Video

😂

Don't forget about db dumps. If you get a hash, you can save it match the hash locally, which a company has no control over. If you match the hash, then you either found a collision, or the password

I have nightmares of my helpdesk days, time to look into password managers 😂

That's really weak vs a dictionary attack, you can build a script to run every combination of words that equal a set amount of characters. So "Greendoor" would get cracked within the day, or minutes, or seconds.

But protecting against social engineering is also pointless if you have a weak password, which now flips the scenario again and will continue this deadlock. We have to crawl first, then walk, then run 😉. Addressing social engineering is just as important, but should be done in parallel, not in lieu of password hygiene.

@@ethicalpap 100% I haven't run across many companies that even train employees on any kind of cybersecurity. On the personal level though, yeah, getting people past "P4ssW0rd" and such things is the first step.

Well there are unfortunately passphrase libraries used by hackers and tools that can make different words or passphrases if you give it enough information about you. Humans are still predicatble ¯\_(ツ)_/¯

Is that LTT reference?

@@calebwilliamson4418 No. It's a reference to old batman. From like... Adam West days.

Unfortunately that then becomes weak to dictionary attacks. They ain't common nowadays since pass phrases are uncommon, but if it becomes the norm, then the whole point of lengthy passwords becomes moot, since the complexity is massively reduced

@@normalchannel2185 This IS true, but since they aren't common, it's a solid plan for the time being. Personally I do use random passwords kept in encrypted files on a few of my local devices, rather than in a browser. But I don't expect that to be the normal.

Absolutely! I enjoy taking notes for general purposes as well (work, learning, school, etc) I use the Cherrytree app for other kinds of notes. The big thing is to make sure you are taking notes in a way that is easier for you to understand when you go back later. I like to write notes in my own words, that way I remember them better.

@@ethicalpap Thanks very much dude. I will start taking more notes lol. Underrated channel seriously. your content is top notch.

A GPU does a lot of smaller computations CPUs do less more complex computations

Yes I participated in the NIST research. You are accurate and I also applaud you for doing that much research! Currently, the CRYSTALS-Kyber and CRYSTALS-Dilithium was said to be strongest against the super positioning attacks by quantum, but recently even researchers discovered a flaw with this too. There are solutions though. I appreciate your input here and can absolutely tell that you have done quite a bit of research on quantum

Read comment above ^ Also, you can learn about Quantum Computing for FREE right NOW! Google -Qiskit

Good news is that we'd have to pull about 10,000 minimum quibits for quantum speeds to surpass binary. Superpositioning is still a thing, but rather slow currently. The last I checked, we were at 1180 wubits pulled, and if that's still accurate - 10k is still a ways away 😅

@@ethicalpap That does sound about right, In other words not even close lol 😂 That is good news, but In recent months, several quantum companies have made roadmap announcements with plans to reach 10,000 physical qubits in the next five years or sooner. This is a dramatic increase from the current 20 to 300 qubits, especially given that several of these companies have yet to release their first product. It would be way out the price range of the average individual as well lol .

Good question, dictionary attacks rely on a list of words. The chances that there are 18 character words or phrases in that list is less likely than that if there were 8 characters. For example, even a password like "turkeyistypeofbird" is far less likely to be in a list of words for a dictionary attack.

@@ethicalpap I see, thanks for the clarification.

Computers are getting faster, but the policies are lagging behind 😢

Also may I know how you generated the AI images with your face on it ? Those look great.

I actually don't know 😅. My editor does it for me. Here is his discord, if you want to reach out and ask. discord: skylar_chris

Thank you kindly, I'm glad that I can be of some help! Also, you are correct, the term is "object type" not "selection type". Although I meant object type, I used the wrong word (probably because my mind kept going on with "select an object type.... selection type!"). Thank for pointing this out though. I learned best from corrections like this, so it means a lot to me, that you took the time to do so :).

In the works :)

Thanks for sharing, perspectives are always welcome. Though I should clarify, Brilliant here is a reference to people, not "security". What I mean is that security is not the reason why people are Brilliant, it's just a career path in this context.

"If" humanity is doomed, then you are certainly one of the ushers in its destruction. ONE CZcamsr, posted a positive video (in a sea of negative content) about ONE diligent individual, and you couldn't even allow that. I was delighted to finally see a video suggesting that my generation had some praise from an older generation. I see hundreds of videos berating us each month. I understand what you are going for, but you are approaching it from the wrong angle. Your approach lacks humility, and fails to integrate all of the lower (but necessary) aspects of human development in your consideration for the actions of other human beings. Your comment was just completely unnecessary. Take that to Reddit.

@@ethicalpap yea no worry, words, but still

@@TheElementAce well if the truth hurts, do you still want it or not? I tried to be considerate, trust me on that at least. I know it was "unnecessary" because nobody Factually wants to grow up/evolve, NOBODY, because it actually hurts a lot. Evolution doesnt come with a "passion", its complicated... Sad but true, its literal hell of a life where everyones kinda childish but everyone in a different way. You do realize i kind of first commented to "grow up" and now you are telling me literally the same thing? :D Do you kno how ridonculous that is? I know its unnecessary, thats why there is no detail, nobody cares anyway. And oh i know that well. I wrote a poem. ""Life without giving a F is a Lie."" Think about it. And also think why nobody wants to sacrifice their own "perspective" to evolve. I really did start my path as a programmer too, when i was 7 or 8 old, and so what? You didnt understand what i wrote, lack of experiance myman. Thats all there is to it. Sorry. But you are talking about yourself mr humanity is doomed. I honestly have no idea why i turned on notifications, literally every reply i got in all the places is so bad i cant begin to fathom how very doomed we all are

@@ciszaiogien I'm not asking you to "grow up". I wanted you to realize that your "truth" is only applicable to humanity as a whole. And your points don't scale down to the individual level. A single human does what he/she can, given their circumstances. They cannot act in the best interests of all of society, because there are too many interests to consider at once. For example, if there's a kid who is looking for a place to belong, they will choose the place that gives them the most reward. This is natural. But if the system they live in only rewards negative outcomes for society, that kid is forced to participate. If the kid chooses not to participate, their punishment is a life of struggle and poverty. Under these circumstances, it's not fair to criticize someone who chooses to participate, because effectively, they have no choice. The people alive right now didn't set the rules of our society. They simply were born, and found themselves in a period of social decline. But they still have to develop. And they will do so with the options they are given. The "truth" is irrelevant to this fact. So if you want people to turn to religious or spiritual things, you have to make that option more rewarding than the options you believe destroy society. Otherwise, you are wasting your time.

What do you mean by this?

@@ethicalpap .I did not know the discussion was about some advance cyber security stuff.

@@DLAXTOX I see. yes, this video is me giving Neswin the floor. Neswin is young like many other young, brilliant, people out there looking to be cybersecurity professionals. I hope that Neswin is able to encourage other people to keep following their dreams :)

Thanks! I usually play Zelda Mario Kart Pokemon Smash Bros

sir your all videos are 🔥🔥 but i am eagerly waiting for graphql part 3 please if possible schedule it as soon as possible

​@anshcybersec1953 patience, my friend ;)

Funny you mention this, I touch on this in a video that I just finished recording. It should be out in a few days. My thoughts are this: Delegating Authorization for APIs had been a thought for about 2 decades. Major tech firms were working on proprietary implementations, leading up to the OAuth 1.0 specification release in 2007. Now, before I continue here - it is important to note that technology evolves for the purposes of providing convenience to people, whereas cybersecurity evolves for the purpose of ensuring that these convenient methods are secured (thus potentially making them less convenient). It's almost like a game of tug-a-war. Now, rolling your own Auth can be a good thing, but can be unappealing for a business. Here's why: good with own solution: - customizable, flexible, full control of implementation and protocols. bad with own solution: - takes far more time to implement than an out-of-box solution, meaning the company would incur more upfront cost in development, as well as potentially more costs in maintenance, testing, patching, and scaling. *there are far more pros and cons, but I only chose 1 for the sake of a shortened response So, while a dev might be inclined to employ their own solution for full control, an organization might opt for a faster and cost effective solution. If this is the case, it is up to the cyber-team to work with the devs to ensure that the chosen solution is optimal, cost-effective, and also can be hardened to an acceptable level.

Maybe a few weeks, I have some other deep dives coming soon :). Stay tuned!