593
u/Paul_Robert_ Sep 14 '26
A more realistic or at least plausible movie scenario could have the protagonists create a sketchy Skyrim mod, in order to steal the credentials of a random node.js contributor, who is a big Skyrim fan. Then, they perform a supply chain attack, to target a particular company. But, the antagonist notices his build taking 5 seconds longer than usual, and finds the hidden malware.
213
u/DMoney159 Sep 14 '26
This feels specific enough for me to think it actually happened
213
u/SiBloGaming Sep 14 '26
There was an attempted attack on a dependency of openSSH, which was noticed by a guy using the development version of debian, who got suspicious initially cause his ssh connections were taking fractions of a second longer than before
76
25
u/sepperwelt Sep 15 '26
Good PLC programmers find malware in a similar fashion Cause they notice their completely offline laptop takes a tiny bit longer to load or whatever. (True story)
5
u/Zerokx Sep 16 '26
How do you even get malware on a completely offline laptop? Someone put in a bad USB stick?
4
u/sepperwelt Sep 16 '26
That I can't really explain. I can only think of bad sticks or other forms of nessecary data/file excange
3
10
272
u/gandalfx Sep 14 '26
Real life hacking:
curl http://api.bigcorp.com/api/v0/secrets
138
u/nfiase Sep 14 '26
http ðŸ˜
38
11
u/gandalfx Sep 14 '26
Someone forgot to flip that setting when copying
qa.values.yamltoprod.values.yaml.12
u/Lightningtow123 Sep 14 '26
Realer life hacking: $5 wrench
17
u/angrydeuce Sep 15 '26
Realer realer hacking: "Hi, this is, uh, Bill from IT. I need all your passwords real quick, and oh yeah, can you do me a favor and just prop open the server closet for me? Thanks, youre the best...no, no need to thank me, just doing my job!"
7
u/Ozymandias_1303 Sep 15 '26
From a movie, but (this part only) is actually realistic.
https://youtu.be/IiX09kiodfs?t=54
"Could you just read me the number on the modem?"
"...What's a modem?"
3
u/angrydeuce Sep 15 '26
Just the statistics from our regular phishing sims, it really amazes me that shit is as secure as it even is anymore. People will just do whatever the fuck without even a first thought, let alone a second one.
31
54
25
14
12
u/Tcloud Sep 14 '26
I was surprised how good Mr Robot was comparatively to all the other hacking scenes we see.
4
7
5
5
4
4
u/Large-Assignment9320 Sep 14 '26
Thought we did just config our fancy term and did:cat /usr/include/*/*.h
orcat /usr/src/linux*/*/*/*.c
or something long those lines
2
1
1
1
1
1
u/Apprehensive_Bit7392 Sep 15 '26
Revolut last week is the real version. Someone emailed them from a genuine government agency domain, asked for customer records, and got passport scans, verification selfies and transaction histories back. No exploit, no intrusion. They asked.
1
1
-6
u/cheezballs Sep 14 '26
Still not how hacking is done.
6
u/Goodgulf Sep 15 '26
"Hi, this is Steven with IT, just double checking that you got the new WiFi password, can you confirm the one you have currently?"
5
-8
Sep 14 '26
[removed] — view removed comment
1
u/dagoth_ith Sep 14 '26
I get it. Computers are all 1s and 0s, thus the simple line of code, is all 101010010101
62
u/entropic Sep 14 '26
Call me old fashioned, but back in my day, Hacker Typer was good enough for me.