you’re about to get hacked!! (7 reasons why) // FREE Security+ // EP 6

About this video

Episode 6 of a free Security+ series, sponsored by CompTIA around its then-new Security+ SY0-601 exam, teaching social engineering through movie scenes. The thesis is that humans run a vulnerable ‘human OS’ with seven unpatchable vulnerabilities, named at the end as authority, intimidation, consensus, scarcity, familiarity, trust and urgency. A Sneakers (1992) scene illustrates pretexting: a fake cake-delivery story builds trust and familiarity, then urgency and intimidation get the intruder buzzed in. A Jimmy Kimmel street interview shows people revealing password ingredients (dog’s name, school, graduation year) under authority, trust, familiarity and pressure. Catch Me If You Can shows Frank Abagnale using a Secret Service pretext, authority and a distraction to escape an FBI agent. Breaking Bad and Hackers clips illustrate impersonation/pretexting to extract an address and a modem number. Spam comments promising account hacking and fake review consensus illustrate consensus/social norms, including tailgating. Two CompTIA CertMaster Practice quiz questions are worked through — impersonation of an internet tech, and scarcity/urgency in a student-loan phone scam. His defence is pattern awareness: learn current attack methods the way antivirus uses signatures, and remember a good deal today will usually be a good deal tomorrow despite scarcity pressure.

Key takeaways

• Social engineering exploits seven human vulnerabilities: authority, intimidation, consensus, scarcity, familiarity, trust and urgency
• Pretexting — inventing a plausible story and props, as in the Sneakers cake delivery — builds trust and familiarity before the actual request is made
• Impersonation plus authority (fake reporter, fake Secret Service agent, fake internet tech) can extract addresses, credentials and physical access without any technical hacking
• Consensus and social norms are an attack vector: fake reviews, repeated spam endorsements and holding a door for a tailgater all pressure compliance
• Defence is signature-style awareness: learn the patterns of current attacks, slow down under scarcity/urgency, and never use personal details (pet, school, graduation year) as passwords

Episode details: published November 20, 2020 · 22:53 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.

← Previous: my beard isn’t real // FREE Security+ // EP 5 · Next: i LOVE this switch!! // Cisco Enterprise Switch for SMALL business (Catalyst 1000 series) →

All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube