Random thought

To preface, I have no knowledge about hacking, technology, or guns at all above a few things. But, hacking and exploiting feels more like a result of expertise rather than a field of its own. I mean, it's a field on its own, don't get me wrong. But it feels like it depends a LOT on how much you know about technology

You need at least a bit of knowledge about technology as whole before you're even able to exploit it. And although you can start learning to hack with mininal knowledge of technology, you definitely won't be able to do anything better than a "Can I have your password?" line. But, if you know a lot about technology, how databases work and all that, hacking would just come natural to you. Though, you won't be able to do a lot unless you actively study it

It's kind of like learning about guns (which in this case would be technology) and learning how to kill, which would be hacking. You can't really shoot without first knowing how to operate a gun. Safety pins, bullets, and there's almost always a lock, in both the physical (a lock) and metaphorical (law) sense, between an uninitiate and a gun. You definitely need to know a person who has guns, or have enough common sense to pass training and buy one yourself. Although, if the situation is right, getting a gun and shooting it would be a very easy thing to do

To match the previous analogy, you can't really hack things without first learning about technology is overall. You can't really try to exploit without knowing how to operate a computer. And unless you have or know of certain tools or tricks, it's pretty hard to start actually hacking something. Although, script kiddies can thrive if the security is bad enough, or somehow people still forget about SQL injection prevention. In the same vein with both analogies, it's one thing to learn how to kill or hack, but it's a whole other thing to know how to get away with it. Like how pushing someone off from the Grand Canyon is easy, it's another thing to be smart enough to wear gloves while doing it

And just like how you can kill a person in a myriad of ways, shooting is just one of them. Social engineering can do the job well instead of hacking in certain conditions. A good ol' look over the desk and remembering the password memo can also work

I hope people connect the same dots I did while I was writing this...

submitted by /u/1AM1HE0NE
[link] [comments]

from hacking: security in practice https://ift.tt/NJmvP3E

Comments