Real World Hacking with OTW (Privacy and Cybersecurity IoT warning)

[@davidbombal]

Should you be using IoT devices? Think carefully ... there is a new Botnet out there targeting IoT devices. IoT devices unfortunately often have very poor security.... and can be targeted. // Juniper Free Training // Big thank you to Juniper Networks for supporting the community and making this training free (and sponsoring my channel). Go to juniper.net/davidbombal to get lots of training and also learn how to get certified for $50 (Associate Level). Use this voucher code to register for your courses: DAVIDBOMBAL If you have issues with the Juniper registration, please use these links that they gave me: For Login assistance link userregistration.juniper.net/loginassistance Customer Support link- support.juniper.net/support/requesting-support/ // Occupy The Web SOCIAL // Twitter: twitter.com/three_cube // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: davidbombal.wiki/otw // Mr Robot Playlist // kzbin.info/aero/PLhfrWIlLOoKNYR8uvEXSAzDfKGAPIDB8q // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: kzbin.info // Occupy The Web books // Linux Basics for Hackers: amzn.to/3JlAQXe Getting Started Becoming a Master Hacker: amzn.to/3qCQbvh Network Basics for hackers: amzn.to/3W1iiCQ Top Hacking Books you need to read: kzbin.info/www/bejne/qqOze5R5fKeVgbc // Book Discussed // If it’s smart it’s vulnerable by Mikko Hypponen: amzn.to/3GdCbR0 // Other books // The Linux Command Line: amzn.to/3ihGP3j How Linux Works: amzn.to/3qeCHoY The Car Hacker’s Handbook by Craig Smith: amzn.to/3pBESSM Hacking Connected Cars by Alissa Knight: amzn.to/3dDUZN8 // Louis Rossmann KZbin // Louis Rossmann: www.youtube.com/@rossmanngroup // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] // MENU // 00:00 - Coming Up 01:40 - Sponsored Segment 03:17 - Welcome Back, OTW! 05:11 - OTW's New Course 06:42 - Hacking IoT 07:00 - Botnets and DDOS 14:03 - OpenWrt 18:34 - How do Botnets get Access? 21:57 - Electronic or Manual Locks? 26:28 - TikTok 30:24 - You Buy but You Don't Own 32:22 - Ring Doorbell Story 33:31 - Right to Repair 36:05 - Hacking Vehicles 40:44 - Luddites 47:00 - Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only.

[@precioslouzado8651]

Awesome David am a big follower as information is power and I am doing all the things without certifitions

[@lumikarhu]

Botnets were always targeting IoTs, but without watching - because not gonna lie, im not a fan of this particular guest - the answer is super easy. If you don't know how to harden your devices yourself and only rely on out of the box security - then don't use them. I use two IoT devices but they are kind of airgapped, on a separate network with no internet access plus i've manually checked their internals just for fun too. And these are super simple devices so there is no way to compromise them really.

[@MrNetworkG]

If you afraid to be hacked, don't buy IoT devices, don't use internet and throw away your computers and then might be you will be safe from hackers!

[@beautifullybrilliant7542]

7:11 First of all, I'd like to thank Occupy the Web. For doing and being well-being part of. The group of. 8 engineers/ hackers Who work together. In concert. To. DDoS. Russia's. IoT. Or as I will call it. Internet of tyranny. Via Putin. Thank you for that. Pardon the horrible grammar. You can think this wretched. IPhone Keyboard. Provided oddly by Bing. It's just out-of-the-box. Don't judge.

[@beautifullybrilliant7542]

7:11 as well, oddly enough I'd like to share this little story. My mother works in well she did work. She's retired now in the government of Canada I cannot say building. In fact it was she was management board secretary for the government of Canada sounds boring I assure you it is not. They didn't even have signs on their building. It just looked like some random office building in a major Canadian city one of the two biggest Canadian cities. And she had no higher level, but not low level. There's a thing called mid-level security clearance. like government clearance and where they worked on Y2K she met my stepfather there in the 80s anyway she's working there from 1979 till 2008. from the very instance we first saw the very initial early adopters of these Internet things devices like even just dumb early versions of Google Alexa send lightbulbs sent, especially locks like your locks to your house. Oh, she didn't like that video cameras she said this is gonna be a massive problem. People are going to burgled there is if God for bid there's some, yeah for lack of better people think Ted Bundy version of Ted Bundy say he went to IT school instead of law school and be real problems. You don't even have to pick the lock anymore. I didn't really take it so seriously until the last couple years when I learned Linux but she's right now saying that it's only 10, Megabytes. Of Linux and inside these things, that's scary. So thank you and I'm actually going to forward this to her period. She taught me this and you should teach your audience this. Old techies will always tell you this, and they will always agree on one thing, and that's hard to find in the tech world. They always disagree, but they'll always agree on one thing Buy 7:11 the tech you need and no more.Especially if you don't understand how it works. Do not. Just buy all these things that look cool, sound cool, or enticing. There's a reason why they're making them sound cool and enticing. And if you don't even understand how they work, then you don't even understand how you could be putting yourself at risk. And you may be, You may not be, but you have. I don't know, because if you don't know how it works, how could you. And there's a reason why Old. Techies. Only seem to buy what they need. And skip all the extras.

[@philosphize]

OTW is always provide tons of knowledge. Thank you for inviting him. Keep it up David 😊

[@bobbobe1721]

Great videos, OTW is like a music to my ears. Thank you David for making these videos happen.

[@parishaymakers]

OTW does have a great voice

[@Scorpy2303]

Man half way through Linux basics for hackers and it is amazing absolutely hooked. I have his second book ready to go as well! Both of you guys are amazing and I can’t thank you guys enough for all the amazing vids you do! I’m in the middle of a career change (for unseen reasons which turned my life upside down), didn’t know what to do until I came across your channel David! So yeah keep up the good work your awesome 😊

[@davidbombal]

Thank you! You may not be able to change your past, but you can change your future! Don't give up on your dreams!

[@Sebastian-jj8qn]

@@davidbombal Best KZbin channel! :)

[@phansypanda7512]

I made the same decision when COVID happened. It can be tough to change your career, especially if you're like me and thought you were set for life at that job... I hope you're doing well, my friend. Welcome to the nerdy side!

[@schultzsas]

I am also in the midst of a career change! This channel has really helped me.

[@florencedaniel2007]

Bro someone is blackmailing my sister i want to hack his acc or just want to delete his acc nedd ur help plz help

[@Sophiagrenne]

Through the help of an hacker, I know about one who helped me access my husband's phone last month

[@florencedaniel2007]

Please how do I get in touch with this hacker?

[@Sophiagrenne]

whatsap

[@Sophiagrenne]

+1

[@Sophiagrenne]

61

[@kfluhx]

I was studying web development, UX design, and project management with just a tiny bit of dabbing in front end coding UNTIL I got nervous that a repo of mine was hacked. I follow channels like yours now even though I don't understand most of it, because the higher level concepts help me understand what kinds of things I should be careful about. Unfortunately, the hacking scare has scared me a bit too much and I've stopped pursuing my goals for now. Hoping to restart again down the road with a more thoughtful strategy and better planning. You videos are certainly helping non-programmers like me start to understand the problems.

[@comoyun]

don't stop learning, you can do it!

[@abiriabdullah4832]

Whatever challenges you face it was meant to improve you so keep up you will be great

[@panicclinic]

I gotta say I have no knowledge whatsoever in any of this stuff but goddamn I love OTWs voice, it's like butter. I could listen to this guy talk all day.

[@jvphilippines]

David, you do a great job! We appreciate all you do!

[@DonCarlione973]

I love this channel. Very knowledgeable guy, Mr. OTW! You guys are a great team✌🏼

[@eyambevictory]

Best cybersecuriy channel, OTW is my idol

[@isojama1]

Thank you David for this excellent video with OTW! Looking forward for more :)

[@aussiegruber86]

I use physical locks. Lock picking lawyer: click on three, nothing on four…..click, ok let’s do that again to make sure it wasn’t a fluke

[@shockd6235]

Wow you posted this video at the right time i was looking forward to learn more about botnets

[@JohnnyIrish30]

Love all your videos, so much great info and great interviews. But I really like these sessions you have with OTW, good stuff

[@diversity7640]

Always something new to learn, Thanks David for this

[@davidbombal]

Agreed! Never stop learning!

[@Abduselam.m]

Every useful tool have it’s own risk I learned many things from David Bombal thanks

[@DaveBirra]

I think with tools like Ansible, it as become less complicated to control a vast network of computers and iot´s. Thank you for the interview.

[@majiddehbi9186]

this guy is a legende by himself he is all the movies out there whom deals with cyber security I hope he teatch all his huge knowledge

[@landrover827]

Always love these videos. Thank you David and OTW!🎉 💻

[@davidbombal]

Thank you! Glad you like them!

[@andrewborntrager7909]

They can shut down your vehicle if the signal is received. If you block the antenna with tin foil or cut or disconnect the Onstar antenna, then they can't do anything. Just like being in the basement of a parking garage or driving through a tunnel in a mountain, your car will still function fine.😊

[@redacted629]

So creating an inner network, not connected to the Internet or can access it, could circumvent these IoTs and once again make the user smart and not the tools.

[@gothops154]

5:02 which link out of the 50 links below is the link you are referring to?? There are no links to this guys classes

[@_AkeelAhmad_wani]

Love from Kashmir one of the best information giver

[@davidbombal]

Thank you!

[@GwijiAbu]

❤❤❤ just love the occupy the web interviews

[@MrNetworkG]

The content is BOMB with Bombal

[@salh2665]

❤شكرا على تنوع المواضيع وسهولة الشرح ❤❤❤😊

[@dooms1241]

ما توقعت اجد عربي هنا

[@salh2665]

@@dooms1241 لما افهم قصدك ولكن اتوقع الجديد وواقعية والسهولة في الموضيع

[@salh2665]

@@dooms1241 اخي انا لست خبير ومستواى تحت الصفر اني اتعلم الانجليزية ومواضيع الانترنت من هذه القناة الجيدةوانا شخص مهتم بعلم الربوتات والشبكات والاجهزة الطبية لانه ليس كمبيوتر جيد حيث صاحب القناة له صوت مفهوم وجيد وكذالك المعلومات وضيوفه اذا امكن اخي هل هناك برامج دراسية عملية وقنوات لهذه التخصصات وشكرا

[@dooms1241]

@@salh2665 يمكن لكن انت عربي صحيح

[@ruben1287]

I love to see this videos with OTW, do you think you can do an analysis on how quantum computers will impact the future of cybersecurity? Thank you and keep up the good work

[@jmr]

I considered the possibility my IOT might have been hacked a few weeks back. A lamp was turning on every night. The logs eventually shed some "light" on the issue. 😆

[@JosephQPublic]

The logs showed what it was? What’d the logs say??

[@jmr]

@@JosephQPublic If I remember correctly it was just an automation misconfigured.

[@JohnD0h_IT]

Excellent video once again! It would be very interesting if you made one or more videos of what the update of the Linux Basics for Hackers book would be! Keep up the good work which is greatly appreciated!

[@Javierriveraab]

Hi David, greetings from Panama . I wanted to suggest that you interview a book and author of Linux the Oracle distribution. I am from Panama , and English is my second language . Your channel is good stuff . Please keep the good work , David!!!!

[@xleage]

Its because theyre using left over parts to build them, while performing market research. The main issue would be the cost to implement the upgrades needed not that most of the market players cant afford it, its also their implementation of big corp sdlc. And they're backdoors left for future policing

[@giostechnologygiovannyv.ri489]

For free 😱😱😱😱💚❤😍 Juniper Network!!! .... What is the trap? XD.... thanks David for this sponsor I enjoy it

[@zaccampa4055]

It’s always a good video with OTW!

[@seaner992]

I guess I'm ripping OnStar out of my trucks today.

[@xleage]

I hope you didn't throw it away

[@xleage]

If you keep it ask online if someone wants it for debugging, or ask in your circles if someone can extract the source code and modify it to be safer

[@lukereiner]

Good luck…

[@nicktheflash1]

Are you sure? ONSTAR can help you in life threatening situations such as a vehicle accident. It detects air bag activation and will attempt to contact your vehicle and send emergency help if needed. Also detects your location should you crash down a mountain side off the main roads rescuers can find your location to save your life. These emergency life threatening detection services are free and do not require a paid subscription for emergency ONSTAR services. If your vehicle is stolen ONSTAR with POLICE AUTHORIZATION can send a slow shutdown code to stop and shutdown your vehicle in a safe manner and locate your vehicle for recovery.

[@sponge12313]

Thats not possible dude lol its so intagrated into the cars that you will most deffanlity destroy something yoy really dont want to

[@JosephQPublic]

Not sure about in the UK, but smart electric meters with service disconnect switches are pretty widespread. The utility I work for has +500,000 residential electric meters - all of them with a switch that can be turned on/off OTA. Ours currently operate off a mesh network at 800-900MHz and have Zigby. It’s an extremely impressive mesh network with meters talking to each other and HQ. We’re probably going to change to cell network in the next couple of years.

[@aquahoodjd]

Do you think you could use THz or high GHz "radar" to probe the processes of MCU, CPU, or even secure zones?

[@majiddehbi9186]

thx David a real good idea to do a serie about these books

[@CCobraProductions]

This was very interesting and informative

[@247DAVIES]

I love you two guys , brilliant !

[@BrunoGarciaNokia]

I have a few Sonoff devices to control only lights in my home and my router has an option to IoT network where they are isolated from my other home devices. Do you think that even this is not enough to keep my data secure?

[@elmehdiezziar]

Great episode, thank you

[@UnixDaemonKiller]

Do the majority of these devices sit behind UPnP firewalls, or firewall/routers that just don't block inbound connections? Or is it shoddy port forwarding/dmz devices?

[@pascalauclair4973]

I should keep my old car, will take value in the future 😅 This will effectively become more and more important in the future; because each time that we add a connectivity feature, we also elarge the attack surface. Thanks,

[@gamereditor59ner22]

Interesting topic....🤔 Thank you for the information!

[@davidbombal]

Thank you. You're welcome!

[@gamereditor59ner22]

​@@davidbombal You welcome!

[@jencumming708]

Hey where is the link that you talk about in the video at the 5.05min mark? Where you say it has all the things I there that you don’t talk about on KZbin? Where is that link Kind Sir? Many blessings and thank you David! 🙏🌈🙏👍

[@schonsospaet22]

min 23:00 great point there, the house should not be connected to the web. privacy is important.

[@lucianjohr5569]

Thanks David... OTW is the bommmmmmm👊

[@i_Kruti]

We can't stop IoT devices to debut in our life , but we can try to make them more secure 🔐......!!!!

[@SpearmintRevolt]

On my new oven, it can connect to my WiFi, but it has a built in timer where it disconnects after a time. You have to push the button on the stove display to have it connect. So, if you were going out and wanted to control it for a time you could but it doesn't just stay on indefinitely. This was probably implemented as a way to mitigate these kinds of threats.

[@LucianBogdanMuntean-ou2ru]

Great video, as usual! But what is linkinbio?

[@IMBlakeley]

I take the point about IOT devices, don't have Alexa or similar but do have some remote control switches to turn on my heating when I am coming home or to turn on my remote PC.

[@talekksna]

Impressive. Getting better and better every day... One thing is not clear to me. Why did you bother to work on the "Russia" project?

[@Pay-No-Mind]

Ahhh, the ol *Tyre shop putting screws + nails on the roads within a 2 mile radius from their shop* trick!"

[@ourdazakaria4182]

This is really helpful 👏

[@laxonetrc]

Thanks David and OTW.

[@mobinahmady-hj5ew]

hello david my computer supports monitor mode so how i can enable it in kali linux

[@seamusrw]

So close to what PK Dick saw. Which story is it where the doors ask you for payment to open? But we are not far away from it.

[@Lineage_OS]

Such a restriction I want to share this video to all my relatives and friends but I can't As they say '"the quieter you become, the more you are able to hear" I can't let them know I am in hacking field

[@907-q7u]

Just like Audi charging $800-900 to replace the vehicle battery because it's a "special" battery that can only be replaced at a dealership with a specific tool. They lost a potential customer over that.

[@Saint_Staunch]

You guys need to do an episode on "The 5 eyes". Please?

[@Rogueferula]

Since you asked, I would really love to learn how to set up all my hacking tools on one USB stick. Here's the kicker, though: How do I stage it as an application that can be ran without hassling with dependencies? Much like docker, but in USB form. I'm looking to be able to plug and play, hacker style. Can that be accomplished? Also, love all the work!

[@jackgreen1405]

Hello David, How do I obtain a Associate in Certification In Hacking or Cyber Security ? I don't like those people that offer a Certification and they steel you money and no Certification was never received. I love all your Video's Take care, Brian

[@alirezamomen2578]

another usefull video❤

[@MKtube92]

Im not a expert but why we dont limit and restrict from where the devices receive packets???

[@husseindhooma7144]

David, excellent video sir, one thing I have to know, is it just me or in every video you look younger, they say that camera adds 10 pounds, but in your case its like it removes 10 years. Never mind hacking send your secret on how you look so young.😄😄😃

[@johngrikis9049]

OTW is right about keeping security "old school".

[@TheOnlyPhilRider]

i would like to see videos around vulnerabilities to accessibility via voice control and switch control on our mobile devices. This is something I personally research on investigated in and personally experience the sheer turmoil it causes and the current threats around it as apple in my case is indenial of the vunerability i keep raising to them even after inexcusable evidence that yet they still not have replied back to

[@JohnnyBoy144]

I’m not a hacker by no means at all. However, I do have my A+ and Network+ certifications (working on security+ and Linux certs.). Accomplishing that gave me an understanding of basic to lower level intermediate defensive/offensive I.T. awareness. I WOULD NEVER, EVER ALLOW ANY FORM of smart device in my home (except for a phone, the HDTV, and my laptop obviously). Absolutely no smart fridge, no smart home appliances or lamps, Alexa, etc. Even to this day, I still put tape over the webcam on my laptop! Lol.. Those devices are just too much of a security risk!!

[@steverudolphjr5420]

Do you need previous IT experience or knowledge to learn on juniper ?

[@MorrWorm8]

The man, the myth, the legend.

[@dieselstruck]

Some Companies that have work from home employees advice not discussing business while a smart device like Alexa is present. If a huge company is worried enough to advise such thing one as an individual should also be weary.

[@user-zb9qk3ml9r]

How are we supposed to protect our phones from being hacked? If we use Wifi, it could get hacked. If we use Bluetooth, we could also get bugged. My phone has been hacked via Wifi and Bluetooth. What am I supposed to do? Use 4G only and never use Bluetooth?

[@Andy.N-_-]

Great topics , really interesting. After watching this i would love to see an in-depth tutorial around hacking webcams, The tools used and how to even identify that an ip/ssid is of a webcam? thanks again

[@revenevan11]

For searching for them and identifying them, there is another video on this channel. In a word, "Shodan" is what you're looking for lol. Personally, aside from googling the default passwords and logins for various brands after identifying them based on their banner info on shodan, Idk much about actually getting in to the IOT devices.

[@jokerroc872]

Well explained ❤❤❤

[@davidbombal]

OTW is amazing :)

[@Don_Gorgan]

How can you tell if your wifi or mobile phone has been hacked?

[@rafalniznik1448]

People needs to be aware that is true, but most of them they simply do not care. If the decided to be a product it is their choice. However those who care should work together

[@demotedc0der]

What cloud providers do the hackers mostly use? ...are they offshore or well-known ones?

[@demotedc0der]

Also, how do they take care of RDPs/VPS to last long and get as many "victims" for their RAT or botnet as possible... would be awesome if you discuss these things in the next series,, much love for u guys

[@ShortSkeletor]

This was a very eye opening video. I still want an IOT device lol

[@willdwyer6782]

The last time I had a car with an OnStar, I pulled the fuse for it out of the fuse box.

[@MakeitZUPER]

I'm loving all this info. Isn't it possible to hack into Amazon and other products to stop their ability to access their back doors? That's the best solution for us all.

[@revenevan11]

That's also tied into the "right to repair" legal battle ongoing. Companies like Apple and Amazon would love to prevent you from opening and truly tinkering with "your" (their) devices :(

[@MakeitZUPER]

@@revenevan11 As long as there are reverse engineering programs out there, I'm not concerned except for the hardware availability. There are always ways around that too but you end up with a device that can resemble a Frankenstein like build, lol.

[@Dav2112]

I got my copy of that book yesterday.

[@hamzakhan-lp6gz]

Is full stack developer a good carrrer choice... ?

[@KishanKumar-fb4og]

Sir can you please give project ideas on the network security

[@PubRunner]

A friend of mine just brought a Ford Explorer and it’s permanently connected to the net and it’s run by ford the car itself has its own cell modem. While it’s cool I am not particularly happy about it. I would want to know exactly the info Ford is send my and receiving. He said the contract that covers it all is about the size of War and Peace.

[@GirishVenkatachalam]

Amazing channel

[@Thuja814]

@19:43 my fridge and TV are disturbingly chatty Cathys

[@mohammedadel5683]

and what is the best for virtual machine iso file or vm file

[@creativechandu1182]

Hi sir, i Love you explanation, i am starting graduation in cybersecurity, can i get job on cybersecurity, what will be ny future in cyber security field please guide me 🙏

[@amanrohilla3461]

Nice sir ❤

[@natureiscrazy]

Hi Guys, im looking to go from computer hardware to cybersecurity. Do you know a good path. Im on cisco at the moment.....will check out juniper today

[@rami.0092]

❤ as iconic as it always.

[@davidbombal]

Thank you! I hope you enjoy the video and learn something new!

[@mytechnotalent]

IoT with David and OTW I mean what better a Sunday could we have! Love this one as firmware is my gig!

[@davidbombal]

Thank you! I always enjoy my talks with OTW - he has so much knowledge and experience to share with all of us :)

[@mytechnotalent]

@@davidbombal have an amazing weekend David! I am just packing for DEFCON Id love to see you there!

[@kevinpritchard3592]

WOW, my mind is blown

[@macktheripper7454]

Im not a fan of otw but an interesting video regardless, thanks David

[@AuxiliaryPanther]

Why are you not a fan of OTW?

[@jeroen5736]

Unable to scan without ink... That is crazy stuff ..

[@GwijiAbu]

Kindly Occupy the web should drop us one free course

[@kartelune2730]

I think you need that voice to become a Hacker

[@johirulhaolader2736]

Even not being famous or Very rich I already afraid to talk in front of my mobile phone !!!! 🤓🤓🤓

[@michaelscofield9312]

the hacker his voice looks like the blacklist actor 👌

[@woritsez]

from small local firms to nation states. security was always that way

[@googlegok9637]

when you buy a new car , it is online by law! E call, and what else the car manufacture can get out of you-