Background Image

...

It's True, I Had Hacked Into A Lot Of Companies, And Took Copies Of The Source Code To Analyze It For Security Bugs. If I Could Locate Security Bugs, I Could Become Better At Hacking Into Their Systems. It Was All Towards Becoming A Better Hacker.

-Kevin Mitnick

...

Please Wait....
Translating....

It's True, I Had

Kevin Mitnick

...

It's True, I Had Hacked Into A Lot Of Companies, And Took Copies Of The Source Code To Analyze It For Security Bugs. If I Could Locate Security Bugs, I Could Become Better At Hacking Into Their Systems. It Was All Towards Becoming A Better Hacker.

Views: 25

Topic

More From Kevin Mitnick

It’s Actually A Smarter Crime Because Imagine If You Rob A Bank, Or You’re Dealing Drugs. If You Get Caught You’re Going To Spend A Lot Of Time In Custody. But With Hacking, It’s Much Easier To Commit The Crime And The Risk Of Punishment Is Slim To None.

I Believe In Having Each Device Secured And Monitoring Each Device, Rather Than Just Monitoring Holistically On The Network, And Then Responding In Short Enough Time For Damage Control.

New Security Loopholes Are Constantly Popping Up Because Of Wireless Networking. The Cat-and-mouse Game Between Hackers And System Administrators Is Still In Full Swing.

Both Social Engineering And Technical Attacks Played A Big Part In What I Was Able To Do. It Was A Hybrid. I Used Social Engineering When It Was Appropriate, And Exploited Technical Vulnerabilities When It Was Appropriate.

My Actions Constituted Pure Hacking That Resulted In Relatively Trivial Expenses For The Companies Involved, Despite The Government's False Claims.

Social Engineering Is Using Deception, Manipulation And Influence To Convince A Human Who Has Access To A Computer System To Do Something, Like Click On An Attachment In An E-mail.

So The Ethic I Was Taught In School Resulted In The Path I Chose In My Life Following School.

I Did Get A Huge Endorphin Rush When I Was Able To Crack A System Because It Was Like A Video Game.

Social Engineering Bypasses All Technologies, Including Firewalls.

If You Go To A Coffee Shop Or At The Airport, And You're Using Open Wireless, I Would Use A Vpn Service That You Could Subscribe For 10 Bucks A Month. Everything Is Encrypted In An Encryption Tunnel, So A Hacker Cannot Tamper With Your Connection.

When I Was In Prison, A Colombian Drug Lord, Offered Me $5 Million In Cash To Manipulate A Computer System So That He Would Be Released. I Turned Him Down.

Oracle, For Example, Has Even Hired People To Dumpster Dive For Information About Its Competitor, Microsoft. It's Not Even Illegal, Because Trash Isn't Covered By Data Secrecy Laws.

We Have Problems With Our Physical Security, Operational Security Through To Management.

Physical Attraction

I Got So Passionate About Technology. Hacking To Me Was Like A Video Game. It Was About Getting Trophies. I Just Kept Going On And On, Despite All The Trouble I Was Getting Into, Because I Was Hooked.

All They Need To Do Is To Set Up Some Website Somewhere Selling Some Bogus Product At Twenty Percent Of The Normal Market Prices And People Are Going To Be Tricked Into Providing Their Credit Card Numbers.

I Characterize Myself As A Retired Hacker. I'm Applying What I Know To Improve Security At Companies.

Security Is Always Going To Be A Cat And Mouse Game Because There'll Be People Out There That Are Hunting For The Zero Day Award, You Have People That Don't Have Configuration Management, Don't Have Vulnerability Management, Don't Have Patch Management.

The Perfect Pin Is Not Four Digits And Not Associated With Your Life, Like An Old Telephone Number. It's Something Easy For You To Remember And Hard For Other People To Guess.

Are Hackers A Threat? The Degree Of Threat Presented By Any Conduct, Whether Legal Or Illegal, Depends On The Actions And Intent Of The Individual And The Harm They Cause.

Hackers Are Breaking The Systems For Profit. Before, It Was About Intellectual Curiosity And Pursuit Of Knowledge And Thrill, And Now Hacking Is Big Business.

The Americans Are The Most Gullible, Because They Don't Like To Deny Co-workers' Requests.

A Company Can Spend Hundreds Of Thousands Of Dollars On Firewalls, Intrusion Detection Systems And Encryption And Other Security Technologies, But If An Attacker Can Call One Trusted Person Within The Company, And That Person Complies, And If The Attacker Gets In, Then All That Money Spent On Technology Is Essentially Wasted.

Steve Wozniak And Steve Jobs Founded Apple Inc, Which Set The Computing World On Its Ear With The Macintosh In 1984.

Of Course I'm Sure Half The People There Hate Me And Half The People Like Me

No Way, No How Did I Break Into Norad. That's A Complete Myth. And I Never Attempted To Access Anything Considered To Be Classified Government Systems.

For The Average Home-user, Anti-virus Software Is A Must.

You Can't Go To Windows Update And Get A Patch For Stupidity.

The Methods That Will Most Effectively Minimize The Ability Of Intruders To Compromise Information Security Are Comprehensive User Training And Education. Enacting Policies And Procedures Simply Won't Suffice. Even With Oversight The Policies And Procedures May Not Be Effective: My Access To Motorola, Nokia, Att, Sun Depended Upon The Willingness Of People To Bypass Policies And Procedures That Were In Place For Years Before I Compromised Them Successfully.

Policies And Procedures

I Was Addicted To Hacking, More For The Intellectual Challenge, The Curiosity, The Seduction Of Adventure; Not For Stealing, Or Causing Damage Or Writing Computer Viruses.

I Think It Goes Back To My High School Days. In Computer Class, The First Assignment Was To Write A Program To Print The First 100 Fibonacci Numbers. Instead, I Wrote A Program That Would Steal Passwords Of Students. My Teacher Gave Me An A.

It Was Used For Decades To Describe Talented Computer Enthusiasts, People Whose Skill At Using Computers To Solve Technical Problems And Puzzles Was - And Is - Respected And Admired By Others Possessing Similar Technical Skills.

I Get Hired To Hack Into Computers Now And Sometimes It's Actually Easier Than It Was Years Ago.

I Made Stupid Decisions As A Kid, Or As A Young Adult, But I'm Trying To Be Now, I'm Trying To Take This Lemon And Make Lemonade.

When An Attacker Fails With One Person, They Often Go To Another Person. The Key Is To Report The Attack To Other Departments. Workers Should Know To Act Like They Are Going Along With What The Hacker Wants And Take Copious Notes So The Company Will Know What The Hacker Is Trying To Find.

Social Engineers Veil Themselves In A Cloak Of Believability.

I Could Have Evaded The Fbi A Lot Longer If I Had Been Able To Control My Passion For Hacking.

Back In My Day, I Would Probe By Hand. Now You Can Get Commercial Software That Does The Job For You.

Companies Spend Millions Of Dollars On Firewalls And Secure Access Devices, And It's Money Wasted Because None Of These Measures Address The Weakest Link In The Security Chain: The People Who Use, Administer And Operate Computer Systems

I Use Mac. Not Because It's More Secure Than Everything Else - Because It Is Actually Less Secure Than Windows - But I Use It Because It Is Still Under The Radar. People Who Write Malicious Code Want The Greatest Return On Their Investment, So They Target Windows Systems. I Still Work With Windows In Virtual Machines.

There Is No Patch For Stupidity.

Garbage Can Provide Important Details For Hackers: Names, Telephone Numbers, A Company's Internal Jargon.

The Human. Now You Know All About Your Target

A Hacker Doesnt Deliberately Destroy Data Or Profit From His Activities.

So What I Was Essentially Doing Was, I Compromised The Confidentiality Of Their Proprietary Software To Advance My Agenda Of Becoming The Best At Breaking Through The Lock.

Becoming The Best

No Company That I Ever Hacked Into Reported Any Damages, Which They Were Required To Do For Significant Losses. Sun Didn't Stop Using Solaris And Dec Didn't Stop Using Vms.

The Key To Social Engineering Is Influencing A Person To Do Something That Allows The Hacker To Gain Access To Information Or Your Network.

Some People Think Technology Has The Answers.

Should We Fear Hackers? Intention Is At The Heart Of This Discussion.

I Get Hired By Companies To Hack Into Their Systems And Break Into Their Physical Facilities To Find Security Holes. Our Success Rate Is 100%; We've Always Found A Hole.

My Primary Goal Of Hacking Was The Intellectual Curiosity, The Seduction Of Adventure.

But A Lot Of Businesses Out There Don't See The Return On Investment, They Look At It As A Liability, And Until They Can Understand That Proactive Security Actually Returns, Gives Them A Return On Investment, It's Still A Hard Sell For People.

I Can Go Into Linkedin And Search For Network Engineers And Come Up With A List Of Great Spear-phishing Targets Because They Usually Have Administrator Rights Over The Network. Then I Go Onto Twitter Or Facebook And Trick Them Into Doing Something, And I Have Privileged Access.

The Hacker Mindset Doesn't Actually See What Happens On The Other Side, To The Victim.

I Was Pretty Much The Government's Poster Boy For What I Had Done.

Social Engineering Is Using Manipulation, Influence And Deception To Get A Person, A Trusted Insider Within An Organization, To Comply With A Request, And The Request Is Usually To Release Information Or To Perform Some Sort Of Action Item That Benefits That Attacker.

It Doesn't Work The Same Way Everywhere. The Americans Are The Most Gullible, Because They Don't Like To Deny Co-workers' Requests. People In The Former Soviet Bloc Countries Are Less Trusting, Perhaps Because Of Their Previous Experiences With Their Countries' Secret Services.

Any Type Of Operating System That I Wanted To Be Able To Hack, I Basically Compromised The Source Code, Copied It Over To The University Because I Didn't Have Enough Space On My 200 Megabyte Hard Drive.

The Intent Of The Individuals Who Created The Ddos Attacks Has Nothing To Do With Hacking, And They Are Vandals, Not Hackers.

It's True, I Had Hacked Into A Lot Of Companies, And Took Copies Of The Source Code To Analyze It For Security Bugs. If I Could Locate Security Bugs, I Could Become Better At Hacking Into Their Systems. It Was All Towards Becoming A Better Hacker.

I Saw Myself As An Electronic Joy Rider.

Computer Hacking Really Results In Financial Losses And Hassles. The Objectives Of Terrorist Groups Are More Serious. That Is Not To Say That Cyber Groups Can't Access A Telephone Switch In Manhattan On A Day Like 9/11, Shut It Down, And Therefore Cause More Casualties.

Terrorist Groups

Choosing A Hard-to-guess, But Easy-to-remember Password Is Important!

I Obtained Confidential Information In The Same Way Government Employees Did, And I Did It All Without Even Touching A Computer. ... I Was So Successful With This Line Of Attack That I Rarely Had To Go Towards A Technical Attack.

My Argument Is Not That I Shouldn't Have Been Punished, But That The Punishment Didn't Fit The Crime.

As A Young Boy, I Was Taught In High School That Hacking Was Cool.

You Can Never Protect Yourself 100%. What You Do Is Protect Your Self As Much As Possible And Mitigate Risk To An Acceptable Degree. You Can Never Remove All Risk.

I'm Still A Hacker. I Get Paid For It Now. I Never Received Any Monetary Gain From The Hacking I Did Before. The Main Difference In What I Do Now Compared To What I Did Then Is That I Now Do It With Authorization.

I Trust Online Banking. You Know Why? Because If Somebody Hacks Into My Account And Defrauds My Credit Card Company, Or My Online Bank Account, Guess Who Takes The Loss? The Bank, Not Me.

Trending Author

Eva Gabrielsson

Category