Former NSA Hacker Reveals 5 Ways To Protect Yourself Online

Summary

Highlights

• 'Mr. Robot' is an accurate portrayal of hacking in today's world 🎬.
• Two-factor authentication protects your accounts even if passwords are compromised 🔐.
• Updating software regularly fixes vulnerabilities hackers can exploit 🔄.
• Over-sharing on social media can lead to being targeted by attackers 📸.
• Verify any unsolicited calls before providing personal information 📞.

Key Takeaways

• Enable two-factor authentication everywhere to add a layer of security 💪.
• Avoid reusing passwords across different platforms to prevent easy break-ins 🔑.
• Keep your software and apps updated to protect against known vulnerabilities 🛡️.
• Be mindful of the information you share on social media to prevent potential attacks 📱.
• Verify calls from service providers and avoid sharing sensitive information over unsolicited calls 🚫.

Overview

Chapters

• 00:00 - 00:30: Introduction and TV Show Portrayal The introductory chapter discusses the accurate portrayal of hacking in the TV show 'Mr. Robot'. It emphasizes the show's employment of real hackers to ensure the depiction of genuine hacking techniques and scenarios, from smartphone hacking to compromising large corporations. The narrative highlights the realism and accuracy of the show's portrayal of modern cyber threats.
• 00:30 - 01:00: Tip 1: Use Two-factor Authentication The chapter emphasizes the importance of using two-factor authentication (2FA) to enhance security both at home and in business settings. It highlights that platforms like banking systems, Twitter, and Facebook offer an additional security feature that can be activated in the settings. With 2FA, a second form of verification, such as a text message, is required to access the system. This ensures that even if a hacker obtains your password, they would still need this second form of verification to gain access.
• 01:00 - 01:30: Tip 2: Avoid Using the Same Password Everywhere The chapter emphasizes the importance of avoiding the use of the same password across different accounts. It highlights that although it might be challenging to manage multiple passwords, using the same one for all accounts, such as Twitter and banking, poses a significant security risk. Hackers can easily exploit this vulnerability to gain unauthorized access. Additionally, the chapter advises keeping software up to date to protect against new security threats, as updates often address vulnerabilities that hackers attempt to exploit.
• 01:30 - 02:00: Tip 3: Regularly Update Software This chapter emphasizes the importance of regularly updating software to protect against security vulnerabilities. It advises keeping both operating systems, whether Mac or Windows, and third-party applications like Java, Adobe, and Office documents updated. By maintaining updated software, it becomes more challenging for hackers to exploit system weaknesses. The chapter also briefly touches on the importance of being cautious about the personal information shared on social media, as attackers can use this information for malicious purposes.
• 02:00 - 02:30: Tip 4: Be Cautious with Social Media Information The chapter discusses the potential risks associated with sharing information on social media. It highlights how this information can be used by hackers to target individuals. Specific examples include understanding personal schedules through posts, which could reveal when a person is out of town or at a specific location. The text emphasizes the role of social media in social engineering attacks, where attackers often create a sense of urgency to deceive targets. An example scenario provided involves hackers using knowledge about delivery schedules to facilitate attacks. The chapter stresses the need for caution in posting sensitive information online.
• 02:30 - 03:30: Tip 5: Protect Personal Information This chapter emphasizes the importance of protecting personal information to prevent cyber attacks. It highlights tactics used by attackers, such as creating a sense of urgency or exploiting information posted online, to deceive individuals. The chapter warns that attackers often attempt to access personal data like social security and credit card numbers and cautions that reputable services will not request such sensitive information over the phone.

Former NSA Hacker Reveals 5 Ways To Protect Yourself Online Transcription

• 00:00 - 00:30 - Mr. Robot is probably one of the most accurate portrayals of what hackers can actively do. If you're interested in hacking and don't understand a lot of this, the TV show itself actually employs hackers to work on the show to depict real life hacks that could happen in real life and it's a very very accurate portrayal of everything that we see today. From being able to hack smartphones to getting access to a big corporation and being able to bring them to their knees from a cyber perspective. So what's the top five things that you can do
• 00:30 - 01:00 to make yourself more secure both at your business and your home? Number one, use two factor authentication or two step verification everywhere that you can. Your banking systems, Twitter, Facebook all support the ability for you to enable an additional security feature that you may not know. You go to your settings, it's in there. You can enable it and every time that you log in, it'll register your computer, and you can then get a text message to go into that system as a second form of verification. And why that's important is because if a hacker gets access to your password, they still have
• 01:00 - 01:30 to have access to your phone to get access to your account. And that's really important by enabling that specific security step, probably number one. Number two, don't use the same password everywhere. I know it's hard, but using the same password everywhere is one of probably the easiest ways that we break in as hackers. So if you have the same Twitter password as your same banking information, those are things that can get you in some serious trouble. Number three, make sure that you stay up to date. Those security patches. Every time you have a Windows update that says "Hyy I need to update your computer," it's usually to fix a known attack that hackers have figured out to get access to your computer.
• 01:30 - 02:00 So keep up to date whether you're using a Mac, they aren't impervious to attack, or you're using Windows, same thing, update your systems. That's the most important thing, always keep up to date with what you're having out there. Same thing for third-party applications. If you're using Java, Adobe, PDFs, Office documents, those are all things that you want to keep up to date and that makes it much harder for us as hackers to break in to your system. Number four, social media, be careful with how much information you actually put online. We as attackers can look at that. Look at what you do, your spending habits,
• 02:00 - 02:30 what you might be doing from a day-to-day perspective, going and buying Starbucks at a certain location. Those are all things that we can use to identify when you're gonna be out of the country or when you're gonna be at a business meeting. We can use that as a method to attack you. One of the main things that we do as hackers, especially when it comes to social engineering, is we create a sense of urgency. Something that you're familiar with, but you have to take action upon. So let's just say for example, I'm a Verizon customer and I have an Amazon package that's getting delivered. Well, if I, as an attacker, know an Amazon package is getting delivered, sending a text message
• 02:30 - 03:00 from a Verizon customer support service line coming from Amazon saying "Hey your package is being rerouted," you need to log into the site to get it delivered again, is something that an attacker can use. So those are things that attackers can leverage is urgency, how you actually operate, and all that information that you post online are things that we can use as attacks. And last but not least, personal information. That's one of the biggest things that attackers can leverage to get access to your data. Things like social security numbers, your credit card numbers. A person is not going to call you on the phone from a banking service and ask you for that type of information.
• 03:00 - 03:30 So whenever you get a call, that's too good to be true, or a call that is a fraud services line, call them back. Look at the number on the website themselves and call it back cause a lot of times attackers will impersonate financial services. They'll impersonate different organizations to try to get your personal information and use that to be able to make fraudulent charges. So when it comes to that, your phone, verify first. Go to their site, call the site itself, off from there and then call to an actual person that's actually at that institute itself.