"Every employee is part of the security team" -- This is such a good take. I wish I could get my coworkers to understand this.
@bpb21011 ай бұрын
But how do you motivate completely uninterested employees to learn about IT security? (Assuming management is also just as uninterested.)
@user-cj6zg5xk5u11 ай бұрын
I certainly sense no interest assuming management spoke up.
@embersaffron552211 ай бұрын
They probably don't get paid enough to care about their normal job, let alone security
@TheGuy3-D11 ай бұрын
@@bpb210It's a culture thing. My team sends out pretty regular phishing tests via email that we send to specific departments, or all employees.
@One.Zero.One10111 ай бұрын
🔖Nah man, humans are just too stůpid. In my country, everyday we got dozens of warnings about text scams and everyday hundreds of people still fall victim. Humans have been getting scammed since the caveman days and they'll still get scammed til eternity, the technology just changes but the scams stay the same. MLM scams today are just modern variations of investment scams in the early 1900s.
@swankeepers11 ай бұрын
As has often been said, the defenders (blue team) have to get it right every single time. The attackers (red team) only have to get it right once.
@basse88999011 ай бұрын
True, until the attackers get inside. Then they have to get it right each time to not get caught. They just need to make a single mistake to get caught by the blue team
@iagmusicandflying11 ай бұрын
@@basse889990 Truth. Makes my job much easier when your average hacker's first thought is "I'll start a cryptominer!".
@Thomas0x0011 ай бұрын
@@basse889990 facts. But sadly I have often seen that eventho blue teams are able to detect, rapid containment can be incredible hard.
@benhook101311 ай бұрын
@@basse889990 again still much easier, its not the case that any single mistake will get them alerted. In some environments, monitoring may never pick up the attack happened, and companies only know when the data gets released or sent a ransom (this happens a lot...). Blue team has a much harder job every single time.
@sebastiang739411 ай бұрын
That’s not entirely true. Any bigger company will have multiple layers of defence. So you get through one you might get stopped on the next level. It’s usually also just about making it uneconomical to attack you. It’s like bicycle locks. There isn’t a lock that can’t be broken open in a few seconds if you have the right tools. Still if you want to protect your bicycle a bike lock is a very useful tool and if the bike next to you has a shittier lock it’s likely that bike will be stolen before yours.
@faithblack385111 ай бұрын
Its amazing how much hacking occurs just by asking nicely.
@BlueProphet710 ай бұрын
Yep - most people think they are excellent judges of character, and when someone acts professional and polite while asking them for a simple innocent favor.... problems occur.
@sigmascrub8 ай бұрын
Not just hacking. A lot of crime is committed that way.
@paulb43347 ай бұрын
We think Ants are simple creatures. They trust everthing that carries a specific pheromone. In a corporate environment that's a badge and maybe a clipboard :)
@omarjimenezromero34636 ай бұрын
almost every person want so act superior or feel superior, so if you act politely and as a newby looking for new things, you most probably are going to bypass a lot of human security because of that, it is something that sadly had happen to me some times i lost myself in a place, i usually end up with the staff at the staff side like a rookie, until they see that i am not of the staff and i am only lost, but at that point i am some steps of their boss, their servers or close/in to some critical building XD.
@Zevilon055 ай бұрын
It’s not necessarily being a bad judge of character. Psychologically, humans inherently want to trust their fellow humans. Unfortunately, that opens the door for people to get taken advantage of.
@ladvargleinad756610 ай бұрын
He is not a pen tester, he is a full-blown secret agent.
@towermonkey55636 ай бұрын
Ummm, what do you think pen testing is? It's all corporate espionage or defense against it. Secret agent literally by definition.
@razvanciurez5 ай бұрын
Agree! The eyebrows give him away...
@Zevilon055 ай бұрын
Bond.. James Bond
@brodude71943 ай бұрын
This "kind" of hacking is actually called Social Engineering, the reconnaissance part the guy was talking about. Look it up
@manilkasheran29342 ай бұрын
@@Zevilon05 James Blonde?
@frandeep11 ай бұрын
This guy communicates! Short and concise. Also...Wired...Give your editors a raise. They rule.
@Zero.0ne.11 ай бұрын
Wired Support is one of the best things on the internet. I think everything about it is perfect and I hope they never change it.
@Snarethedrummer11 ай бұрын
He's busy! Got things to do, companies to destroy... (or help, as this case may be).
@kelseykreppel11 ай бұрын
Yes this!!
@odorlessflavorless11 ай бұрын
become a CEO before asking other companies to give them the raise.
@JacquelineHD282711 ай бұрын
I think he should do a whole series on how us mere commoners can better protect our S!
@christatum11 ай бұрын
It always scares me how little we, the average non-tech people, actually know about all this stuff
@A-JAM7511 ай бұрын
I didn't understand a single word he said lol
@timmyd381911 ай бұрын
As a software engineer, you have no idea. It's only getting worse too. Due to the user friendliness of modern day technology (think today's iPhone vs Windows XP) users are required to know less and less about their technology because it "just works". Combine that with the Internet of Things, that so many devices connect to the internet, that even hacking someone's Wifi toaster could be a dangerous exploit in the wrong hands because that gave them access to everything on your network.
@Noise_floorxx11 ай бұрын
True. I know the bare minimum but I don't trust much so that helps.
@One.Zero.One10111 ай бұрын
99% of people use the same username and passwords for all sites and they don't use two-factor authentication. I'm a computer programmer and a hobbyist hacker and I can into people's Instagram and Facebook accounts. There are professional hackers out there that are 100 times better than me. Yeah that's a scary thought.
@and_I_am_Life_the_fixer_of_all11 ай бұрын
with great power comes great responsibility.
@iainh11 ай бұрын
5:25 - The envelope trick is amazing, that's one I'd not considered before. I try to be as security conscious as possible, but I think I'd have fallen for that.
@ShawnFumo11 ай бұрын
Yeah stuff like that and the email to the CEO about the conference are very scary. Not falling for random phishing attacks it one thing, but we usually aren't expecting anything that is more targeted.
@spg17948 ай бұрын
- im sure that worked like a charm 20 years ago. these days a security camera will ID you dropping a weird envelope on the desk and the FBI will be at your door 5am ready to take you and all your computer crap down to the field office😅
@Roccondil8 ай бұрын
Unless of course company execs don’t want a security cam in their office. IT and the security team might also not want cams in offices on the offchance the system gets compromised and now the intruders get unrestricted access to things they just need to lie low and wait around for. Bonus points if the surveillance system also includes audio.
@omegagilgamesh6 ай бұрын
@spg1794 Not all places that need good security have good security. Don't forget, leaders of companies are people, and people can be extremely stupid. That security breach that happened a few years ago with EA where hundreds of thousands of gamers' personal information was compromised? That was just a series of phone calls to get that information, and six months earlier guys like this dude told the CEO and Board that this was an extremely dangerous flaw, and they did nothing about it.
@tomlxyz4 ай бұрын
@@spg1794 even if they do get caught doesn't mean there won't be damages
@colinprincipe629311 ай бұрын
I think the reason why email continues to be such an effective vector for attacks is because of the sheer volume of email people receive in a day. Especially in large companies where everyone is copied on everything
@onkelpappkov266610 ай бұрын
That is way too true. And then among all the clutter, someone sends a message about registering on a 3rd party website with your internal password, which you competently identify as an obvious phishing attempt, hah! Only to find out it was actually your boss and he actually wants you to do that and he tells you in person, completely oblivious about everything.
@mikeconleyphotography9 ай бұрын
The reason is HTML email, which effectively hides what’s actually in the message data. Links are disguised and lead to bogus sites. Another disaster we can thank Microsoft for.
@AndorranStairway11 ай бұрын
His hot take is 100% accurate. Phishing is by far the most popular and effective way to penetrate an environment. It is far more tedious and cumbersome to develop sophisticated malware than it is to get an ignorant person to scan a QR code. If everyone developed basic knowledge on how to identify phishing emails, there would likely be over a 90% reduction in cyber crime out there.
@gman414100711 ай бұрын
Im so happy seeing someone say this. I've been saying the same thing every time something gets "hacked." i don't even call phishing hacking because it's more like a scam.
@benhook101311 ай бұрын
Ah you again pretending to know what your talking about. Hot take, huh? This line has been said and has remained true for over 10 years, if anything thinks this is new information you truly have no idea about IT security. (which makes sense give your other inane comments trying to call out other people)
@AndorranStairway11 ай бұрын
@@benhook1013 yeah I do know what I’m talking about since I hold both CISSP and OSCP. All I did was agree with his statement, but you went on a tangent about “new information”, which I never said it was. I’m guessing you’re just an internet rando “IT security” or sysadmin wannabe who thinks using wireshark makes him Mr Robot? 😂🤡
@darksnow111111 ай бұрын
@@benhook1013 Is your iq low or are you simply ignorant?
@Skank_and_Gutterboy11 ай бұрын
Yep, scan a QR code or click a link that says, "Click here to learn how to avoid scams..."
@Skooozle11 ай бұрын
I love that his job title on his Microsoft badge is "hacker".
@GeekGamer6667 ай бұрын
Didn't even look at that, that's hilarious.
@et91206 ай бұрын
@@GeekGamer666 yep, and that's the lesson, most people aren't actually checking.
@benoitbvg28886 ай бұрын
...but he presents himself as a "penetration tester"...
@ThePlayerOfGames6 ай бұрын
@@benoitbvg2888 watch Jayson E Street's DEFCON presentations, as they've said above; many peeps are only looking at the surface level without even properly seeing what's in front of them
@omarjimenezromero34636 ай бұрын
@@benoitbvg2888 how much people know what a "penetration tester" do? and how much people only assume that is a thing of informatics wich they do not want to talk?
@isabellek169210 ай бұрын
If this guy had an internship or some certification program I would 10000% sign up for his program
@Optable14 күн бұрын
There's numerous. I recommend OccupyTheWeb's courses and books. Check out their website
@bulwulffcristole323511 ай бұрын
I'm CEH/OSCP myself and I have to say the information that was put out here is awesome. Way to go, and very well articulated. Lots to learn for those willing to - keep it up!
@humane12311 ай бұрын
I am a security engineer and I loved every bit of this video.
@sreyashkanjilal492911 ай бұрын
hey , i really want to know something. Can you tell the process to become a penetration test/ hacker ??
@matt823911 ай бұрын
Skillset. Learn as much as you can and get good at it. @@sreyashkanjilal4929
@danny935011 ай бұрын
@sreyashkanjilal4929 Learn I.T. Helpdesk and Networking first. Then pivot into focusing on network security. Security gigs are an "after 5-10 years of experience" career.
@duplicake405411 ай бұрын
Me too! I'm an ethical hacker/pentester
@JimBob193711 ай бұрын
@@sreyashkanjilal4929 , nope, that's not a youtube block, I think it's a person removing replies, curious if the channel moderator is removing such posts.
@isaacheng689811 ай бұрын
I'm in college for cybersecurity engineering right now and this video was great, this guy explains a lot of these concepts very well for people who aren't familiar with the field
@mattc959811 ай бұрын
what are the requirements for getting into that field? I understand hardware far better than software, can barely code without using AI, but have thought about it. My local college says you need an degree in IT first, but they don't offer that sadly
@warlock859311 ай бұрын
@@mattc9598don't worry about the degree nonsense. You can learn software Online. You will be confused at first, but don't worry. Just use online resources.
@Kokose11 ай бұрын
@@mattc9598 interest in the field, mostly. As long as you're passionate you don't even need university to start as an analyst, I highly recommend researching certificates and requirements and just studying for those.
@RealWorldMaverick11 ай бұрын
@mattc9598 what field exactly? It? Engineering? IT is very broad so if you can provide some additional information I may be able to point you in the right direction. What stuff are you interested in?
@pin6537111 ай бұрын
@@RealWorldMaverick exactly.. you dont really need a degree or even much technical knowledge to get into penetration testing. That is part of it but there are also people that specialize in the social engineering side of things. I would love to get into physical penetration testing. I listen to Darknet Diaries and that side of things honestly seems like a fun job. You are getting paid to get access to buildings and areas you shouldnt have access to.
@perrodetokio6 күн бұрын
This expert is both the stereotype of a hacker and a counterstereotype of how pop culture imagines a hacker. Love it!
@supremeleaderkoko10 ай бұрын
More of this guy please. This stuff is so prevalent nowadays
@Sonicgott11 ай бұрын
Even as a computer professional, and computer sales person for over 20 years, this video is still quite informative. Take the heart the information this gentleman has posted. It could save you and your company a lot of time.
@ferryvantichelen652111 ай бұрын
We have the rule if someone does not lock their laptop and walks away, it's fair game to send "I'll bring cake tomorrow!" in the company wide Slack channel. It's not much, but it's a start of some education about security. And cake.
@MLBlue3011 ай бұрын
I was told there would be cake but it was a lie. Taking my stapler was the last straw, so I burned down the building.
@pathosmathos65296 ай бұрын
Clever! We used to change people's languages.
@5bars3g366 ай бұрын
Ctrl-shift-Right (on Intel integrated graphics machines) is another good one for messing with people who leave their computer signed in.
@orngjce2234 ай бұрын
Same way Rickrolling has been one of the best ways to teach people to be cautious about which links you click.
@Liliarthan2 ай бұрын
It’s shocking how many people leave their desktops unlocked. It’s like wearing a seatbelt for me, I don’t feel comfortable until I hit Ctrl L before I leave my desk. Also predictable passwords that they don’t change frequently. The number of “Admin” “admin” server admin accounts I’ve seen is also concerning.
@KentonKoneval4 ай бұрын
6:40 - sweet now I can use my lack of skills and experience as a way to convince employers that I’m too smart and experienced to just be sharing that information on the internet. The ultimate interview bypass
@EK-rz2xp11 ай бұрын
This guy is great. I'd love for him to return with more QA!
@johnmiller993111 ай бұрын
He's a very well-known name in the space. If you search his name on KZbin, you will find tons of speaking events that he's done over the years. It'll keep you busy for a while.
@EK-rz2xp11 ай бұрын
Oh man, you right. I'm about to binge right now lol. Thanks, @@johnmiller9931
@ulalaFrugilega9 ай бұрын
@@johnmiller9931thx!
@zephyrp88366 ай бұрын
Hes done presentations at Defcon, he's very entertaining
@yasirhashmi1654 ай бұрын
WHT is his name
@HoldFastFilms11 ай бұрын
One time I had to argue with my manager that the request to provide server credentials to a vendor is 100% a pen-test and I was not going to oblige. We argued for days over it and I did not budge and of course it turns out it was a pen-test. Sadly, this was in an IT department and IT management is pretty clueless when it comes to this and just "want things done".
@LivingGuy48411 ай бұрын
You definitely could have rubbed that in their face, great job!
@One.Zero.One10111 ай бұрын
Not knowing technology is one thing, but people who brag about being computer illiterate is another thing. They lash out at people helping them with security advice. I see it everyday on Reddit; *"I don't need your security advice! I don't believe in this computer mumbo jumbo! I don't believe in all these threats! You people are just being paranoid!".*
@JJs_playground11 ай бұрын
Did you get promoted?
@Peacekeeper_8411 ай бұрын
Is kinda sad and pathetic that some IT managers have 0 knowledge of basic cyber security measures
@onkelpappkov266610 ай бұрын
@@Peacekeeper_84The Jen Barbers of the IT world. People persons.
@seclilc7 ай бұрын
I know Jayson personally, and he’s just an incredible human. So happy to see him here ❤
@callumb498011 ай бұрын
Why do all pen-testers look like they were kicked through the Las Vegas strip
@SobeCrunkMonster4 ай бұрын
great way to describe it lol
@uuuultra3 ай бұрын
through?
@hdtv22963 ай бұрын
Because defcon (big hacking convention) is in las vegas
@factorfitness3713Ай бұрын
They were?
@jonwhite549Ай бұрын
A lot of them live in vegas
@Ultr4l0f11 ай бұрын
Talked to a guy in IT connected to banks. The hackers can scope people so well. A CEO had his kid at a school. A major incident happened at that school. Within less than an hour they had sent a very official looking e-mail to the CEO with a link, that they said was for more information about the schools reaction amd which children were affected. So they had scouter the CEO and his family, and set alerts to if media wrote anything about things such as the childs school. Kinda scary
@lollubrick9 ай бұрын
or they played a role in whatever happened
@KMKZE-ho5wk6 ай бұрын
I worked at a high class hotel for some time and had to prepare a report where I wrote everything down I could find on the internet about our guests. You wouldn't believe how much info you get about millionaires/billionaires, just by googling them.
@Imshady6911 ай бұрын
I was an IT Security Admin for a big restaurant group. We had to go through PEN testing every year. I don't miss it one bit
@sreyashkanjilal492911 ай бұрын
hey , i really want to know something. Can you tell the process to become a penetration test/ hacker ??
@jameslarosa239611 ай бұрын
I don't know how you guys sleep at night having to worry every minute about someone hacking into the systems you need to keep secure.
@duplicake405411 ай бұрын
@@jameslarosa2396 Most of the time, we don't
@myname-mz3lo11 ай бұрын
you have to be really good at researching things on the internet instead of asking people for help thats step one lol@@sreyashkanjilal4929
@xbabu142x11 ай бұрын
I like to call it PEN15 testing and throw in as many phallic facsimiles as I can get away with in the report while playing dumb.
@baller4life39511 ай бұрын
Need more of this! Definitely my favorite speaker and content thus far. Educational and entertaining
@nicolavolpe53111 ай бұрын
This is one of the best of this series, together with Burial Support. 😂 This guy kept me glued to the screen wanting to know more about what he had to say
@quietstar09silver5011 ай бұрын
Annual pen testing reminds you it is best to not trust anyone and treat everything as suspicious. This was another good reminder to be careful online. Spear-phishing scares me the most. Some attempts are very hard to spot.
@keithd.272211 ай бұрын
People in the security industry tend to express this a bit differently - "trust _BUT VERIFY"._
@GreyAzazel11 ай бұрын
I've been spear phished more than a few times. Some of them are very convincing. It does make me wonder about the security of a platform like LinkedIn in conjunction with the standard first.lastname@companydomain. If email wasn't as easy to guess I think that would decrease phishing attacks of all kinds.
@alexandermacneil443011 ай бұрын
Phishing has become even more effective now that non-English speaking hackers can leverage LLM such as ChatGPT to write more convincing emails!
@julianakarasawa3159 ай бұрын
Absolutely true 😂 annual pen testing was the only time I got commended for being grumpy and telling front desk "I'm not expecting anyone, send them away" when red team tried to use me to get physical access to the building under the guise of a visit
@MaskedDeath_6 ай бұрын
@@julianakarasawa315 They're probably going to treat that as a competition for you guys haha
@juliusnovachrono437011 ай бұрын
This video is genuinely hilarious yet fascinating at the same time.
@AsiaDanceScene11 ай бұрын
I think you spelled 'terrifying' wrong...
@M1NML11 ай бұрын
This was spectacular. The way Jayson communicates shows his mastery over the subject
@labelleza21198010 ай бұрын
I'm still amazed on how this guy can articulate all this information for anyone to understand!
@Sunflowersarepretty11 ай бұрын
Never would I ever pick a USB no matter how tempting it feels. Also loved it when asked "how to rob a bank" and he said that he knows but wouldn't tell 😂
@smnsmnsmn11 ай бұрын
Jason has done a talk at Defcon called “Steal Everything, Kill Everyone, Cause Total Financial Ruin!” where he breaks into a building using a piece of cardboard. Cannot recommend it enough.
@Squant11 ай бұрын
I'm the opposite. I'd never ignore one and honestly, I'm surprised Jayson said he would. It seems far more plausible he's got a bunch of secure burner laptops he can use to plug them in and find out what other people are trying to hack with.
@geshkigal11 ай бұрын
@@smnsmnsmn he's also gone on the Darknet Diaries podcast, Ep. 6
@lolwtnick43625 ай бұрын
cause he doesn't know. it's much easier to rob a armored vehicle than it is to rob a bank.
@Luunchb0xxx11 ай бұрын
So many great things going on in this video. Great explanations in plainly digestible terms of what can be opaque and jargon littered subject matter. Not only is the presenter genuinely excited by some of the questions, he obviously wants to share. Makes the content all that more authentic and enjoyable. This dude seems like he'd be a great co-worker and colleague!
@ironcity418211 ай бұрын
I enjoyed your video. I’m older going back to school at Devry for IT and Networking. At the moment got online classes dealing with Cisco security. The other wire, wireless and optical. There’s so much to learn and it’s getting more interesting as I get deeper into the tech world. I’m still on the surface while getting a solid understanding.
@Inscyght10 ай бұрын
As a penetration tester, I can confirm this is solid information. Good high-level answers to every question.
@biggusdickus84523 ай бұрын
High level answers explained in low level vocabulary as well.
@austinhoff6611 ай бұрын
I don’t know how you find these people but keep it up. Such great communication with so much to learn
@myname-mz3lo11 ай бұрын
he is verry famous and does conferences and talks all the time .
@ruk2023--11 ай бұрын
Google "Who is the number one expert in the field that I'm interested in" and then hire them.
@error.41811 ай бұрын
he's given about 1000 talks at DEFCON
@Spaids210 ай бұрын
Looks like hes part of defcon, lot of notorious hackers go there
@aqwandrew63308 ай бұрын
whats defcon?@@error.418
@iagmusicandflying11 ай бұрын
Thanks for the blue team love! We love you right back, even if we don't always show it. Also: clipboard + hi-vis vest is also an amazing pen test tool. Bonus points if you have the metal clipboard with storage. And practice a bored, slightly disgruntled (not full on angry) look. 30 bucks at Amazon and a few basic acting chops go a LONG way to getting you into places you shouldn't be.
@error.41811 ай бұрын
just go ahead and credit Deviant Ollam, please
@DreamsInHD11 ай бұрын
That’s real. Go Blue Team!
@RogueCylon9 ай бұрын
He knows who pays the bill.
@iagmusicandflying9 ай бұрын
@@error.418 sure, why not, even though I've done this as far back as the 1980s and I'm not the first to do it.
@Glitchunlocked8 ай бұрын
@@iagmusicandflying Some people are too young to realize not everything originates on the the internet lol.
@rio19711 ай бұрын
Finally! A cybersecurity expert that we deserve!
@KarmaK19846 ай бұрын
I’m not in the field of IT and watched this out of curiosity. He explained things so well and I understood a lot more than I thought I would! Really interesting!
@anwarfaridshahudin630511 ай бұрын
3:19 He's being real here 😂😂😂 Report & documentation is the most challenging part of any job.
@bikeny11 ай бұрын
Yeah, I felt that one, too. When I was programming back in the day, 'What do you mean I have to document every single line of code?' And don't get me started on flowcharts. I had hair back then, and there were times I was pulling it out. It's all gone now, so who know what caused the baldness. At least my salt and pepper beard is working.
@alihms11 ай бұрын
True. What's the most difficult part of a PhD program? Thesis write-up - not the research part of it. I know a few guys who did not complete their doctorates because of it.
@ShawnFumo11 ай бұрын
@@bikenyThankfully the "document every line of code" is a bit less common now, but there is plenty of other things that are difficult to get through.
@realStinger4 ай бұрын
I hate writing reports man. Most boring part of hacking.
@PrestonMcNair11 ай бұрын
I’ve been a fan for a long time, read his book during my undergraduate studies. Clear, concise, and to the point.
@SyjaneTV11 ай бұрын
How come your YT is verified with only 517 subs ?
@aboxinspace2 ай бұрын
WE NEED MORE JAYSON VIDEOS PLEASE
@overlordprincekhan8 ай бұрын
I once made a hacking report in our university assignment and named the group as: "Hardcore Penetrations Inc."
@schelletick11 ай бұрын
Your comment that, Every employee is part of the security team, is something that will always be embedded in me now, thank you so much
@sebastian0436811 ай бұрын
Out of the best videos I have seen on Wired. I hope to see a second part with that same guy. He is quite clear in the way he speaks and you can also tell he knows quite a lot 😃
@99prxp11 ай бұрын
8:10 bro paid to find the weakest link only to find out its him.
@jhandle9003 ай бұрын
Please have him back on.
@matt823911 ай бұрын
as a security tech, it feels almost illegal releasing this video lol.
@XSemperIdem511 ай бұрын
The bad guys already know the tricks anyway. This is serving as education so other people know what to be wary of.
@matt823911 ай бұрын
of course, was more of a joke. But lots about this video easily entices the wrong crowd @@XSemperIdem5
@0num411 ай бұрын
The weakest part of your network is always the human element. Train your people on what to expect, and train them to raise the red flag when something seems at all suspicious. I've been in this industry for 20+ years and even I've had pen testers get through my defenses. It was a valuable lesson: even a professional isn't beyond making mistakes. And it didn't happen again.
@l33tninja110 ай бұрын
Treating them with common decency also helps since they will actually care what happens. You treat them like crap they won't care about their job and so won't take actions as readily if they see something wrong. It becomes a "not my problem" situation.
@0num410 ай бұрын
@@l33tninja1 100% !! Respecting your people is a must.
@johnsonken9611 ай бұрын
I stumbled across an old spy video that had a unique spy gadget hidden in a belt. Even a tool made in the 1930's seemed so technologically advanced. It made me wonder just how crazy the spy/hacker technology must be today. And this video made it clear: it's absolutely crazy.
@deelanmj10 ай бұрын
This has to be one of my favorite Support videos on Wired (the others being Mortician Support and Doc Support). More of this, please! Very educational and enlightening.
@CitroChannel10 ай бұрын
Please bring this guy back for multiple sessions! He's a great communicator with a lot of interesting insight and legit experience in cybsersecurity!
@CptnCobblestone11 ай бұрын
If only more concepts were as quick and easy to understand as this was. I’m in cybersecurity wanting to branch out and this was the information I needed before I got started. Thank you
@myname-mz3lo11 ай бұрын
this info is available everywhere online lookup network chuck or david bombal
@omg_look_behind_you11 ай бұрын
the social engineering god himself. best talks of all time were done by this OG
@RADULCHOS5 ай бұрын
8:15 Savage
@951penalozahugo11 ай бұрын
1:27 Alright, now you're messing with us...
@57thorns11 ай бұрын
I believe the right thing to do if you catch someone with a "get out of jail free card" is to escort them back to a public area, and wait for the person that will actually release them. However, in a real situation, there is always the threat of violence.
@Roccondil8 ай бұрын
Either that, or call your boss who should be high enough to be able to directly call whoever is apparently responsible for the unknown person. Because as mentioned in the video, the numbers might be false and the answering party might give excuses why they can’t appear in person to validate the intruder, while the person you are detaining is putting pressure on you because you are costing the company precious time and money…
@halfsourlizard93196 ай бұрын
Call people?! Is it 1965 or something?!
@Roccondil6 ай бұрын
@@halfsourlizard9319 yeah. phones didn't get tossed out in 1966. Or what do you think that little rectangular device in your pocket is meant to be used for?
@lawrencefrost906311 ай бұрын
Penetration Tester... They gotta figure out a new name for that profession.
@magicvibrations518011 ай бұрын
We gotta ban any word that people choose to sexualize now? Penetration testing is the best description of what they're doing.
@3xpl0i7911 ай бұрын
I personally like it better than "Hacker"
@keithd.272211 ай бұрын
"Vulnerability documenter" just doesn't have the same ring to it.
@Sabbagery11 ай бұрын
How about “Penetrator”? wait
@duplicake405411 ай бұрын
Well, at least it's true, you test to see if you can penetrate computers. I prefer 'ethical hacker' or 'cybersecurity analyst' more though
@TRexMorgan6 ай бұрын
His job title should be "Cyber Security Bad Boy"
@rootofskynet11 ай бұрын
great explaining, jayson! we need a part 2 of this.
@KaiHolden.11 ай бұрын
'Penetration Testing' sounds crazy💀
@enchantro11 ай бұрын
This is one of the scariest things I’ve seen about the times we live in!😳
@myname-mz3lo11 ай бұрын
ethical hackers hack so you dont get hacked if anything this is reassuring to know that there are more people like him than bad hackers out there .
@openskies1111 ай бұрын
When he said "kitty pictures," I thought he meant something completely different. Big sigh of relief when I saw it spelled.
@TheWakeupandsk89 ай бұрын
Jayson Street has an incredible DEFCON speech on penetration testing.. i highly recommend watching it
@kasnitch11 ай бұрын
I did learn something important ... don't mess with a skilled IT person . Be well .
@gran-roan11 ай бұрын
This video is so concise, clear and relevant, that it really needs a 2nd part
@aetch7711 ай бұрын
Google him, his talks are not usually so technical.
@gran-roan11 ай бұрын
@@aetch77 Thanks, will do
@andini7478Ай бұрын
I was gagged the whole video, this guy is the simultaneously the coolest person in the world and the most dangerous person in the world. Respect him fr
@TomMyfield-tr2tg3 ай бұрын
Next-level presentation skills! 👏👏👏 This video is awesome, like a "Shopping Channel" for hackers. Sharing with my learners. Thank you Jason.🙏 PS- Source for those glasses pls?
@jier990411 ай бұрын
love how they still call it twitter, nobody wants to call it X lmaoo
@N0ENEMIES11 ай бұрын
Im not even a pen tester or "hacker" but I've always enjoyed Jayson Street's talks.
@N0ENEMIES11 ай бұрын
Lmao, a USB audit 😂
@mythical_pizza9 ай бұрын
It's incredible how far "sounding like you're supposed to be there" can get you places
@BoJangles4211 ай бұрын
I’ve been an infosec pro for 20+ years, this guy was great.
@EyesOfByes11 ай бұрын
6:14 #MaxFosh managed to get into the major security convention in Las Vegas, with this trick among others. He wasnt detected. He. Snuck. In. To. A. SECURITY. Convention :D
@ANAbiNader11 ай бұрын
I cant believe that I'm a 38 year old mom giggling at "penetration tester"
@SchwarzeRitter11 ай бұрын
Doesn't matter. Just let the giggle out. It feels good!
@vectoralphaSec11 ай бұрын
Wow you're beautiful for a 38 year old mom.
@ANAbiNader11 ай бұрын
Aaaw...thanks mate :)
@unwantedwank11 ай бұрын
glad im not the only one lmaoo
@aarongarcia60838 ай бұрын
It's hard for a lot of IT professionals to be able to explain these type of things to people that have zero knowledge and he does that extremely well.
@JustJanitor11 ай бұрын
Man when he was showing all those tools at the beginning holy crap
@garcipat11 ай бұрын
Very cool and scary at the same time. Thank you
@myname-mz3lo11 ай бұрын
he is making things safer how is it scary lol ??
@Squant11 ай бұрын
@@myname-mz3lo Because attacks happen constantly, every single day? I'm not scared personally, but you're talking like crime is a small-time problem. It's big.
@garcipat11 ай бұрын
@@myname-mz3lo its scary how few things you need to break into such high systems.
@ruk2023--11 ай бұрын
Making computer hacking interesting is no small task. I love his firewall analogy.
@jgassman11 ай бұрын
As someone that works with InfoSec regularly, this guy is spot on. Thanks for this video, Wired.
@gregmgm0611 ай бұрын
Good job Jayson! Hope to see you on more of these videos! Very informative.
@BananaNinja11 ай бұрын
this dude really knows his stuff & just hearing him talk about some of the tools he uses and things he's done gets me excited
@martinkuliza7 ай бұрын
LOL that means you're a beginner and that's fine... we all start somewhere but... TELL TALE SIGNS and all that don't get me wrong, Excitement is good and it gets you motivated but one day you will look back at this comment and say to yourself "i was stupid" LOL we all do it
@seanhulbert838511 ай бұрын
A lot of good tools here, we use to make all of our own tools. One thing he didn't mention 95% of the telco rooms are outside the building and once you have access to the MPO/DMARC you have ultimate access to their phones and Internet access.
@aleneverson90228 ай бұрын
nah bro this man humbling every single company he's been hired by 😭😭
@skunkjulio17 күн бұрын
one of the best Wired "___" Support videos ever
@minutemadeinc11 ай бұрын
If you're not already, you would make a wonderful instructor.
@mandyurbont670711 ай бұрын
He does talks at a ton of cybersecurity conferences.
@AllNamesWereAlreadyTaken11 ай бұрын
Awesome guy (you instantly feelhis passion about what he is doing) I love listening to him eventough its kinda scary !
@myname-mz3lo11 ай бұрын
how is it scary ? he hacks companies so that bad people dont .. its reassuring more than anything to know that there are more good hackers than bad ones
@AllNamesWereAlreadyTaken11 ай бұрын
@@myname-mz3lo it's scary how easy some tricks are and how vulnerable everyone is.
@pudniskool11 ай бұрын
Please bring this guy back frormore interviews. super interesting and a great speaker.
@gaara257811 ай бұрын
Currently in college for Cybersecurity and I'm so glad this video came out. Honestly makes me much more excited to study this field more. Also was thinking of going for my masters in this field, is it worth it? I also would get certs along the way
@re-settt10 ай бұрын
absolutely
@rerenaissanxe11 ай бұрын
"I'm in" this man is great!
@circeus11 ай бұрын
he *said* you gotta say it *properly*
@jestangames11 ай бұрын
i remember there being a thing with apple's calendar. you could inject code when sending a schedule request, this wouldnt be a problem since you need to accept it first. but apparently if you send a schedule request for a date in the past, it automatically puts it in the target's calendar and it could run the code
@armorhide4066 ай бұрын
My job forces us to go through cybersecurity trainings. Not only are they boring, they're poorly designed. This video is miles better than the training we're given, and actually is engaging. Bravo
@dakotaboy809 ай бұрын
This guy is dangerous. I'm glad he's on our side.
@WastelandWarfighter27311 ай бұрын
Give this guy a show!
@clearmenser11 ай бұрын
The expert, Jayson E. Street is a great communicator. Check out his talks, there's tons.
@vectorwolf4 ай бұрын
I feel like in a lot of cases, employees are expected to be secure while actively being pressured to behave in ways that are unsecure. If you take too long, interrupt someone doing something, or ignore a task you were left for too long, you get in trouble, so employees just get in the habit of being as expedient as possible. In many cases, holding up the tech who says he's supposed to be there to call your manager will just get you yelled at by said manager for wasting their time...
@seanbrisson792811 ай бұрын
7:06 🤣That segment on Google 😂 SOOO truuuue 🤣
@Tom-ev4rg11 ай бұрын
Phishing is easy because people are gullible, even with training. My company provided anti-phishing training (in-person group setting) to our phone center employees. Two weeks later, our external security consultant conducted a phishing attack on that group and we had over a 20% fail rate. During training, we had even highlighted the type of attack the consultant planned to use and over 1 and 5 still fell for it.
@MaskedImposter11 ай бұрын
Wait, so was it twenty percent, or one in five!?!? /Joke
@blindbrad471911 ай бұрын
I don't believe you…
@Tom-ev4rg11 ай бұрын
@@blindbrad4719 Lol. Why would I care if a rando doesn't believe the truth? Nice troll.
@blindbrad471911 ай бұрын
@@Tom-ev4rg it was a pretty basic troll to BH, but considering your gullible remark I felt it had to be said 😂. Your story didn't surprise me though. I'd be willing to bet as well that the 20% that passed were already tech savvy before the training.
@johnsmith-fz5pz11 ай бұрын
@@blindbrad4719 80% passed
@PLBiohazard11 ай бұрын
Working at a company where phishing simulations for all employees are done like a mini-game, with leaderboards and clever traps. Got caught once, been paranoid and vigilant ever since. Best way to learn is to make mistakes thanks to simulations. Surprisingly efficient.
@ArthurZakaryan2311 ай бұрын
Really well explained video and it's amazing when he breaks down all the various tools he uses and how easy it is to be hacked with any number of those tools.