Myths or Reality? Mr Robot Hacks Data Centers to blow up buildings.

[@davidbombal]

Are the hacks shown in Mr Robot fact or fiction? How real are they actually? OTW discusses new vulnerabilities and issues with devices found in millions of companies around the world. OTW loves the Mr Robot TV Series as a lot of them are actually realistic - unlike a lot of other shows. // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: davidbombal.wiki/otw // MENU // 00:00 - Coming up // Hacking Uninterruptible Power Supplies (UPS) 00:28 - Intro & Disclaimers 00:40 - Mr Robot episode recap // Hacking UPSs 02:57 - UPS breakdown 04:23 - UPS GUI examples 05:38 - Accessing the UPSs through a Femtocell 06:57 - UPS vulnerabilities // Embedding malware in firmware updates 14:30 - Intelligence agencies // Collecting data 17:45 - UPS vulnerability // Lead-acid battery corrosion 20:12 - "Hacking can kill" 21:57 - The Mr Robot series // Reality or fiction? 26:17 - Importance of Social Engineering 27:38 - Conclusion // Mr Robot Playlist // kzbin.info/aero/PLhfrWIlLOoKNYR8uvEXSAzDfKGAPIDB8q // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: kzbin.info // Occupy The Web social // Twitter: twitter.com/three_cube // Occupy The Web books // Linux Basics for Hackers: amzn.to/3JlAQXe Getting Started Becoming a Master Hacker: amzn.to/3qCQbvh // Other books // The Linux Command Line: amzn.to/3ihGP3j How Linux Works: amzn.to/3qeCHoY The Car Hacker’s Handbook by Craig Smith: amzn.to/3pBESSM Hacking Connected Cars by Alissa Knight: amzn.to/3dDUZN8 Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

[@mr-anoonym2357]

The best professor, I wish him success, but I wish you would add the translation into Arabic, please, sir

[@fragfx2593]

Please sir make a video on How to Install KaliNetHunter on Rooted phone

[@telugucrazypeople1808]

Sir plz hacking our neighbour wifi bcz I'm learning course online education purpose plzz help mee

[@Richard-fk7gy]

Nowadays, it is negligent not to operate any internal segmentation in which traffic, in particular network and data center mngmt as well as oobm interfaces, is restrictively filtered with the help of segmentation firewalls and secured with deep inspection protection mechanisms. that would make such an attack, whether from external or internal, extremely difficult or almost impossible, if dedicated offline admin systems were also used. the reality is probably different in many companies.

[@rickmens6110]

OTW is really knowledgeable. Must be some long years of work, learning and experience. Keep it up

[@doop00]

For sure, I'd wish I had a friend like that to just upload his knowledge into my brain over weeks.

[@vizualyse]

Thank you David for continuing this series! I like all your videos, but this collab just hits different :)

[@andrejapolenik8606]

I really LOVE podcasts with Occupy and David. They sounds like the best soulmates

[@dalefernandez19]

I started watching the show after seeing your videos with OTW.Really loved it so far.

[@josefafloresaraya]

I'm ending my carreer wich it's Anthropology and after six years, all the University had stopped class for internal social movements, as teachers and students decided nothng to do and obviously that makes you feel tierd . Time seems to be lost but I never stopped to learn. Thanks David for your words about keep doin anything! Obviously I can't sleep and stare at Notebook just writing and learning this fantastic theme! Learning just make me feel less depressive , and people like you too! Never stop please!

[@a.iananda1215]

please never stop making contents with master OTW !!

[@davidbombal]

Lots more content coming soon :)

[@aragonmercher5128]

Another very informative episode david and occupy the web keep up the good work 👍👍👍

[@davidbombal]

Glad you enjoyed it :)

[@J_CtheEngineer]

We deal with exploding batteries semi regularly in my industry. Had one last week blew up from overcharging. To add a little detail, the reason they explode is that when they overcharge, the acid inside the cells actually reacts. The H comes off the acid and gets converted into H2. Normally this isn’t a problem, but when enough of the acid has reacted, the level of liquid drops inside the cells, when the liquid level drops below the lead cells (the stuff that actually makes the electricity) the lead gets exposed to the reacted H2 that’s taking up the volume of air inside the batteries. And the next time the batteries get discharged, because the metal is not submerged, an stray arc will ignite the hydrogen. And since most batteries are essentially sealed, they over pressure and burst. Sprays the remainder of the battery acid all over the place and makes a huge mess. This is why maintaining the level of battery acid in non maintenance free batteries is important, and replacing your batteries on a regular schedule.

[@semotester5480]

Please continue with this series. I am enjoying his voice and detailed answers! You are doing a fantastic Job David. I am so impressed by your work. I can definitely see that you improve on those interviews aswell. I really want to thank you for your effort. Words can't deliver how I love your content! Thank you :D

[@stathemjonathan7855]

Thank you for the new episode of these series. Loved them watching.

[@venus334]

Videos with OTW and David are for sure some of my favorite. >>> Was a bit frustrated earlier, it was nice to listing to this, call my mind and reboot. Thanks David

[@murderbunnies]

We've been doing this for pentesting years back. We still have custom firmware we maintain for APC and other power systems that basically allow not only using APC as an entry & pivot point, but you can actually launch multiple attacks from it. Not only do they almost universally leave the defaults in place on them, but they often have TFTP open and ready to accept new .bins

[@c0d_0x16]

Just when I almost gave up on my career path, David always manages to keep me in track. I love the content and most of the wisdom from hackers arise.... it's amazing. Quest: I recently got in to development and somehow am stock in between the two, any advice on what do in other not to waste my time.

[@brianmccullough4578]

This guy tells stories well. And David is a good interviewer. I love this stuff.....

[@doop00]

Always enjoy OTW on this show, keep brining him on.

[@howlingfjord106]

Got thrown straight into mitigating the TLStorm vuln as one of my first duties as a junior network engineer. Scary stuff.

[@usevito3456]

Love this Mr. Robot vídeo series. Thank you!.

[@davidbombal]

Glad you are enjoying the series!

[@onlinewebsites3476]

Huge fan man from India ❤

[@ColdPrime]

I think I need to watch this Mr Robot show. It looks cool to watch

[@1andonly_amit]

Yess

[@davidbombal]

It has a lot of real world hacking that people like. Unlike a lot of other shows which are unrealistic.

[@fokyewtoob8835]

If you’re into hacking you should definitely watch it

[@nycgweed]

It awesome show and the actors class A

[@CyberABE]

Wonderful video! Thanks David and OTW

[@vardhangoud8851]

David blow up the KZbin with excellent content Need more videos on MR.ROBOT series😇

[@davidbombal]

Thank you Vardhan!

[@rationalbushcraft]

These are my favorite episodes.

[@davidbombal]

OTW is great :)

[@ahmedahmedx9600]

Hey david thanks for the great video as usual, please can you make a video and asking OTW how he started and how he reach that point ?

[@Sandrvich]

Yes i agree,i'd like to listen when and most important, HOW OTW started, what were the first things he started learning.

[@ahmedahmedx9600]

@@Sandrvich yes it's gonna be really fun and helpful

[@Ash.67]

Thanks for the info sir Solved many doubts

[@davidbombal]

Happy to hear that!

[@ganesh_2365]

David Bombal's content never disappoint us ❤❤❤❤ I like this series where Occupy & Devid comes together 👍👍👍👍

[@davidbombal]

Very happy to hear that Ajay!

[@rapper_overload]

hes name is David Bombal not Devid Bombol ;-;

[@ganesh_2365]

@@rapper_overload ohh sorry and thanks !!

[@blackhat5133]

Back with OTW ❤️❤️

[@davidbombal]

Hope you are enjoying the series with OTW :)

[@blackhat5133]

@@davidbombal CAN'T SAY HOW MUCH. we learned a lot from this series, Hope it will continue with OSM content. Thanks 👍

[@AndyRome]

❤❤❤ Listening to OTW & David chat. Thank you gents, please keep on doing what you do. ❤❤❤

[@davidbombal]

Thank you Andy!

[@abdosama]

Can't wait for the next episode, keep up both of you, always learning something new

[@Guillie641]

THE FIRST STEP TO HACKERS mythology is RECON which is the hardest STEP

[@davidbombal]

Definitely not easy.

[@sherinroy1877]

You are the best KZbinr that is providing very useful and unique contents of all time

[@xastr3]

I would love to see how elliot stays hidden and how he hides his data in disks and as well buring chips in microwave is actually working way(like data can't be re accessed) to burn data as he did in mr robot?

[@small3687]

Love this views into how the physical world is connected to the digital.

[@Tekniq1210]

Amazing video bud keep it up loving this 🔥

[@kapzvara5732]

Thanks guys great interview and some valuable lessons.

[@shanecantwell227]

All theoretically possible, UPS’s do have lead acid batteries and charging does produce Hydrogen but! More modern batteries use an acid gel, they are also sealed so do not emit the gas so extremely unlikely to produce an explosion. Far more Leiden is a dos of infrastructure, add that to other IOT devices such as Air Conditioning, Access Control, Fire and Intruder Alarms a well orchestrated attack could cause mayhem and destroy infrastructure. Great content though :)

[@debunkingthemyth6226]

As a chemist, I can assure you, that to create that type of explosion as in the show, you need at least 5 times the size of the building in leaking batteries. It is exaggerated.

[@bigprogramming579]

Excellent series David and OccupyTheWeb, hope it continues :)

[@mashin4777]

So at 14:00 they are talking about NSA was able to make a program with malware and then continue to edit this program while the hash of it's file become equal to the hash of actual real update? And then somehow ask to install those updates so at checking the hash step, their program will pass it? Am i right?

[@MatrixSanAndreasOfficial]

I love on based Mr. Robot series!

[@davidbombal]

Glad to hear that :)

[@_deadpool_reynolds_]

about the timeframe, Elliot was working for AllSafe (company that was in charge of the security of E-Corp) so its possible that Elliot knows a lot about their infrastructure speeding up this attacks

[@shawnhumphreys-q3e]

My question is do you think he would basically say screw it as well as Americans all together?

[@jupiterapollo4985]

Thanks for the videos David, your a godsend. Can you and Occupy-the-web go over the final hack in the show where elliot hacked his otherself's mac computer and hidden partition? that would be much appreciated.

[@gamereditor59ner22]

As someone who is learning tech, it's interesting and hilarious.

[@Tweakx]

great stuff as always. Best hacking channel on KZbin keep up the awesome work!

[@samuelkamau9978]

You really need to tell OTW to have a youtube account. You are both very very very awsome

[@CyberDevilSec]

I love this content so much!!❤

[@davidbombal]

Very happy to hear that!

[@MrDelanza]

This posses a lot industrial concerns for disaster management for business continuity planning.

[@kentharris7427]

I had a customer plug an HP 4 plus printer (1500 Watts) into a 700 watt APC. Every time she would print it would reboot her computer. I plugged her pencil sharpener into the ups that freed up an outlet in the wall for the printer.

[@Hallonyancat]

It depends on what system your using, if you had something similar to shodan, most likely a fully intergrated Palantir software suite with access to anything connected to fibre optic networks in exchanges, if all that information is fed into a system like maltego with transform packages and exploits then yes I don't see how it couldn't be done. You can already use bluesnarfing to map a building (so I have heard)

[@gregory-klimov]

Fun fact Elliot used Dell keyboard in the office and E logo of Evil Corp looked the same as e letter in Dell logo.

[@magnetsec]

Dude sounds like Bane who turned into a master hacker.

[@justinboss4131]

Wish you could like this OTW videos more than once.. thanks David

[@siennajohan5161]

Very amazing ❤

[@DG-ej5nz]

What the NSA did something they weren't supposed to do? Imagine that.

[@googlyer]

hoyyy bahog bilaaat! 🙀❤️

[@missanonymous6413]

Number 2 💪😅

[@davidbombal]

Very close :)

[@are223]

Hey David

[@davidbombal]

Hello!

[@are223]

@@davidbombal I love your videos man, can you do a budget gpu video with someone. I really wanna get into hashcat and stuff. Thanks!

[@jhonwayne1003]

Is an amazing Show.

[@thomastanzer6868]

Can you and OTW cover one of the last hacks of the series where Elliot and Darlene authorize bank transactions of the Deus Group? Out of all the hacks in the show that one is seems to be the most difficult yet they are the most calm during that hack.

[@brianmccullough4578]

You ever see a car battery pop....its pretty violent

[@ashkanmofakham1157]

thank you best

[@davidbombal]

Thank you. You're welcome!

[@firedragonmangaming2410]

Hello !

[@davidbombal]

Hi!

[@guilherme5094]

Really nice👍

[@Infinite_loop12]

I’m your number 1 fan

[@davidbombal]

Thank you so much!

[@L4ftyOne]

Nee OTW! Love it

[@davidbombal]

Very happy to hear that :)

[@itsmmdoha]

Please bring "Jim Browning" to the show.

[@tchubang]

Please make a video how to transform any USB into rubber Ducky with this hacker

[@davidbombal]

Great suggestion :)

[@ViolentbyDesign]

David, I have been wondering since the beginning of watching mr robot years ago, how does *fsociety* communicate with its members and the dark army in a terminal. Do you think you could make a video on how they do that? “Edit” Also David this is fantastic content. I really mean it this is brilliant content. I love this series so much. I can’t wait for new ones to come out. Thank you !❤️

[@am_editx278]

And i am no.2

[@davidbombal]

Close :)

[@truthreigns7]

can the ups be hacked if it is not connected to the internet or the computer, such as the usb cable from the ups to the pc?

[@Warthog71]

Ok so I signed up the Hackers Arise Newsletter and want to pay for courses. Their business address reads 1 main st, ny ny 10001. THATS IMPOSSIBLE. There is no Main st in NYC

[@Aaron48219]

The real question is, does No Starch Press use starch free paper for it's books.

[@fredflintstone8048]

In the real world of most large Server farms the UPS systems and their batteries are kept in a different room than the servers are and the room has ventilation for the batteries as well as the air conditioning not keeping those rooms as cool as the server farm space (energy efficiency is a huge deal in the world of IT systems and Server farms as far as cooling is concerned for at least the last 20 years if not longer. In the real world Elliot would not have been able to overcharge the batteries in such a way as to cause an explosive hydrogen concentration because the ventilation systems in UPS rooms/vaults maintain an air exchange with the outside of the building. Nice fantasy though with a show that's part fact and part fiction.

[@kucing8324]

I want to ask OOT. Is elmocut safe? To cut wifi?

[@ham_eed578]

❤❤❤

[@RorschachRev]

md5 had a collision generator, which also extended to Sha1 with more CPU time. The paper cited, ironically, evil.exe. sha256 should be considered the minimum for validation.

[@provident2000]

2

[@davidbombal]

Very close... but not quite...

[@myfreefire2980]

Will u please make a video about hack wifi without using wifi adapter

[@indiravasudevan9368]

Is there a way we can see live satellite tracking

[@HarHah]

You'll be HAPPY eating mcbuggers 🍔🐛

[@harinarayanan6780]

awesome

[@davidbombal]

Thank you!

[@mianumermasood7224]

Divide I m looking to Change my career.and want to start cyber security I m from Pakistan I m looking you vlogs and lisning you a alot please can you give me any advice or tell me the Course which help me so I can save time and become pro in Cyber security and earn nice salery

[@Techme239]

Sir how are install Kali Linux on non rooted device

[@davidbombal]

I show that in this video: kzbin.info/www/bejne/gamyeKyrfNZjitU

[@Moon-wn5rm]

He wants us to eat the bugs

[@200msGamingYT]

Hey can u teach us how to hack android multiplayer games or mod them??

[@cyberhunk5388]

Unable to get hard copy of second book

[@master_zd]

😊😊👍👍👍👍👍👍

[@scarytruths01]

I dont use Tic Tok it gathers data even after you delete your account

[@hbbing9830]

Please david recommende me roulette creaker tool ...

[@rongziwang8722]

i am sorry for Mr Robot's keyboard don't equip with TAB key.😛

[@mostafaallam6533]

My pc infected by ransom virus can you help my

[@SPAnoma]

Which hacking os hackers used to hack

[@victorlazar5254]

Windows 95

[@tiporari]

Any important data center will have grid tied diesel or natural gas generating plants, not massive lead acid battery banks... those went out of style 20 years ago because they were dangerous and only provided minutes of power. Man in the middle attacks of weak update systems and writing custom firmware for obscure infrastructure is a cool flex, but not something to be fearful about. Your admin password being default is much more likely as an attack vector. Security theater... it's all a joke anyway.

[@noirbl00d98]

23:55

[@eggyfeggyana]

Tutorial ?

[@shawnhumphreys-q3e]

Who is watching this in 2024 located in Maryland like myself???!!!

[@nephildevil]

hqck a server that has the firmware from a pacepaker, then remotely flash the pacemaker with the test signal and youv' done homicide just by hacking

[@ArSiddharth]

😊😊

[@davidbombal]

Thank you!

[@اشرفالقايدي]

هل يوجد عرب يشاهدون؟

[@SplitZeroOne]

It's better to give your data to China then the US if you are from the US and don't plan on visiting China....