Dramel Notes: hackers

Most of the time, hackers are portrayed as criminals. Usually, hackers are doing something bad for personal gain when they’re shown in movies and other forms of pop culture.

But there’s a whole world of ethical hacking out there. These white hat hackers actually use their knowledge to uncover vulnerabilities so they can be fixed.

People with these skills are in high demand, and with our name your own price bundle on white hat hacking courses, you can learn the skills that will get you in the door with a career as a white hat hacker.

Buy: Pay What You Want: White Hat Hacker Bundle

The Courses

If you beat the average, which is just over $12 as of this writing, you’ll get access to 7 courses with over 60 hours of content. If you don’t beat the average and you choose to pay any price below the average, don’t worry, you’ll still get 2 awesome courses!

The first two courses below are the ones you can get at any price, and the rest come from beating the average.

Node.js Security: Pentesting & Exploitation

Node.js is a popular way to build fast and scalable networks, and as such, anyone who uses it needs people to make sure their work is secure. This course will teach you all about finding vulnerabilities and executing secure code. It’ll make you valuable in any place where Node.js is used.

Cross Site Scripting (XSS) Attacks for Pentesters

Cross site scripting is something that can happen to any web app, and this course will teach you how to understand it and prevent it from happening to you. With more and more companies working with web apps, it’s never been more important to have programmers who understand how to prevent this common vulnerability from happening.

The Complete Hacking Course: Go from Beginner to Advanced!

Here we have the first course you’ll get if you beat the average, and it’s a big one. This is a broad course that will introduce you to the world of ethical hacking. You’ll get a baseline of skills that will allow you to help companies find issues with their networks. From the very basics to more advanced techniques; this course has it all!

Learn Wi-Fi Hacking/Penetration Testing From Scratch

Almost every single company relies on Wi-Fi, and a major insecurity could be catastrophic. That’s why there’s not one, but two courses dedicated to securing a wireless network offered in this bundle. You’ll learn how attacks are executed, so you’ll know how to prevent them in the future.

Windows Exploit Development Megaprimer

Windows is an extremely popular OS in the corporate world (and everywhere else, for that matter). As such, you need to know how to master effective penetration testing techniques including using debuggers, writing shellcodes, and creating exploits using the Egg Hunter program in Microsoft’s OS. You’ll be incredibly in demand in the job market if you master all the skills outlined in this course.

Intensive Ethical Hacking Series

This course gets into more advanced ethical hacking topics. It builds on the concepts in the previous classes and teaches you useful things like crytography, breaching firewalls, attacking passwords, and much more. To be a skilled pentester, you need to learn everything offered in this class and the one we talked about above!

Ultimate Wi-Fi Hacking & Security Series

Securing Wi-Fi is so important, there are two courses dedicated to it! This course covers tons of threats to wireless networks, which will make it so you can secure the ones on which you’re working.

Hurry, The Average Will Go Up!

By the very nature of this deal, as more people beat the average, the average will go up! You’re getting in early, so you don’t want to wait to get access to all 7 of these courses. They just might lead you to the career you’ve always wanted!

Buy: Pay What You Want: White Hat Hacker Bundle

[Read more]

Our online lives are consistently at risk of hackers. Even our medical records are greatly sought-after. But it might get worse. A software engineer has recently warned that you should expect your Internet history, specifically any adult sites you’ve visited, to be leaked.

San-Francisco-based Brett Thomas posted on his blog:

“If you are watching/viewing porn online in 2015, even in Incognito mode, you should expect that at some point your porn viewing history will be publicly released and attached to your name.”

If this is the case, it would actually be an even greater concern than a stranger linking your name to adult material. Thomas uses porn as an example because it’s more sensational than leaking the details of which coloring sites you frequent.

Could your Internet history be an open book for hackers? And what can you do about it?

Why Would They Pick on Me?

Last year, a number of nude photos were leaked online, labelled ‘Celebgate,’ including images of Jennifer Lawrence, Kirsten Dunst, and Kate Upton. The media attention it brought even led to an ill-advised marketing stunt in which supposedly-compromising pictures of Emma Watson would be part of an upcoming leak.

It turned out to be utter nonsense, but it nonetheless generated press and shows how a group of hackers could potentially gain leverage over individuals if they did obtain NSFW material.

I’m not a celebrity, you might figure, so I wouldn’t be a worthwhile target for hackers.

Sadly, that’s simply not true. The fact that adult content can be used to take advantage of anyone is the prime reason horrible practises like sextortion are on the increase. Social media, too, is a considerable target, as seen during the so-called Snappening, with an alleged 200,000 Snapchat accounts leaked onto 4chan. Why? Sometimes for extortion, and at other times, just as a sign of power, to show people they can.

Look at the damage caused by the Ashley Madison leak! It’s very serious – with real world consequences.

After noting these high-profile privacy issues, Brett Thomas’ claim seems more than reasonable. As he theorises:

“At any time, somebody could post a website that allows you to search anybody by email or Facebook username and view their porn browsing history. All that’s needed are two nominal data breaches and an enterprising teenager that wants to create havoc.”

What You Can Do

It’s best you observe standard procedures to secure your privacy anyway, including limiting the amount of data you give to Facebook; using Incognito or Private Browsing; or switching to a search engine that doesn’t track you, like DuckDuckGo.

But these won’t stop a hacker determined to link your IP address to porn or otherwise NSFW websites.

If you’re concerned about such a leak, there are a few things you can do to limit the damage.

Use a VPN

If you’re after anonymous Internet surfing, your best bet is a Virtual Private Network (VPN). Enabled by encryption and tunnelling (that is, scrambled information delivered across a secure link between two interfaces), many of us already use VPNs at work, perhaps on remote sites to access the company Intranet.

There are plenty of reasons to use a VPN, but particularly that it will skip your online searches being logged by Google, Bing, or whoever.

It’s not unhackable, but without an encryption key, anyone trying to decipher your private information will find it much harder. Your IP address is also hidden, so it’ll be tougher to link that data to you specifically. Here’s a handy list of the best VPNs, listed in specific groups: premium (ie. paid-for), free, and torrent-friendly.

Try Tor Browsing

This is a whole different level of encryption. Just like the aforementioned VPN system, Tor bundles allow the exchange of information between public keys, but it further directs that data through onion routing.

Using proxy servers, the information can be traced back to an IP address, but the result will be the proxy server, not your actual home. Still, that can lead back to you relatively simply. However, onion routing muddies the water even further, directing data packets through several nodes and encrypting at every point.

It’s not perfect. Only the endpoint can decrypt the information sent, so hackers could only get jumbled-up gibberish at the intersecting junction. But that does mean that an endpoint is its weakest spot; the National Security Agency (NSA), for example, is targeting Tor browsers especially.

It does remain your best option for privacy.

Manage Voice Assistants and Suggestions

Voice assistants on phones are no doubt handy, but they also guzzle up data. Whether we give Siri, Cortana, and Google Now too much information is an entirely different argument, but that data is nonetheless collected. As all three know your location (with Cortana and Google Now even capable of distinguishing your home from your work), depending on your settings, such information could be used by hackers to link you to a specific area, making you and your searches more identifiable.

Collected statistics are then sent securely to Microsoft, Apple, and Google – but it could still be victim of an interceptor. So what can you do?

On iOS, you’ll need to toggle your settings: Settings > Privacy. Here, you can not only change your Location Services but also Diagnostics & Usage from Automatically Send to Don’t Send; this limits the data you send to Apple.

Similarly, you can go on Customize Google Now and turn off background data (although this does stop downloads and synchs).

Cortana can be changed using the Notebook. You’ll want to deselect Cortana can give you suggestions, ideas, reminders, alerts, and more, which is at the top of the Settings section on Windows 10. Cortana’s suggestions come from the information it stores in the cloud (a system even the NSA think is safest), but you can tamper with it by going on Manage what Cortana knows about me in the cloud. From there, you can clear personal info.

Or if you’ve got Microsoft Edge, open that app and then: More actions > Settings > View Advanced Settings and turn off Have Cortana assist me in Project Spartan.

Beware: limiting what voice assistants can do really can affect your device’s usefulness, but if this really is a big concern to you, it’s worth doing.

Limit Google

Google knows a lot about you. If you’ve got one of their accounts, it keeps a large amount of information about you, notably your location, details of your Gmail, and your search history. Google says it’s solely used to “improve your user experience and the overall quality of [their] services.”

Essentially, it’s for personalization, including advertising, but all that private info in one centralized place? Not good.

You can discover what they know by visiting Google Dashboard,but there’s not a great deal you can do – apart from disable their personalized search results, and using a different search engine. Stay signed out of your Google account while scouting the Internet too.

Incognito mode won’t stop such info being collected, but browsing through a VPN or Tor software should do.

Something to Think About?

The problem, of course, is that we don’t know what form a potential hack might take, so it’s difficult to protect yourself. If Brett Thomas is right, a lot of people will be sweating.

Your best bet right now is to practise best privacy protocols.

Would this be the ultimate result of our ongoing privacy violations? What further tips do you have?

Image Credits: Kate Upton by Peter Ko; People Network Via Shutterstock; Google Logo by Robert Scoble.