How the Best Hackers Learn Their Craft

  Переглядів 2,563,107

RSA Conference

RSA Conference

День тому

Presenter: David Brumley, CEO, ForAllSecure
Do you want to know how to build a top-ranked competitive hacking team? It's all about the system. In sports, we understand systems that coaches can use to build a system for identifying talent, recruiting them, training them up, and competing in big games. Learn our proven system for building an elite team of hackers that win DEFCON. It's surprisingly easy, but not what you'd think.
www.rsaconference.com/usa

КОМЕНТАРІ: 64
@chrisbeckner2103
@chrisbeckner2103 2 роки тому
To quote the infamous Rick Flair, “to be the best you gotta beat the best.”
@ChandravijayAgrawal
@ChandravijayAgrawal 2 роки тому
This is no clickbait, this is real knowledge
@sjatkins
@sjatkins 2 роки тому
Main thing is enjoying writing that first program and then stretching always to see how much more you can make it do and how beautifully. Having math intuition and sense of what is elegant helps. I think you can hone that over time.
@superfreiheit1
@superfreiheit1 2 роки тому
The first Teacher that understand what learning means
@vladzorin1006
@vladzorin1006 2 роки тому
He even handled that hack diversity question like a boss
@nogareru1
@nogareru1 2 роки тому
great talk and also if you don't know much and get excited from doing ctf's . Don't stop. You'll see how much you're learning and also the last question about being biased because of CM students. I'll say this there's always going to be someone better. So don't feel discouraged and always try something new.
@tjinspace7001
@tjinspace7001 2 роки тому
You're suppose to know binary analysis, web vulnerabilities, and common algorithm math before you go to one. If you go there just knowing how to use Kali tools you won't make it past one challenge
@_keepitsocial
@_keepitsocial 2 роки тому
This talk is great. It's ideas are easily transferrable throughout your entire life not just hacking
@aadityaapatill
@aadityaapatill 5 років тому
I want to learn
@TheBlueArcher
@TheBlueArcher 2 роки тому
Half way through the video, I absolutely agree. The best teachers and professors i've had regarding IT skills, understood that they didn't have all the answers, and allowed for creativity. The worst ones though not only made it really obvious that I knew more than them, but would only take a really specific, often unoptimal answer. and wouldn't try to understand or accept any others. Like, really? you're not even going to try and step through the logic? or ask me to explain it? And absolutely, I've had amazing teachers and professors, who also clearly knew less about a subject than I did, but they accepted that and like you said, found areas an topics for me to explore. Many of them also encouraged me to help others --probably partly to reduce their own workload-- but also inevitably when helping, I would get a question I didn't know the answer to, so I needed to either experiment, or research more, deepening my own understanding too. I always wanted to take a trip to defcon, when coronavirus is over, definitely going to try and plan my next trip to vegas for that. interesting you have that high school challenge pico ctf, I'll dig around . definitely sounds like something I would have loved to have when I was in highschool.
@crisnmaryfam7344
@crisnmaryfam7344 2 роки тому
LOL I wish. We had Photoshop. and Computer Applications. OR "Keyboard Typing" when I was in highschool. I was the kid in the corner playing Roms and Emulators I brought with me (crica 98-2000). Pretty sad when the teacher couldnt even explain it to another student who was curious. She had to point the student to me lol. Public school....ohhh public school...
@snk-js
@snk-js 2 роки тому
I think it's about finding your passion, once you find it as soon as possible you can spend all your life on it without any doubts about what to do and when, but the path itself is another environmental problem because if you don't have an initial incentive at least it will be very hard you to proceed with discipline.
@coolandgood1010
@coolandgood1010 2 роки тому
Not everyone is lucky to find their passion at such a young age.
@DrJimmyBob
@DrJimmyBob 2 роки тому
Yo, been looking for a while (since always?) and I'm getting soooo tired of this sentiment. Like, yeah man, be positive and spread hope, but so many of usonly don't identify with a passion, and maybe never will
@chriskiwi9833
@chriskiwi9833 2 роки тому
Inspirational.
@arkdtk
@arkdtk 2 роки тому
Very interesting talk, always been interested in it
@KartikayBagla
@KartikayBagla 2 роки тому
A great video! Also there's an error at 19:45 with the line 1.75+1.5+0.25 which equals 3.5 rather than 4.
@teemum.9023
@teemum.9023 2 роки тому
26:55 the graphics are not poor at picoCTF, they are nostalgic
@SOC-
@SOC- 2 роки тому
Definitely an interesting job
@jontnoneya3404
@jontnoneya3404 2 роки тому
What about middle aged people looking for new careers? Would this be a good start for someone without CS experience? What about a CS grad that's worked in non-programming, non-hacking jobs looking to get into much more technical work. Is this a good place to start?
@nospamaz3318
@nospamaz3318 2 роки тому
Error in slide at 19:35, 2nd from last line (9/4) is 2.25, not 1.75
@JPxKillz
@JPxKillz 2 роки тому
so your the legend that corrected the professor during lecture.
@eremundead6321
@eremundead6321 2 роки тому
"once you learned basic arithmetic you learned trigonometry" who?!?!!?
@joshcolbert5613
@joshcolbert5613 4 роки тому
Brilliant iron sharpens iron
@goblinninja1234
@goblinninja1234 2 роки тому
1:05 i thought he was gonna say this video is sponsored by nordvpn
@slide1821
@slide1821 2 роки тому
I don't get it: shouldn't the name of the video be 'how to recruit geniuses'? This is a genuine question. Did I miss anything?
@TheRisingMiles
@TheRisingMiles 2 роки тому
Lots of good ideas here!
@AaronDGreen
@AaronDGreen 2 роки тому
Very Cool
@thewild2334
@thewild2334 2 роки тому
excellent video as a highschool amature hacker,all of this information is super valuable!
@rahuljmd
@rahuljmd 2 роки тому
very informative video
@lucatowalker2123
@lucatowalker2123 2 роки тому
Interesting
@DaDevil1983
@DaDevil1983 2 роки тому
Amazing
@teemum.9023
@teemum.9023 2 роки тому
30:25 bell curve of ability. I learn slowly and can feel intimidated by difficulty. I may not do my homework. I also know that once I have gathered all the details, which I see more and deeper than others, and internalize them, I get faster and more able than average
@angryman9333
@angryman9333 2 роки тому
6:34 you freaked me out lol
@teemum.9023
@teemum.9023 2 роки тому
22:22 it´s not talking about the cryptography, it´s talking about the implementation, in other words, metadiscourse.
@callisoncaffrey
@callisoncaffrey 2 роки тому
But in Jeopardy you can choose whatever difficulty you want and don't have to progress there.
@Reelix
@Reelix 2 роки тому
19:45 - 1.75 + 1.5 + 0.25 = 3.5 - Not 4 :p
@adrian6185
@adrian6185 2 роки тому
I came here to say this
@etako79
@etako79 2 роки тому
And just imagine all these different hackers with all their knowledge and strategies just being funneled and soaked up by AI. With computer learning being more and more prevalent and common, they’re creating the ultimate HACKER that will be able to infiltrate any software or computer in the world. This is where shit gets very very concerning and out of control. It’s like thousands of the best of the best all intertwined into one, HOLY FUCK the boundaries this things won’t have and can’t bust thru.
@teemum.9023
@teemum.9023 2 роки тому
23:13 the highest expert mountain is how child protection bureaucracy deems itself about personal lives of their clients. They do not even go through the scientific process to get there.
@LilBogota
@LilBogota 2 роки тому
So the best offense is defense but then you have to also learn how to move from phyton when its overtaken by a better system you said it when it said that it killed you, whats the next python?
@Uneke
@Uneke 2 роки тому
“They can free you from those eco systems” Blue pill, red pill… choose Lol
@teemum.9023
@teemum.9023 2 роки тому
3:15 How would you sell a zero day to Microsoft of Apple? If you use to break their system, they sue you for extortion. If you tell them what it is, they just take the info and don´t pay you 100000s.
@Dong_Harvey
@Dong_Harvey 2 роки тому
This presentation is great, but there is still a clear class divide in regards to any CS and event STEM education in the US at least.. If any major educational institution carded to recognize the problems faced by lower class students, they would also recognize the power of their perspective, especially regarding systematic dissection of social structures like corporate neglect in product design
@salimr4718
@salimr4718 2 роки тому
when AI will become very advanced, hacking will be the province of only the extremely few.
@user-zz1uf6kx6x
@user-zz1uf6kx6x 2 роки тому
Yea and it'll be many years before that even happens lol
@andychung7922
@andychung7922 2 роки тому
Hacking is like life O.o
@edwardspencer9397
@edwardspencer9397 2 роки тому
Hackers are passionate people. They don't really care about money. They only care about challenges and problem solving. But they are forced in most cases by other companies or governments. If a group of hackers decide to run the world, the world would be a better and a happier place.
@wiczus6102
@wiczus6102 2 роки тому
I don't think this has anything to do with the best hackers. Systemized teaching doesn't get you to solve problems like this. With systemized teaching you can teach students to do sql injections or some cyphers. You need an inherent understanding of a system, which no sane person has. Another problem is that if you seriously do hacking. You competition are experts. If you were attempting to crack AES you'd be competing with a cumulative thousands of years of development by mathematicians and security experts. And with each year, this gap between what you could do and what society already did grows larger and larger. If you do things like that you're a genius and I don't think some university pipeline can reliably make such people.
@happywednesday6741
@happywednesday6741 2 роки тому
True, but mostly people just leave doors unlocked and have weak passwords
@wiredvibe1678
@wiredvibe1678 2 роки тому
I don't think his system "makes" hackers more than identifies people that could be good hackers. All the pentesters I know don't really like ctf because it's not realistic to what we see in the real world. However. The skills you learn with reverse engineering and so on are useful in security research.
@sjatkins
@sjatkins 2 роки тому
You say hacking isn't about breaking into things then you give those examples. Sigh. Hacking is so very much broader than that.
@normanhenderson7300
@normanhenderson7300 2 роки тому
Hacking is making computers do what they were not intended to do? If I am able to make them do what they were ‘not intended to’, obviously they were inherently capable of doing what you make them do. Just that you did not discover the means of making them do what they ‘were not intended to do’.
@user-sv9lf5yq8x
@user-sv9lf5yq8x 2 роки тому
he probably meant 'expected' by the people who designed it initially. not 'intended'
How do hackers hide themselves? - staying anonymous online
11:55
Grant Collins
Переглядів 1,3 млн
Мама и дневник Зомби (часть 1)🧟 #shorts
00:47
10 Minutes To Escape Or This Room Explodes!
10:00
MrBeast
Переглядів 67 млн
When Cybercriminals with Good OpSec Attack
49:01
RSA Conference
Переглядів 173 тис.
I Played Beginner-Level Security CTFs For 30 Days - Here's What I Learned
13:44
The Most Mysterious Website - Mortis.com
17:04
Chill Fuel
Переглядів 1,6 млн
How I hacked a hardware crypto wallet and recovered $2 million
32:18
Hacker interview-Gummo
42:21
Soft White Underbelly
Переглядів 7 млн
6 Must-Have Security Gadgets That Fit in Your Pocket
9:03
All Things Secured
Переглядів 1,6 млн
I Played HackTheBox For 30 Days - Here's What I Learned
10:23
Grant Collins
Переглядів 277 тис.
Learning to Hack as a Kid
5:03
TimTom
Переглядів 10 млн
ИГРОВОЙ ПК от DEXP за 37 тысяч рублей из DNS
27:53
Ремонтяш
Переглядів 355 тис.
Broken Flex Repair #technology #mobilerepair
0:55
ideal institute aligarh
Переглядів 15 млн
Rabbit R1: Barely Reviewable
19:53
Marques Brownlee
Переглядів 6 млн
Клавиатура vs геймпад vs руль
0:47
Balance
Переглядів 459 тис.
Cách sửa này được không các bạn?
1:00
Cơ Khí Toàn Nghĩa
Переглядів 859 тис.