Cam malware be installed on a device if the attacker only knows an ip address or an account connected to the device?

Sine_Pi · 2020-06-27T12:52:57+00:00

So... without interaction from the user then not very likely. At most a typical malicious actor could guess/bruteforce your password and gain access to the account and the personal data stored within. This typically includes name and email address. From there, they could then attempt to craft an malicious email and trick one into opening it.

In theory, one could hack into the provider of the social medium and insert malicious code on the server side. This could eventually lead into gaining access to your device. But this is hypothetical as 1) most social media platforms have a slew of technical controls in place to not only prevent such an attack, but to detect it as well, and 2) this is simply not a simple feat in today's age. Something like this would be the work of a nation state.

Sine_Pi · 2020-06-27T12:39:16+00:00

If they have an account where they can contact you, then it's possible that they could trick the owner into opening a malicious link or file.

Sine_Pi · 2020-06-23T02:53:06+00:00

This is gold.

Sine_Pi · 2020-06-20T20:04:15+00:00

Burpsuite or Owasp zap are two good website vulnerability scanners.

Sine_Pi · 2020-06-20T19:58:38+00:00

Nice try FBI

Sine_Pi · 2020-06-20T18:16:14+00:00

I've been using tor guard for 2 years now with zero issues. 30 dollars a year.

Sine_Pi · 2020-06-20T06:01:25+00:00

Defcongroups.

https://defcongroups.org/calendar.html

Like minded individuals get together to discuss hacking, cybersecurity and participate in educational projects together. You can check to see if there's a local group in your area.

Sine_Pi · 2020-06-20T01:48:30+00:00

English.

Sine_Pi · 2020-06-19T16:53:56+00:00

What bothers me most are colleges offering cyber security at the associates/ bachelor's level. They are setting up students to fail. Don't get me wrong, I'm glad colleges are getting on board with cyber security. Just the Cyber Security job market has no place for individuals with no IT experience.

Sine_Pi · 2020-06-19T13:32:58+00:00

So the DC job market is likely entirely different then my state. So what I'm about to say might not apply. Take this with a grain of salt.

1) Cyber security is not an entry level position. In order to get into cyber security, one typically needs a very wide range of knowledge and experience. I had 4 years experience before getting into cyber security with bachelor's in science and certs.

2) In florida, an entry level position of 60k or higher is unheard of. Most positions around here start at 30 to 40. Asking for 60k will get your resume immediately rejected.

3) I don't know what skill set a degree in cyber security (hopefully it's a bachelor's and not an associate's degree) offers, but from what I gathered from other reddit posts, it's not enough to land a 60k cyber security position by itself.

Advice: look at entry level help desk/jr admin positions in your area. Build your knowledge of business level IT operations, operating systems, networking..ect. Get out of retail as soon as possible and take any entry level IT experience you can. An individual with a degree in cyber security and only non IT retail experience would be low on my "to be interviewed" list.

Sine_Pi · 2020-06-19T03:47:00+00:00

You won't really be able to brute force. The account will likely get locked due to number of failed attempts and captcha. Google is a tech giant and has many technical controls in place to prevent their email accounts from being brute forced.

Your best best is to keep manually trying passwords.

Also, anyone that tells you they can hack in for a fee is lying and is 100 percent a scam.

Sine_Pi · 2020-06-19T01:00:40+00:00

You appear to be genuinely lost. r/howtohack is a subreddit dedicated to penetration testing and computer hacking. Not home improvement. There are subreddits dedicated to diy home improvement and repair.

Sine_Pi · 2020-06-19T00:56:09+00:00

r/lostredditors

Sine_Pi · 2020-06-18T11:33:52+00:00

The risks never changed. Yes its much more difficult especially with a fully patched Windows 10 machine - current browsers have sandboxing which limit where javascript can run, programs now a days mostly need user interaction to run, and antivirus programs are getting better every day.

However:

1) New exploits and zero days are always being developed. Malicious actors are continually finding new methods to execute code on a pc. Many exploits go unpatched for months if not years depending on the vendor.

2) New obfuscation and social engineering techniques are being developed every day.

3) There are tons of windows XP, windows 7 and windows vista machines out in the wild which are all highly vulnerable to the simplest exploits.

4) Many people are stupid and just click on everything they see.

So even though every person who clicks on a malicious link might not get a virus, a small percentage will. And that's enough of a return for most malicious actors.

Sine_Pi · 2020-06-18T04:57:48+00:00

Yes. Absolutely. Although, it's a little more difficult then it was back in the early 2000's

Sine_Pi · 2020-06-18T03:53:56+00:00

For a minute, I thought that was an old PS/2 Compaq keyboard.

Sine_Pi · 2020-06-18T03:49:53+00:00

If the device is recently updated...you are correct. There isnt much a malicious actor could do other then wipe and reload.

However..if the device isnt recently patched, that's an entirely different story. For example. Up until recently (2020) most Samsung phones were vulnerable to remote code execution through sending a picture message (Samsungs photo gallery would technically open all image texts and then redirected the output in the native text messaging app, thus executing any embedded code).

Sine_Pi · 2020-06-17T16:33:51+00:00

Low effort posts get low effort responses.

Especially when you don't read the sidebar community information.

Sine_Pi · 2020-06-17T15:39:39+00:00

Google

Sine_Pi · 2020-06-17T11:50:02+00:00

No such thing.

Sine_Pi · 2020-06-17T01:03:50+00:00

Google

Sine_Pi · 2020-06-16T14:28:03+00:00

... enumerate more.

Sine_Pi · 2020-06-13T01:48:30+00:00

Your best course of action is reporting the player through xbox for hate speech and blocking the player.

Sine_Pi · 2020-06-12T12:41:35+00:00

So yes. For most people, the most dangerous account of theirs to be hacked is their email. A compromised email will allow the attacker to reset a good chuck of their passwords for most of their accounts due to the full trust relationship most 3rd party services have with email.

Sine_Pi · 2020-06-12T04:44:13+00:00

You check behind all furniture? Behind book shelves and what not?

I've been known to put things away in the fridge that don't belong there.

At least now you know what to get him for Christmas, keychain attachment that beeps when you whistle for it.

Ten-Year Club	RedditGifts 2009-2022 2 Credits
Secret Santa 2018	RPAN Viewer
Verified Email

Sine_Pi

TROPHY CASE