Hacking

Recommendations

Info

Naturalness – first principle of magic • Often takes years to perfect some sleights • Failure to deceive occurs if unnatural – i.e. Email from your “friend” • The more natural it is, the greater probability of it succeeding Hack: Everywhere
And when naturalness isn’t possible • Minimize the unnaturalness as much as possible – E.g. Reduce the number of log entries, alerts – Make log entries look more natural • “AAAAAAAAAAAAAAAA” => “ProjectDirectory” • English Shellcode • Hide what you can’t eliminate – E.g. Oracle.com vs Orade.com vs. 0racle.com Hack: replicate legitimate e-mail, similar domain names
Page 1 and 2: How misdirection can be used to ste
Page 3 and 4: Assumptions
Page 5: Magicians’ Arsenal • Actions
Page 8 and 9: Bluff • “Feint” but calling a
Page 10: Temps or Timing • Timing is used
Page 13 and 14: Gaff • A visible device with a se
Page 16 and 17: Secret Accomplice, Stooge, Shill
Page 18: The Patsy, or “Fall Guy” • In
Page 24 and 25: Misdirection • A way to control a
Page 26 and 27: Directed Misdirection • Can be ca
Page 28: Constrained Misdirection • Hacker
Page 31 and 32: Use multiple methods • Spectator
Page 33 and 34: Fake Revelation • Reveal an infer
Page 36 and 37: Now let’s create a scenario…
Page 38 and 39: More preparation from the Magician
Page 40 and 41: Then he makes a phone call to Innoc
Page 42 and 43: Meanwhile… • CEO is told of pre
Page 44 and 45: And then… • Second bogus Press
Page 46 and 47: The Sucker Punch • Source code of
Page 49 and 50: The goal of the magician-hacker •
Page 52 and 53: Lessons • Press releases should b

Hacking

Create successful ePaper yourself

Delete template?

Save as template?