a button, hear a computer "squiggle" sound, and you end up magicking the picture into a better resolution?

[@VinitR]

Adobe Lightroom has a similar feature, although it needs the RAW photo, and not the raster, as RAW has more data. It can't magically make a number plate readable though.

[@jar1525]

The analogy I would have used for the first question "Why do we need a password if hackers already know everything about us?" would have been. The criminals know exactly where you live but if you lock your doors and windows, have some security cameras, and an alarm system they will have a bit of trouble getting to your things.

[@scruffygaming627]

Having a password just mean random passers by are kept out. It's not a defense against targeted attacks, it's a defense against opportunity attacks. If there is no opportunity, they wont' attack. If there's no password, I assume you don't mind me having a look around. It's like a 'Welcome, come in' sign.

[@blueboy1958]

"Why have passwords when they're gonna hack you anyways?" Why lock your door when they're gonna break in anyways?

[@mtb_0053]

"Why go to the gym when you're gonna die anyway" 😂😂😂😂😂

[@chrissolace]

Amazing. I've just been motivated to not go to the gym anymore (not that I ever went, so more incentive not to go! XD)

[@kylegibson5432]

"...And I live by that." - Kyle Gibson

[@Zetaku3]

@@chrissolace I would say it's like a life buff, where you feel better, feel happier, have more confidence, etc... all these bonuses within your lifespan.

[@kimmyyy1164]

Me every day

[@lyrical5460]

It is a shame for a man to grow old without seeing the beauty and strength of which his body is capable. -Socrates

[@marianoclerici3986]

She can't be a hacker, where's the dark room with bliking lights and half a dozen screens?

[@vitus4514]

and fancy 3d graphics actually not displaying anything useful

[@andyquanzhou]

And where’s her ski mask?

[@muimuitos7659]

She didn't get the joke about red hat ....

[@raccoonchild]

Paul Schoonheyt: That was about witches, right? I know red witches are a thing

[@InsertHandleHereYo]

She more look like a gamer girl than a hacker.

[@Skuiggly]

“Why have passwords when people can hack you anyways?” Why wear a seatbelt when you’re gonna crash anyways?

[@lorelando7413]

Why lock your house when people can break in anyways?

[@electricheisenberg5723]

@@lorelando7413 EXACTLY

[@AC-cg4be]

Joke's on you. I ride a motorcycle. No seat belt to wear, so moot question.

[@Isabelle-xp7qb]

@@AC-cg4be Why wear a helmet when you're gonna fall anyway?

[@barabara9855]

Wait, I'm going to crash?

[@Peluceus]

She puts on the ski mask, the glasses, and fake-clickity-clacks on the keyboard but does not end it with "I'm in". 8/10 video -2 points for that obvious missing component

[@alyasvlogs]

“I don’t hate C#. C# hates me” Same

[@hkr667]

I have the same with Java. I am now a Java programmer. Help.

[@alyasvlogs]

H Kr it honestly happens to the best of us

[@whopperrrrrrrrrrrr]

@@hkr667I had started learning java. I thought it was hard until i started learning android programming...

[@darkceptor44]

c# is actually not that hard, think of it like a mix of c++ with java

[@darkceptor44]

​@@whopperrrrrrrrrrrr well i was gonna say java isnt hard but youre right android developing is awful, its like minecraft modding because both google and mojang keep changing everything in every version and developers are forced to update their apps/mods. but what defines android developing being bad the most is probably gradle and android studio, even though it was supposedly made exactly for android it sucks most of the time, youre forced to use more ram in order to do anything and you have to manually force it to use more ram too. basically dont blame the language for the trouble

[@americanenigma_5108]

Next video : MAKE HER REACT TO HACKING SCENES

[@shelbyb9965]

"We've got the hard drive!" ~holds up power supply~ My dudes, you ain't gonna get any data off that...

[@Harry351ify]

Dude, you wanna see her having a heart attack out of cringe?

[@KrappyPatty-ry6lj]

Samy Kamkar did that

[@yumri4]

I have seen another group do that and most of them say that they wish it was that easy to trace the target or they are using the bash she wrong or ls does not do that just like dir does not do that either etc. in most hacking scenes in movies it it quick and tries to not show you anything as you have people who know enough to fall out of the illusion of the movie when they do to much wrong.

[@aland7236]

*Ask

[@ThePandaAgenda]

"how do we show people she is an IT sec expert but also a KaWaii GaMeR gUrL?" "idk, Steve. Scatter some pink gaming paraphernalia around her or smthn." "We should also add like 3 routers and a bunch of ethernet ports connected to nothing. People won't care."

[@Dead25m]

They do this kind of thing for every single expert.

[@ThePandaAgenda]

@@Dead25m yup. My jab was going against the editorial of Vox, not the lady.

[@g76agi]

@@ThePandaAgenda i dont get whats the problem, sure, it doenst really add anything to the video, but it doesnt make it any less interesting, it just kinda sits there to be looked at

[@xBurningGiraffe]

They could’ve at least thrown in a Hak5 pineapple

[@mr.bluesky4130]

I mean they threw in deal with it glasses, that’s pretty epic

[@unknownuser1742]

I can’t believe some people call Taylor swift grandma while she is out there being cybercrime genius

[@april147]

I'm curious if It's a joke or real?

[@lithiumlight6128]

@@april147 SwiftOnSecurity is a real account who pretends to be Taylor Swift so it's a joke

[@april147]

@@lithiumlight6128Yeah I actually googled it to find out 😅 Thanks for the reply tho!

[@DarianSandmartin]

Many of these questions are incredibly basic. This actually gives me a good impression of people's level of awareness in cybersecurity. And surprises me as well.

[@Illiminator31]

I mean the definition of Malware was not really right tho and I still think she confused a Decompiler with a Debugger :D

[@forfurferfries9584]

What's more crazy is the low level of technology employed in securing anything online

[@turdsalami]

@@Illiminator31 she studied computer science. I'm sure she knows. What gave you that impression though?

[@Illiminator31]

@@turdsalami That the definition was wrong or that she confused the Programs?

[@turdsalami]

@@Illiminator31 about the debugging vs decompiler. Her explanation in my opinion was general enough that it could apply to a debugger

[@loganbarnes6441]

Red hat (Linux distro) is probably being confused with "Red Team" security, like a sanctioned Penetration test but unannounced and against a live system by taking on an attacker role etc

[@jajajajam]

There was also some joke a while ago about Red Hats being angry Linux nerds or something. I don't think the joke aged very well though.

[@MatthewCasey]

Thank you. I don’t know how a cybersecurity expert would not be able to determine this reference/their confusion.

[@40rcec0retech4]

A red hat is a hacker that goes after bad hackers illegaly

[@loganbarnes6441]

A quick 2 second Google of 'red hat hacker' confirms that is 100% accurate.. Digital vigilantes. And every other comment on this video.. Well. 😂

[@nathandaggler4623]

I went there as well, someone clearly jumbled black hat with red team, and then googled red hat only to find that Red Hat is a thing just not security specific.

[@darkprincess4679]

8:55 - Its a lot more complicated than that, when you do an upgrade, you do have to shutdown a system but if your such a serious operation like power plant or hospital you - usually - have failsafe's which are backup system that kick in and you do what's called a rolling update/upgrade which gives no downtime (This is actually much cheaper and easier to make than people realize). That isn't the only issue though, most companies use badly programmed internal systems that often will entirely break on even a small update, often the people who make these programs are external contractors who are either ever there or require an absurd sum of money to update them and often these easily breakable internal system could be in charge of critical systems that can never break. As a result, there is great fear and panic when doing an update or upgrade of it causing everything to crash.... it's running fine now... so lets never update. Things have gotten better but even now it's still a lot like this.

[@AC-cg4be]

Or, ya know, they're Java based. Good luck on upgrading your Java 6 to Java 8. You might be lucky if you get a halfway intelligible error. But hey, at least it looks good and is portable! Right? Guis?

[@mariusvanc]

A lot of industrial systems are not redundant though, or require both primary and backup to be at the same version and configuration (they are meant to handle outages of a site). Also, many older industrial applications are certified to run on a specific hardware and software configuration, so you cannot upgrade, in come cases you can't even patch. Just a few years ago it would be commonplace to run across a Windows 98 or NT system in a hospital. It's cheaper to keep those systems running and put them behind firewalls and active security measures, than to pay a vendor to upgrade and re-certify their software. Why this is, you ask? Well, hardware vendors and integrators are famously bad at writing software, so their control software was often terrible, in all aspects, not just security, and even to the people buying such systems, the software side is rarely a consideration at all.

[@juliaostlund9360]

The way she said: "So.. too late for you", LMAO

[@liranpiade4499]

I'm so happy! Someone asked her "how long until malware starts affecting cameras?" And since it already happened, she answered "minus six years". Yes! People answering negative numbers when someone asks "how long until" something that already happened! It's catching on!

[@katyb2793]

Liran Piade did she just mean ppl can hack a camera on a device? And watch us?

[@RialuCaos]

@@katyb2793 Yes.

[@katyb2793]

暗知能 谢谢 ☺

[@zensoredparagonbytes3985]

That's how old my sticker on the camera is. Unfortunately you can't do much about the microphone. Not that I know of

[@jabom22]

@@zensoredparagonbytes3985 Unplug it if not in use ;) If it is a fixed one... euh hard if not impossible to do anything except unsheduled removals.

[@PimpinMexiFry]

"hackers know everything about us so why have passwords". I think they misspelled the government

[@d-o-n-u-t]

The government doesn’t already know that info, but if they really wanted to they could easily get ahold of all of your digital information. As for physical info - that requires a physical investigation, in real life, inside your house. The government isn’t that powerful.

[@willbonaparte1189]

@@d-o-n-u-t yes and the people are just paranoid

[@micahrogers7536]

@@buffkangaroodog Source?

[@pioneer5400]

T•Ø•R•Ü•S what makes you think the government isn't very very powerful?

[@P-0223]

They don't know. Passwords are hashed and stored in the database, so it's not in plain text. Hackers can get the password hash and know the algorithm used to figure out the password. People working in the government or security have a really strong ethic about not touching users' sensitive data or they will have their license revoked and end up in jail.

[@netraven5000]

I feel like the "red hat" is a joke that went over her head lol... Red Hat is a company that made a name for itself in the Linux world

[@rhcp1253]

That's what surprised me. I'm kind of assuming they picked her out of all the staff to go on a show like this because of her personality. I'm not that charismatic and funny.

[@TheWitcherX]

Imagine calling yourself cyber security specialist and not knowing the father of Fedora Linux and the biggest enterprise distro...

[@RogueRen]

I was about to say, "Does she really not know what Red Hat Enterprise Linux is??"

[@eyjzdrkxjqzfuhqyzybf]

I would guess her talking about Red Hat was edited out, because I don't see how she could not know about it in her field.

[@user-de2wv8ri8n]

I think they where talking about a red team

[@101nka]

Gray hat can also be seen as someone who hacks for good without permission and notifies the company about security flaws

[@kylegibson5432]

This is such an important video an deserves a round two, especially with Amanda. The fact that she actually stated that she believes in delivering convoluted information in an easily digestible way is reason enough to bring her back. But please, do round two, even if it's not the most popular. As many people as possible need to receive this info. I am tired of coming across people my age (31) having no idea about this side of the internet, both offensively and defensively.

[@chelsey8737]

Same I have literally no knowledge of any of this stuff and I would definitely like to know more. I hope they keep this around

[@M4TTYN]

Seriously, many go blind to the new evils to field of IT jobs more common then many know to many need to be more cautious when opening emails to random shortened url links to even apps these days Terms of malware, trojen, ransome ware & hacking, hacker to black/white hacker need to be laid out on what's what and broken down so all can understand them again, have more precaution when browsing the internet and new evil tactics being more and more common

[@brr4519]

I’m mostly just upset that she doesn’t get the concept of a grey hat hacker. grey hat isn’t “white hat but a criminal on the side” it’s “white hat but with questionable methods, like someone who hacks a website and defaces it so that they’ll update their security.

[@maight7333]

@left-wingers-are-terrorists Or just isn't so cringey...

[@m1sh474]

@@maight7333 there was nothing cringey about her video, are you normal?

[@glics]

I didn't know I needed pink ethernet cables in my life till today. Thanks.

[@kishenkoolskills90]

It's pretty

[@mojolotz]

@hameed s no doubt.

[@ShaferHart]

They're called daddy Yankee cables. Get with the times!

[@justanotherweirdo11]

@@jamesdixon5324 Smart

[@exploiter2437]

Italiano?

[@MichaelSmith-lq8to]

"Why go to the gym if youre going to die anyway" Shes a Real one ...Respect.

[@L33t5666]

I’m pretty sure that “red hat” refers to red/blue team pen testing teams (both technically being white hat). Red being those simulating a real-world offensive hacking attempt on a network, and blue being those defending.

[@agsup]

I thought it was just the name of the group that made Fedora Linux, that's neat tho

[@JohnGardnerAlhadis]

@@agsup It is, lol.

[@incognito6815]

Correct

[@09F911029D74E35BD841]

​@@agsup imagine an IT security "expert" never hearing the term redhat... had to stop the video to come down to find all the other people picking this apart. credibility is now 0.

[@JBW19951]

A Red Hat? 🤔 * Soviet theme starts playing *

[@diegoh.4904]

JBW19951 MAGA hat

[@ajko000]

Ths might have been misunderstood. RedHat is a thing but it's not a person. RedHat is a Linux distro (operating system) variant or "flavor" as they are commonly known.

[@k.r.davis-potter7267]

it is mario a green hat is luigi

[@zack7122]

heil mother russia!

[@ikbennomad]

@@ajko000 Red Hat is a company that makes a lot of stuff, most notably Red Hat Enterprise Linux. Of which the "upstream" version is Fedora, both of which are Linux distributions, but yeah the company is Red Hat, the distro is RHEL.

[@technicalmachine1671]

"offensive security engineer" Please don't hurt my feelings

[@apeflac]

one joke

[@sundhaug92]

@@CN-wt2bj oh shut up

[@IssaFram]

Micro aggressions bro!

[@erinya2758]

thought that was abit out of place too. lol.

[@ld9387]

@@pcbuild3468 what's wrong with that?

[@daniel_wilkinson]

I can only imagine how pissed off Amanda was that everything had to be fecking pink.

[@metalcake2288]

She Actually thought it was cute.

[@yyg4632]

its probably her style. her name seems girly as well. its not bad to have pink

[@RPKD88]

@@yyg4632 girly? Smh 😂

[@BigTeddies]

@@RPKD88 Are cat ears on headphones girly, yes or no?

[@RPKD88]

@@BigTeddies no.

[@colinlarson9656]

I always love the people and topics they find for these Expert Answer videos.

[@gulfmen86]

"Why go to the gym when you're gonna die anyway" is a question I ask myself every time I get ready to go to the gym.

[@djpunkIIDX]

I'm just scouring the comments for the 'penetration tester' jokes

[@SirFriedGoat]

you're gonna have a sore butt

[@michaelrumbolo3144]

I didn't have to go very deep to find this comment.

[@jamesbombss5777]

How hard did you look

[@scottwpilgrim]

I am also a penetration tester. Giggity.

[@zensoredparagonbytes3985]

Get in, get out before your presence is noticed. That's what I did last night and she wasn't even aware of it

[@tektight]

Where were the hacker questions? All I heard were questions that anyone with a little bit of tech knowledge/common sense and good searching skills could answer.

[@ErikNiceBoy]

Or with access to google

[@khodascope]

No ones going to ask super specific esoteric questions, that isn’t what gets views.

[@alexclark4792]

Non hackers aren't going to know enough ask those questions, and hackers aren't going to answer those questions. Hackers seem to be a lot like magicians, if you can't figure it out, I don't think it's for you, and i'm not going to tell you.

[@thethingthatshouldnotbe3035]

Well, hate to break it to you, but: the „hacker questions“ as you call them, could also just be researched. thats exactly what IT people do, when they dont know sth…

[@Mark-dy7ms]

Because this is a mainstream channel trying to appeal to as many viewers as it can.

[@RandomAccessMemory599]

11:23 She's not a real hacker, she didn't say "I'm in".

[@AnymMusic]

"yo how do we show that she does cybersecurity AND is a woman?" "ehh, pink ethernet cables?" "fcking genius!"

[@thugasaurusrex6004]

Lmao

[@Raviscerator]

Considering her handle is Malware Unicorn, I'm guessing the props are hers.

[@kylegibson5432]

@@Raviscerator Even if they aren't and were placed there by Wired with the intent to prove her legitimacy, it is unfortunately necessary for the GP to get it. But I do second your theory! Her name is too adorably clever for her not to have pink Ethernet cables. She also stated she has a hacker balaclava for every outfit!

[@digitalWinds]

She has a legit thing for pink: twitter.com/malwareunicorn/status/1091493066639257600 And I find it odd that people have gone so far around the block that pink carries such an automatic fake association. Also, I completely thought that, too, as a knee-jerk reaction.

[@mistletoemonkey]

In design the joke is "Shrink it and pink it" when it comes to lazy design for women.

[@thewilytroutesq5260]

Thanks for pointing out the problems of upgrading hospital systems. We recently had a 4.5 hour downtime for an upgrade, and it was messy. Prepare to wait longer in the ER. A massive transfusion of blood products will encounter significant delays, as all unit identifiers in the blood bank and on the floor will have to be manually entered, and all built-in system safeguards manually overwritten.

[@gamu3639]

Hospital systems could have been upgraded it’s all about how they conduct their operational infrastructure. Rather than just have 1 system have 3 for redundancy so that you can run out of each one whilst the others get patched. This is simple logic of business continuity and disasters recovery.

[@nettack]

You're whining about 4.5 downtime? Wait 'til you are incapable of doing something for weeks because some integral part of your system is being held ransom as it is still running on Windows XP

[@thewilytroutesq5260]

@@nettack I am not whining. And thank you for sharing.

[@nettack]

@@thewilytroutesq5260 I apologize for my harshly chosen words. I read "If you update your system people will be put at risk in a hospital." When the contrary is far more true, since an update can be planned, tested and deployed in several waves. Again, sorry for my interpretation and the uncalled reaction.

[@DJGamingfps]

As stated most business continuity plans have backups and redundancies built it, off site cloud storage is a good example. I’m assuming because hospitals usually don’t have the best funding things on the security front aren’t put very high on the priority list.

[@FIDEL_CASHFLOW_]

The most impressive thing about this video is that they managed to find the one attractive person working in cybersecurity. Source: IT security analyst 5 years running

[@Efreeti]

Red Hat was a very popular Linux distro about 20 years ago. The project morphed into Fedora Linux. A Grey Hat can also be someone who illegally, but well intentioned, breaches a company or country's cybersecurity in order to highlight a flaw they're not taking seriously.

[@ryanhodin5014]

Red Hat Enterprise Linux (RHEL) is around in the business world too.

[@Efreeti]

Yeah, I thought it was sort of superfluous to mention in my original comment, but the Fedora team split due to disagreements with the Enterprise direction of the Red Hat project.

[@KarlPiper]

Red Hat is a software company maybe thats what they were thinking of?

[@hkr667]

According to her twitter she responded to that but Wired cut it out of the video.

[@trilldao]

red teaming prolly "The idea is simple: One group of security pros - a red team - attacks something, and an opposing group - the blue team - defends it. Originally, the exercises were used by the military to test force-readiness"

[@maze2512]

Karl Piper Linux i believe

[@therealhennesssey]

Red hat is the older professional version of the fedora distribution still used as the district for many major website servers

[@teh_jibbler]

@@hkr667 That's good to know and they really really should have kept it in the video. They made it seem like she didn't about Red Hat, and that undermines the ethos of her presentation.

[@useruser-tl6ni]

As a cyber security professional and penetration tester, I love coming back to this video and hearing these questions and her responses for a strange reason😂

[@frenches1995]

Do you think those are accurate?

[@orcave8802]

You're probably a script kiddie pretending to be a cyber security expert

[@useruser-tl6ni]

@@orcave8802 I appreciate your comment cause 90% of the surface of cyber security are basically script kiddies. Ofc there’s no way to prove my word, but to believe it😂.

[@shadowmoon1657]

“Penetration tester”

[@Dead25m]

@@orcave8802 You're probably a very lonely person that needs to lash out on others to feel better about yourself. I hope you get better. And, don't be an ahole about it.

[@juliachild9377]

The person asking about what a red-hat hacker is probably heard something about Red Hat Linux, now Red Hat Enterprise Linux, and didn't know that it was an operating system rather than a term for a hacker. I'm surprised the person answering the questions didn't mention anything about RHEL. I would have immediately thought of RHEL the second I read, "red hat."

[@mrlegodude96alt2]

Red Teaming is also a term (more in the physical security world) and I could easily see how someone unfamiliar with terms could see Black and White hat and assume that Red hat is the term and not red teaming

[@incognito6815]

she's called "malwareunicorn" I doubt she's got any kind of expertise

[@echonuim]

I don't mean to place any doubt on her, but I never code, hack, or even use linux as a daily and even I thought of RHEL the second it was asked

[@ClaudiusPunchinello]

"Red hat hacker" is a term, though not standardized; some use it to refer to hackers who target Linux and some to vigilantes who go after black hats. There are also "green hats" (newbies) and "blue hats" (revenge seekers (some go further and say blue hats are unskilled) or MS-affiliated white hats).

[@geoffroi-le-Hook]

her answer to the surreptiously triggered cameras was interrupted by an ad with a man in the shower

[@justanormaldude3772]

"Why go to the gym if you are going to die anyway?" You see ma'am, that's the thing... I don't.

[@chandanh347]

😂😂

[@ondrejsimek2561]

Yeah dying is for chumps.

[@helloworld366]

@@ondrejsimek2561 dying is for losers

[@anomaly3215]

cuz ur a loser

[@mpforeverunlimited]

American?

[@Apudurangdinya]

"I'm trying to become a penetration tester" I died wheezing in the bathroom

[@Skull2dz]

RIP.

[@zeveroarerules]

I'm just not going there. I shoudn't .

[@razvanefros411]

RIP in pepperoni

[@allendu5954]

double penetration = 6.9;

[@golfgrabu]

Penetration jokes? Naw, forget it.

[@angledcoathanger]

Redhat is a linux distro, that's what Eric was thinking of. It's an operating system.

[@MuradBsat]

I still come back to this video every once in a while. She's so incredibly cool.

[@izmlowspec5245]

"A lot of malware is on windows" *Sad windows noises while in the Blue Screen of Death*

[@rodvedovato]

"Hackers don't know everything about you. Facebook does" FTFY

[@AymenDZA]

"I'm an offensive security engineer" Please don't start saying slurs !

[@furinick]

What type of security enginer are you? 1- femboy 2- the specialist 3- the racist 4- Linux cultist 5- Hank

[@abdulelkhatib2674]

Its amazing how much personal information people put out on the internet. I've found ways to find where people live and more just by following them on some social media accounts.

[@MissingMeep]

For the title name I wish something like "technomancer" would be mentioned.

[@Rachel-vz6gw]

I love her reaction to everyone’s handles

[@corncobjohnsonreal]

Ignore those last four words and yeah me too

[@lynettegorrell6694]

I just saw your video and I enjoyed watching it. I am just starting out in the cyber world so thank you

[@margies0728]

Redhat : * confused OS noise *

[@human_bing]

-i use Arch btw-

[@Anonimbus]

@@human_bing laughs in blackarch

[@SCP--ws2uw]

@@Anonimbus laughs in kali

[@bharatmadho3742]

I USE ARCH BTW

[@misa31415]

* Confused Fedora user noises *

[@TheRausing1]

She’s really cool

[@cybercat1531]

Get lost 'Him'

[@camper1749]

Get lost "Cyber" "Cat"

[@VanBurenPhilips]

"Get" "'lost'" ""Camper""

[@camper1749]

" "G""e""t" "l"o"s"t" """V"a"n"B"u"r"e"n""P"h"i"l"i"p"s""" "

[@samuelbaird4983]

@Him wat

[@mudrlandik]

9:07 actualy red team is going foward in time while blue team is going bacwards during temporal pincer.

[@claiminglight]

I've never heard of moonlighters being described as gray hats. I've always heard of them as bounty hunters.

[@AscendingTechie]

Hacker: broadcasts video in a pink ski mask *I wonder who that might be...*

[@ArsenGaming]

Don't forget the glasses

[@walex996]

2:52 How about they hack into your student loan & increase your debt 😂

[@Inseptex]

lmaoooo

[@notholdini2740]

Mine is already at max tho

[@kingalexanderiofyugoslavia1390]

@@notholdini2740 F

[@SnailHatan]

No, thanks. I have enough.

[@bandobandit353]

More likely they log in, steal your data and apply for 10 more student loans in your name...

[@turtlos]

What a great start! Doesn't know what red hat is :D Answers were a bit boring, didn't leave with new info.

[@diarmuidod7186]

I have never once been in a cold server room. Those things are always roasting hot

[@soaringaegis]

"I don't hate C#, C# hates me." ...I felt that one... XD

[@willardSpirit]

These questions are dumb. Thanks for this person responding in a professional manner

[@codyleslie478]

I actually learned alot..

[@Artaxerxes.]

@@codyleslie478 then you must not know much. Time for me to get off this vid and do something useful

[@codyleslie478]

@@Artaxerxes. oh aren't you sweet... you want to be friends??

[@somber_soul]

@@nelsonalvarez5311 or likely the asker was confused. Red Hat is a linux distribution.

[@pola_behr]

@@Artaxerxes. yikes

[@luxsings6871]

For Red Hat hackers, it`s actually a term specific for CTFs(Capture the flag), a sort of hacking competition where one team has flags they must secure, and the other team has to hack their way to those flags. It`s used pretty often as training in infosec courses and usually feature in infosec conventions too. The Blue hats secure the flags, and the Red hats try to reach them.

[@Borderlynx]

That sounds more like red team and blue team than hats, red hat is a linux distro

[@antonshotpoteita]

​@@Borderlynxyeah that's i thought about aswell.

[@steepyt]

Mainstream media stereotyped hacking: dark room with green light accents, ski mask or hoodies, monitors of atleast 3, codes appearing automatically on screen, big access denied, fast typing without using mouse, etc.

[@jameswolfstar]

Meow-ware is all I heard.

[@adanacaccentcoaching2685]

jameswolfstar if you said it as frequently as she did it would get worn down. Ask yourself how you pronounce alright, already and almost - I bet you don’t make a full L sound you probably do an o-shaped mouth (with flared lips) and your tongue doesn’t touch fully against your alveolar ridge (because those words are so frequent they get "worn down" something about place assimilation).

[@thatdude123]

@@adanacaccentcoaching2685 thank you!

[@RagnarokCo]

I heard Maori unicorn until I read her #.

[@wyattcalandro3436]

So happy to see Amanda make it on Wired! She was perfect for this segment.

[@HamidMN]

Her: I want to penetrate test your system. Me. That's offensive... Her: I'm an offensive engineer!

[@AnjaKestrel]

Did she decorate that desk herself or did someone just puke every pink item in their inventory on there?

[@FDothat]

She really does not look as if she actually liked it, so yeah: if i had to guess, i‘d say someone at the staff wrote „attention seeking girl on twitch“ instead of „professional hacker“. not okay, tbh.

[@TheOnceAndFutureDoug]

"We're good to go, it's time to hack!" [furious typing] HAHAHAHA!

[@jouneymanwizard]

"Why don't hackers do anything useful, like leak" hospital internal charge books. Fixed that for ya.

[@itdepends604]

Hackers have exposed fraud in the past, but unless they are linked to a government, it is very risky to do so. There are numerous stories of the hackers charged far longer then the criminals they were exposing.

[@Crovax]

"why do you go to gym if you're gonna die anyway" Best answer to anything in life. I will procrastinate forever now.

[@st20332]

You misunderstood what she said

[@ronaldhudson169]

(5:16) On a Laptop instead of a smart TV, I always have a webcam shutter. My current laptop has one built in. In other machines I usually get a very small bandaid to put over the camera, this puts a patch of cloth like stuff over the lens, not the sticky glue. The best situation, however is that you can actually only plug in the webcam when you need it.

[@unnamedchannel1237]

Red Hat, Think they are getting confused with RedHat Linux.

[@ripsquid873]

Or redteaming

[@ladymercy5275]

Red Hat is when you wear all black with shades at night and do Kung Fu on top of skyscrapers. Trust me on this, I've been around the block.

[@necronau]

@@ladymercy5275 Then you travel back in time and fight the Kung Führer

[@Astohoriian]

@@necronau sick reference

[@floresj]

@@necronau I understood that reference

[@holden_on]

She really just confirmed Taylor Swift isn’t who she says she is

[@depressedcockroach4045]

What?

[@onkelpappkov2666]

She used to be Taylor Slow before 'the incident'. Now her speed in breaking firewalls is unmatched. As a part of the revered Mixed Hats, she fights cybercrime and the evil Dr. Unplug.

[@sta1RR]

Onkel Pappkov wait what!!?

[@nomchomsley854]

She must be The Red Hat Hacker that one guy was talking about!

[@SurvivorNumber1]

@@nomchomsley854 What, WHAT!?!

[@masudakhan7487]

The second question where it talks about a red hat hacker at 0:29 could be about Red Hat Enterprise Linux or RHEL which is a enterprise grade reliable Linux distribution.

[@theclockworkcadaver7025]

Actually a grey hat hacker is someone who, for instance, breaks the law but for a good cause. Or someone whose morals are questionable but not obviously malicious. It's not someone who's good during the day and bad at night.

[@Tapionski]

You're thinking of a hacktivist.

[@hafren205]

@@Tapionski that's different. Grey hat is someone who, for example, might hack someone without permission to test their defences and let them know if there are any weaknesses. So they hack illegally but don't use it for personal gain. There's no activism in that

[@rayyanshaikh5591]

So like Edward Snowden?

[@marcellinoleopatria4101]

“stay safe out there” hits different in 2020

[@mikehall117]

I think they got confused the term “red hat” with “red team”. Red team is the offensive arm of a cyber security group who mimics the actions of a hacker, the blue team is the defence (SOC).

[@morgan4010]

they are getting confused with the linux distro

[@roelgambong2224]

Red Hat, Inc. is an American multinational software company that provides open source software products to enterprises. Founded in 1993, Red Hat has its corporate headquarters in Raleigh, North Carolina, with other offices worldwide. It became a subsidiary of IBM on July 9, 2019 Credits wiki

[@kenfrostyypaws9113]

And I see red teams referenced a lot on the social engineering side of infosec

[@ADHD_and_Crayons]

Some groups of, mostly ethical, computer enthusiasts are coining new terms, like "red or blue hat". For example, 2 accepted meanings for "red hat" are: 1) A Linux distro hacker or exploiter 2) A person who uses illegal techniques to only target & destroy black hats

[@MrZezXion]

Red Hat is also a paid linux distro (CentOS) mostly used for security and ethical hacking, so could have been that.

[@itsyyan]

"I don't hate C#. "C# hates me" I feel you🤣

[@jamestan8034]

So how many gigabytes of RAM should be used before you can say “I’m in”?

[@jmorrow6913]

A ski mast will sort of protect you, when following a cable under a raised floor in a wire center or machine room. (Yes we really used to do that.)

[@submarinewahoo238]

I keep mishearing "Maori Unicorn." Sounds like a cooler tag than Malware Unicorn, tbh. Good stuff though. I've been studying towards cybersecurity out of curiosity.

[@narflet]

Same. She keeps talking about hakas too.

[@robertktw]

yp, she had me at the unicorn part ^^

[@masterman9999]

What she said about the UK is interesting because all the ransomware I've encountered was someone opening an email they weren't supposed to. That isn't to say that it could be done another way, it just seems rare or I live under a rock - also possible.

[@FireWyvern870]

8:56 partly true. Some OS provide online update tools for kernel (ksplice, livepatch, etc). While some of the update still requires some downtime, it's reduced for online patching.

[@InesFLK]

Wannacry targeted Windows and used EternalBlue for that. Windows always required reboot for security updates (and I think most other updates too). This does show though their redundancy and disaster recovery infrastructure probably sucked. To be fair, most big companies have freeze periods where no changes to the environments are allowed... stupidly enough, for some, the freeze includes security updates.

[@27jerry27]

No one: Cybersecurity expert: 👁️ 👁️

[@user-uz4gh7sm9l]

😂😂

[@zZiL341yRj736]

How to spot an idiot. ---------> "no one."

[@aliquidgaming1068]

Lmfao. Big eyes are attractive on some women tho. Hers are amazing. It's like how some women can pull off the shorter hair and chopped look.

[@lv1543]

👁👄👁

[@jackieochoa6841]

👁 👁 👃🏼 👄

[@User-uj7nz]

Also, phishing is more than the bots in your messenger, it involves cloning login sites for user credentials.

[@cxbaob]

this woman is AMAZING! and the expression she has at 5:09 kills me

[@noblel1342]

Amanda sure does love her analogies!

[@WillLarkin]

6:18 i was so ready to call them script kiddies