Elamb Cybersecurity

Category: hacking

  • Check out this ATM Theft

    In the first picture you see an individual who apparently is making a bank transaction at the ATM.

    ATM Theft

  • Integral Hacking: Developing Jedi Mind Tricks at DEFCON

    “To the weak I became weak, that I might win the weak; I have become all things to all men that I may by all means save some.” 1 Corinthians 9:22

    How does a 60 year old former Episcopal priest manage to captivate a packed audience of tech savvy red teens, ambitiously orange “20-something” hackers, amber security professionals, and green information freedom hacktivists while speaking about nothing technical at DEFCON, the world largest hacker convention? Richard Thieme, author of Islands in the Click Stream, has been able to do this since DEFCON 4, 1996 (1).

    There is a body of knowledge growing like a fungus in the cracks of the burgeoning technological super fortress that is the information age. Hacking is that fungi and the DEFCON hacker convention is the petri dish where this new organism is cultivated. Like penicillin, this mold can be used for good. This culture is growing tendrils beyond cyberspace and into the human mind. Complex systems and technologies are synergizing toward an integral hacking solution now pushing humanity into new levels of communication by slipping passed the psychological firewalls to communicate on a deeper level with kick ass Jedi mind tricks. Prepare for psychological nudity!

    At DEFCON 14, Richard Thieme’s subject was “Beyond Social Engineering: Tools for Reinventing Yourself” in which he discussed how to “manage multiple modular identities” then link them into a seamless life by leveraging them with an intimate knowing of the true inner self (2). The auditorium was crammed with wide-eyed technophiliacs at the edge of their seats.

    Even though Thieme freely admits to not having any discernable technical hacking skills he is able to successfully “hack” (a.k.a socially engineer) his way into a very elitist, and young and mostly apathetic counter-culture. He is an Integral Hacker.

    The same skills used naturally by Mr. Thieme are used by integral leaders like Brett Thomas, co-founder of the Stagen Leadership Institute, to recognize a person’s worldview, determine what stage of development they are likely to identify with and then communicated with them on that level (4). An integralist would call this “skillful means” but hackers call it a subtle form of social engineering. Social engineering has a slightly negative connotation as it is usually associated with manipulation rather than enhanced communication.

    As a complete method of hacking people, integral hacking goes way beyond mere social engineering and into Neuro-Linguistic Programming (NLP) techniques. This subject was also discussed at DEFCON 14. Brad Smith of Computer Institute of the Rockies discussed how law enforcement, FBI and other three letter agencies use NLP during interviews and interrogations (2). Full spectrum people hacking would include all of the NLP “physiological lock picking” techniques to get full access the root of ego.

    Past DEFCON speakers touching on the outer reaches of wetware and integral hacking have included Thieme’s, “Hacking a Trans-Planetary Net” which touched on the need for hacking to include “an artist’s imagination, an obsessive hunger for knowledge, and a deep understanding of cyborg humanity” (1). Former hacker Susan Thunder spoke on “Social Engineering and Psychological Subversion of Trusted Systems” which was about infiltrating a company without physical or digital access (3). People are the weakest part of any secure network.

    Hackers are the gun slingers of the Wild, Wild Web, living in a world of 20 year old millionaires who have already change the world and actual evil genius’ who are drifting ghosts pilfering the pockets of the ignorant weak. Whether their intentions are holistic or selfish all hackers view ignorance as the greatest sin. The DEFCON prides itself on a borderline dangerous freedom that is fertile ground of both immeasurable brilliance and debauchery of the filthiest sort. It’s the frothiest edge of technological mayhem and creativity. It is on the fringes of every digital-civilizations’ decomposing structures that you will find a culture of complex integral hackers of hardware, software or wetware growing and sending out spores.

    References

    1. DEFCON. (July 28, 1999). DEFCON 4 Archive. Retrieved November 18, 2006, from http://defcon.org

    2. DEFCON. (August 6, 2006). DEFCON 14. Retrieved November 18 2006,
    from http://defcon.org

    3. DEFCON. (July 28, 1999). DEFCON 3 Archive. Retrieved November 18, 2006, from http://defcon.org

    4. Integral Leadership Review. Biography of Brett Thomas. Retrieved November 18, 2006,

    http://www.integralleadershipreview.com

    Thieme Works. (2001). Keynotes, Workshops and Retreats. Retrieved November 18 2006,
    from     http://www.thiemeworks.com

  • There is no such thing as Security

    I’ve noticed that there are two types of security people: anal “type A personalities” who live every moment by the rules, and those that realize that there is no real security.  Please understand that these two mindset don’t seem to have anything to do with talent.  I’ve met talented people with both mindset.  A talented security professional is mindful, aware, and always pays attention to detail.  The very best seem almost psychic in their ability to spot wrong doing, security breaches and even malicious intent.

    Type A security people seem to thrive on “catching bad guys”.  Its like they are kids playing cops & robbers.  These people thrive on structure, order and regulations.  In information security they know how important it is to have lots of centralized control and a stardard configuration for all systems.  In the Meyers-Brigg’s personality test, these people are ESTJ’s (Extraverted Sensing Thinking Judging).  The thought of any getting away with breaking the law (ANY LAW) is unacceptable.  These guys make great Directors of Security, CSO’s and other policy creators as long as they don’t micromanage their people.  Their employees will either love them as a great mentor or hate them with every fiber of their being.

    Those who realize that there is no such thing as security are hackers.  They are many times INFP’s (Introverted iNtuitive Feeling Perceptive).  Unlike the ESTJ’s they don’t care about structure and rules because the realize that rules are only suggestion to keep an acceptable level or order.  For them the most important rules are in a persons heart.  ESTJs will usually see these people as lazy and don’t really care but these people are just trying to find an easier way to do things.  If they don’t enforce certain rules or cut corners, it because the sincerely believe that the rule or enforcement (in that particular situation) is not needed.  Employees will usually love INFP’s unless they happen to be ESTJ’s.

    I am a bit biased because I am in the second camp, INFP.  I don’t believe there is a such thing as “security”.  No one is ever completely safe.  All a malicious intending person needs is the element of surprise, time, and pressure an they can get away with anything they want.  Further, anyone at anytime can have malicious intent: employees, kids, bosses, friends, family not just random strangers.

    Security is just an illusion.  The one good thing security does is ensure you are faster than the slowest person, organization, network or whatever on the block.  Those with malicious intent will typically go for the easiest target. 

    Since many crime happen from people that the victims know all we can really do is not worry about it.  Life is too short to waste too much time fretting about every possible thing that can happen to you.     

    I guess that is what Ben Franklin meant when he said:

    “Those Who Sacrifice Liberty For Security Deserve Neither”  

    If you worry so much about security that you can’t enjoy the fruits of your labor, then what is the point of the living and if you can’t enjoy living whats the point of protecting ANYTHING. – elamb

  • theBroken part4?

    Double D is rolling a *”burrito sized Mummy” with Kevin Rose trying to get him to do the next broken episode.  This is the type of irreverance of all things holy that fans have come to expect from theBroken.   

    With complicated xbox 360 hacks and illegal cell phone jamming techniques it is no wonder it took the Broken 2 years to put out a new episode.  Dub and K_rose filter about a score of 40s though their shriveled young livers to the background gansta of Ice Cube, NWA and Dr. Dre.  Perhaps it is best that they don’t do regular episodes as the Broken could land them in jail or in the hospital. 

    It is an incredible concept.  Jackass meets Defcon.  One of my personal favorites is Ramzi.  He is hilarious.  Where did they meet this guy?  The outakes were also very entertaining. 

    Hopefully, next years thebroken will be just as deficient of morals. 

     

    *burrito sized mummy – a giNORMOUS joint.  Slanquage coined from the ambassador of the bay, e-40.

  • Top 9 Apps To Help You Avoid The CIA

    **Technology On Crack once again provides a Top 10 countdown focusing this time on keeping your information from prying eyes. What makes these freely available applications interesting is that 9/10 of them may be strong enough to help you avoid serious government organizations.**

    Warning: The possession of such tools can destroy you if you ever find yourself in court. You are looking for Plausible deniability by destroying or hiding as much questionable data or actions as possible, but the very possesion of such tools can give you a WORSE sentencing than what you were originally charged for. (see Simple Nomad – www.nmrc.org/pub/pdtk/)

    read more | digg story

  • Diebold Vote Hack – CNN Video

    CNN explores the possibility of midterm e-vote hacks. You should wonder why elections boards across the US aren’t doing anything to address the numerous problems with paperless electronic voting machines. These machines, primarily made by Diebold, leave no paper trail, there is no way to verify votes!

    read more | digg story

  • What is a Hacker?

    “A hacker is someone who thinks outside the box. It’s someone who discards conventional wisdom, and does something else instead. It’s someone who looks at the edge and wonders what’s beyond. It’s someone who sees a set of rules and wonders what happens if you don’t follow them. A hacker is someone who experiments with the limitations of systems for intellectual curiosity.”
    The above is a quote from crypto living legend Bruce Shneier’s book, Beyond Fear.  This is exactly how I feel about hacking.  Hacking is a major asset to Information System Security… if fact is THEE only real asset.  I’ve had arguements with some of my peers about this.  Information Security Pro vs. Hacker.  If the typical information system security pro doesn’t get smart on hacking (security/programming) techniques, security will continue to be a losing battle.  Cyber criminals have no problem learning the latest exploits, they have no boundaries and this gives them a “superpower” against security professionals.  Some Information security professionals, on the otherhand, restrict themselves by categorizing hacking as bad.  They see it as unethical and not responsible. 

    It is unethical and not responsible to NOT know hacking techniques that might exploit a customers system.

    Thanks for the post Bruce.  I hope you will make another appearance at the Defcon. 
    read more | digg story

  • Defon14 was great!

     

    There was a lot of great stuff at Defcon 14.  

    defcon 14 bus

    The last Defcon that I went to was Defcon11 in 2003.  Defcon 14 has grown quite a bit since then.  According to DarkTangent it was about 7000 geeks/hackers/security pros/phreaks strong.  The great thing about this particular Defcon was the change of venue.  Defcon 11 was at Alexis Park.  This one was at the Riviera hotel. 

    Many of the rooms at Alexis Park had no A/C.  The worst thing was that many of the rooms would get packed and have to turn people away.  At times it seemed that this might cause a riot!

    As far as I know, only one room got too packed this time it was “Googling: I’m Feeling (un)Lucky” by Greg Conti. 

    I have a lot of favorites but what stands out for me was “Beyond Social Engineering: Tools for Reinventing Yourself” by Theime Richard.  He had interesting ideas about the importance of integrating spirituality into your life to balance the difference personality profiles and life changes that happen more and more in a world of fast moving technology.  He discussed modifying your persona with reference to your “meta-self”, or hacking yourself.  Very interesting and insightful.

    I loved all the breifings on privacy and the legal battles against the government and AT&T.  I will definitely be getting involved. 

    Others that stand out are The Making of atlas: Kiddie to Hacker in 5 Sleepless Nights, by atlas.  I thought it was a great introduction to REAL hacking, which is pretty damn hardcore.  Atlas and his team 1stPlace actually won Capture the Flag, the main event at Defcon.

    There was S. Korean team their that got honorable mention, since the flew all the way around the world just to play the game.

     

     

  • Defon14 was great!

    There was a lot of great stuff at Defcon 14.  

    The last Defcon that I went to was Defcon11 in 2003.  Defcon 14 has grown quite a bit since then.  According to DarkTangent it was about 7000 strong.  The great thing was the venue.  Defcon 11 was at Alexis Park.  This one was at the Riviera hotel. 

    Many of the rooms at Alexis Park had no A/C.  The worst thing was that many of the rooms would get packed and have to turn people away.  At times it seemed that this might cause a riot!

    As far as I know, only one room got too packed this time it was “Googling: I’m Feeling (un)Lucky” by Greg Conti. 

    I have a lot of favorites but what stands out for me was “Beyond Social Engineering: Tools for Reinventing Yourself” by Theime Richard.  He had interesting ideas about the importance of integrating spirituality into your life to balance the difference personality profiles and life changes that happen more and more in a world of fast moving technology.  He discussed modifying your persona with reference to your “meta-self”, or hacking yourself.  Very interesting and insightful.

    I loved all the breifings on privacy and the legal battles against the government and AT&T.  I will definitely be getting involved. 

    Others that stand out are The Making of atlas: Kiddie to Hacker in 5 Sleepless Nights, by atlas.  I thought it was a great introduction to REAL hacking, which is pretty damn hardcore.  Atlas and his team 1stPlace actually won Capture the Flag, the main event at Defcon.

    There was S. Korean team their that got honorable mention, since the flew all the way around the world just to play the game.

     

     

  • Intricate Steps of How to Hack Into a Computer

    Here is a huge map that pretty much shows you all possible ways to gain entrance into a system. From finding exploits and scanning ports to password cracking. It shows all the likely paths you can take to hack into a computer and/or test out it’s security.

    read more | digg story