Hello, I'm thinking of doing an ethical hacking course. I'm interested in if others on this list have attempted such a course, have the exams been accessible and what provider has been good in terms of good material. I know I'll have to find a certification path locally. Thanks
Unfortunately some of the tools are not accessible due to their graphic nature. If they were, I would have a lot of fun with my neighbours. For example, I would leave my Wi-Fi unsecured and have a good time taking over anyone's system that tried to use it. I wouldn't do anything harmful, just have fun changing the desktop background, altering fonts etc. Now another fun area is social engineering. When I took a security course, the instructor was often contracted by various organisations to see how far he could get. I told him that if he used a guide dog he would find that he would be able to get a lot further into the different companies. Often when going to a new place without even trying it is amazing where I would end up at times. These were places that visitors and guests would not normally get into. Vic Pereira Project Manager, Networks and End-Users Branch Shared Services Canada / Government of Canada vic.pereira@ssc-spc.gc.ca / Tel: 204-781-5046 Gestionnaire de projet, Direction des réseaux et des utilisateurs finaux Services partagés Canada / Gouvernement du Canada vic.pereira@ssc-spc.gc.ca / Tél: 204-781-5046 -----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Darragh Ó Héiligh Sent: Wednesday, August 03, 2016 03:38 To: Blind sysadmins list Subject: [Blind-sysadmins] Ethical hacking courses Hello, I'm thinking of doing an ethical hacking course. I'm interested in if others on this list have attempted such a course, have the exams been accessible and what provider has been good in terms of good material. I know I'll have to find a certification path locally. Thanks _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
It’s funny you mention the social engineering thing and use of a guide dog. I used a cane but still was able to walk in to the secret NSA facility on 2nd street and Folsom, walk around for about a half hour with one other person and we didn’t get caught until I opened up a cabinet attached to a large protocol analyzer and started hooking my laptop up to a console port.:) On a similar note, I used a CAPCHA excuse (CAPCHA with no audio challenge) to social engineer my way in to Palo Alto networks support system. By the time I was done instead of my own department my account had access to all the firewall notes and support tools for all of Fidelity Investments. Took me maybe 20 minutes and a more than helpful person on the other end. I suspected it was more than just me experiencing this, funny to see it mentioned here.
On Aug 3, 2016, at 8:33 AM, vic.pereira@ssc-spc.gc.ca wrote:
Unfortunately some of the tools are not accessible due to their graphic nature. If they were, I would have a lot of fun with my neighbours. For example, I would leave my Wi-Fi unsecured and have a good time taking over anyone's system that tried to use it.
I wouldn't do anything harmful, just have fun changing the desktop background, altering fonts etc.
Now another fun area is social engineering. When I took a security course, the instructor was often contracted by various organisations to see how far he could get. I told him that if he used a guide dog he would find that he would be able to get a lot further into the different companies. Often when going to a new place without even trying it is amazing where I would end up at times. These were places that visitors and guests would not normally get into.
Vic Pereira
Project Manager, Networks and End-Users Branch Shared Services Canada / Government of Canada vic.pereira@ssc-spc.gc.ca / Tel: 204-781-5046
Gestionnaire de projet, Direction des réseaux et des utilisateurs finaux Services partagés Canada / Gouvernement du Canada vic.pereira@ssc-spc.gc.ca / Tél: 204-781-5046
-----Original Message----- From: Blind-sysadmins [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of Darragh Ó Héiligh Sent: Wednesday, August 03, 2016 03:38 To: Blind sysadmins list Subject: [Blind-sysadmins] Ethical hacking courses
Hello, I'm thinking of doing an ethical hacking course. I'm interested in if others on this list have attempted such a course, have the exams been accessible and what provider has been good in terms of good material. I know I'll have to find a certification path locally.
Thanks _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
I took a course like that at the local technical college. The instructor allowed me to substitute linux equivalents for all the Windows objects in the course. My job has nothing to do with Windows as almost all scientific computing is done with linux. So the instructor let me use a linux packet sniffer, for example, instead of a Windows packet sniffer. When the assignment was to hack the administrator password on a Windows machine, he let me hack the root password on a linux machine instead. I had to find all the equivalents myself but in the end he said he might have learned as much from me as I did from him. Having said that though, the class didn't help me keep our machines that much more secure. The reason is that the first thing you learn in a class about security is that the vast majority of breakins are accomplished by tricking a user into giving up their password. It has next to nothing to do with technology. And that has certainly been my experience. Sometimes I feel as if I'm wasting my time securing our machines when people are handing out their passwords to everyone who asks. On 08/03/2016 03:38 AM, Darragh Ó Héiligh wrote:
Hello, I'm thinking of doing an ethical hacking course. I'm interested in if others on this list have attempted such a course, have the exams been accessible and what provider has been good in terms of good material. I know I'll have to find a certification path locally.
Thanks _______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org https://lists.hodgsonfamily.org/listinfo/blind-sysadmins
-- -- John G. Heim; jheim@math.wisc.edu; sip://jheim@sip.linphone.org
participants (4)
-
Darragh Ó Héiligh
-
John G Heim
-
Scott Granados
-
vic.pereira@ssc-spc.gc.ca