영화 속 해킹: 정확성 및 허위 진술 분석

### 영화와 TV에 묘사된 해킹의 현실
* 💻 개인정보 보호 연구원이자 해커인 새미 캄카르가 **영화와 TV 프로그램에서 종종 과장되게 묘사되는 해킹**에 대해 이야기합니다.
* 🎥 '스워드피쉬' 해킹 몽타주에는 **해커들이 실제로 사용하는 콘솔이나 터미널 인터페이스에 비해 비효율적인 3D 시각적 인터페이스**가 표시됩니다.
* 🚦 '이탈리안 잡'은 **비디오 피드와 알고리즘을 사용하여 신호등을 해킹하는 장면**을 묘사하며 이러한 인프라를 제어하는 **SCADA 시스템의 취약점**을 강조합니다.
* 💻 '스카이폴'에서는 다형성 코드의 사용이 언급되며, **16진수 코드 표현**과 같은 사실적인 요소도 있지만 시각적 그래픽은 실제 해킹을 표현한 것은 아닙니다.
* 📞 1980년대 영화 '워게임'은 해커가 컴퓨터 네트워크에 직접 전화를 거는 **'프릭킹'으로 알려진 전화 해킹**을 정확하게 묘사하고 있습니다.
* 🏥 '미스터 로봇'은 병원에서 실제와 같은 해킹 시나리오를 보여주며 **낙후된 기술과 허술한 보안 조치로 인한 취약점**을 드러냅니다.
* 🔒 'CSI 사이버'에서는 코드 레이어링이 과장되어 있지만, **웹 서버를 해킹하여 광고 코드를 수정하는 개념**은 현실에서 흔히 볼 수 있는 일입니다.
* 🎬 전반적으로 할리우드에서는 해킹을 정확하게 묘사하는 데 어려움을 겪고 있지만, 일부 영화와 프로그램에서는 **사실적인 요소**를 잘 표현하여 시청자의 흥미를 유발합니다.

새미 캄카르는 사실적인 기술보다 화려한 비주얼을 우선시하는 할리우드의 부정확한 해킹 묘사를 폭로합니다.

I need a rest easy all right hi I'm Sammy Kamkar. Sammy is a privacy researcher and computer hacker. Today we're gonna talk about hacking's depiction in film and television. Swordfish hacking montage. In this clip, we see a pretty recurring theme in a lot of movies that depict hacking, and that's a 3D visual interface. It's not my problem that really has nothing to do with hacking. What the is going on in this place or is really not an efficient interface to use at all. The more accurate interface would be a console or terminal. Yeah, and that's simply because it's the most efficient way to obtain a lot of data. You can look at a lot of code. You can look a look at a lot of text or a database and extract the information you want very quickly. Thank you Italian Job hacking traffic lights. They use video feeds from intersections and specifically design algorithms to predict traffic conditions and thereby control traffic lights. So all I did was come up with my own kick-ass algorithm to sneak in and now

we own the place. See red light, green light. Many of these traffic light systems are actually controlled through systems called SCADA systems, which are industrial controllers that allow things like traffic lights. Lights working fine, just an accident in Los Angeles. A number of street lights were actually hacked several years ago. Oops. And many of these traffic lights are actually controlled over the internet and often don't even have a password to connect to them. So, totally realistic. It's good Chuck hacking into the Federal Reserve. [Music] In this clip, we see a common theme, and that's pretty interfaces that really have nothing to do with hacking. Thanks for the help. There's too much information just coming up and down, and it's too quick for you to actually obtain any useful information. I'm sorry. We still talk to you pretty much never see pop-ups when you're doing any sort of programming or hacking like this. Laurie, in the middle of the clip, they also talk about optimizing their compilation. You know what you actually want to pick up there at the bottom of

your page compiler can optimize a value away like that. What they're talking about is actually optimizing something within code, and you're typically doing compiling when you're writing some source code and then you're compiling it into a program or binary that you can later run. It's kind of unrelated to what they're doing, so they did take some programming jargon and throw it in the middle. There was taken out in Skyfall. MI6 gets hacked. Who's using a polymorphic engine? Do you take the code? I never. I tried to gain access. It changes. It's like solving a Rubik's Cube that's fighting back. The 3D graphics here are similar to what you see in Swordfish. There are not really representative of anything you'd actually see. Unlike Swordfish, there are more realistic aspects in this clip. For one, they're talking about polymorphic code. He's using a polymorphic engine. Do you take the code's polymorphic code? Is a program that essentially changes itself to try to hide itself. Consider its our filters will no longer work, and it can

continue to spread. They talk a little bit about that in this clip. Never I tried to gain access. It changes. They show hex code, which could be of the virus. It's just another way to represent binary data or binary information, and that is pretty accurate. However, for the purpose of the plot, they do add the grand boro boro, which is not real hex code, as all hex characters are zero through nine or A through F. But they show that for the purpose of the plot. College if hackers competing with another hacker. Unbelievable. A hacker [Music]. This clip opens with a sequence that we would call social engineering. I don't play well with others, which is communicating with someone pretending to be someone else and trying to extract information that helps you break into a machine or target computer. Yeah, okay, besides the unrealistic visuals, this is actually something kind of common. Yeah, when you might hack into a machine and you find that someone else has already actually hacked in. At this point, you do something kind of funny. Revenge. Your goal is actually to patch the machine to

prevent any other hackers from breaking in, and you're actually helping the target, the sensitive type, but you'll often leave the back door so that you can come back in. What a back door is a piece of software that you can run on a machine that grants you access in the future without the authorized users ever knowing you're inside the machine. You're the that's been invading my turf. Yeah, wargames, 1980s hacking, those are great. Yeah, I don't think that I deserved it, do you? This is actually an accurate representation of hacking back in the 1980s. All right, back then it was called freaking, freaking with a pH, as in phone hacking. Yeah, in this case, he's actually dialing into a computer network over a telephone line, dying into the schools, except when you would dial in to dial up, you were dialing into an ISP or Internet service provider. Here, he's actually dialing directly into the computer that controls the grades. They changed the password every a couple of weeks, but I know where

they write it down, and this is exactly how bulletin board systems, or BBS's, worked back then, and a number of other systems as well. Okay, by accessing a server, Tron Legacy, we will be making our debut on Tokyo's Nikkei index. OS 12 is the most secure operating system ever released. Many films will depict hacking as accessing a machine and installing some malicious software. OS 12, a few bugs; however, I don't really consider that hacking. I'm just playing that. In this case, he's breaking into a place, physically accessing a computer that doesn't ask for a password, that has no encryption, or has no other authorization. So, he simply acts as a computer and uploads a virus. Well, gift hacking into a hospital, Mr. Robot. Hospitals, a heavily networked one like this, are almost too easy to hack. I can make my health records look like every other obedient zombie out there. Mr. Robot consistently demonstrates real hacking and pretty reasonable scenarios. Thank in this case, he's hacking into a hospital because they have pretty lack

security. This is William Highsmith. He is the IT department. He's also an idiot, and their technology is extremely old. He's useless security software that runs on Windows 98, which is pretty accurate when you're talking about most hospitals, and he's supposed to protect their network from people like me. Additionally, the interfaces in this clip are actually realistic. You don't have to worry. Recently, we've heard of actual hospitals getting hacked, having malware and ransomware installed, and even some parts shutting down simply due to the lack of security and old systems. They never stood a chance. NCIS stopping a hack? No way. I'm getting hats or ports key. It's moving too fast. Our connection with the intrastate abase separate. It's too much. I've never seen cold like this. Stop the pop-ups. This is not good. Defending against a hacker untraceable. Whoever is behind the site is local and wants attention. Shut him down. We are black. Holy nice eye piece. But every time we shut one down, a

new mirror pops up. The site's IP keeps changing constantly. Each new address is an exploited server. This clip is extremely accurate. Nice touch. A hacker has a domain name. Union. The U.S. keeps taking down the IP addresses of the domain name, and the IP address is essentially the physical address of that domain. However, the hacker has so many other IPS or machines on the internet hacked that he or she is able to replace them very quickly. It wasn't that wonderful. Now they state that the name server and registrar are hosted in Russia. Domain register and the name servers are all in Russian, which they have no jurisdiction over. No jurisdiction there. The registrar's where you get your domain names, such as wired.com, and the name server points the domain name, like wire com2, the IP address. There's a connection there. In this case, the one thing they got wrong is the U.S. does have jurisdiction over the dot-com. Good. So the U.S. would be able to take down any dot-com domain name. How patriotic. CSI cyber clickbait. The ads are.

Redirecting site users to what could be a fictitious pharmacy looks like a normal ad, right? And this is the code for the ad, but there's actually two codes written right on top of each other. Click-begging screen right part of this clip is someone accurately being able to hack into a web server and modify the code so that users who visit that site are then affected. The fake ad is masking the legitimate app. Is the real thing that happens quite common actually? However, the combination of codes being layered on top of each other, it's not really accurate. It could be a coincidence. If you're viewing the source code, you're pretty much viewing everything. Peekaboo, so not so realistic in this case. Yeah, the net disassembling a virus, not to worry, everything's under control. It's gonna be okay. You run into the same theme where the interfaces themselves are not very accurate. Yeah, however, everything that's actually happening here is quite accurate. I appreciate it. Essentially, she's taking a virus and she's disassembling it. Wipe out your own.

system what that means is she's taking the actual binary executable and turning it into machine code, which is the type of code that your computer or CPU actually executes. Then she's turning it into a format that she can read to see what it's actually doing. Well, why don't you just tell me what this is about so that she can help whomever gotten hacked, let them know what has happened, and how to resolve the issue. Thank you. This is something that actually there are dedicated teams and companies for today. What, you're kidding right? Breaching the firewall castle. Someone synched a rat to one of my servers. Remote access to a would-be hacked their own trying to track our IP address. Oh, can you stop it? No, but I can't slow him down. One thing we see in a lot of clips is people attempt to slow hackers down or slow something down, but really there's nothing to slow down. It's either happening or it's not. We have to stop him. However, there are some macros ease here. They do use a rat or no tax.

exception and there are actual tools called rats, which allow you access into machines that you otherwise shouldn't necessarily have access to. The interface is quite inaccurate, but then it also seems that TB likes to think that hackers send a lot of animal photos, as we've seen with the dog intron legacy low end, as we see here with lots and lots of cats. [Music] The Matrix Reloaded hacking into a power grid. [Music] In this, we see some realism. We see an actual UNIX terminal, and someone is actually using a fictitious tool called ssh nuke. What it pretty much does is it gives them access to the power grid. It drops them into a root shell on a UNIX machine, which actually is pretty realistic. Thanks. And then they use another tool, SSH, to log into another machine as root, which is the administrative privilege. It gives you pretty much full access to do whatever you want. Yeah, you can do that unrealistic. You have the SSH nuke tool, which is not a real tool. Additionally, most power grids aren't on the Internet.

but there's some pretty good foreshadowing going on here as more and more are becoming connected, as it simply makes them easier to maintain. There is nothing to stop hacking on a cellphone. Iron Man 2 and local intelligence on the ground indicating all of my second boy. I need him. If you'll direct your attention to shed screens, I believe that South Korea. In this clip, we see Tony Stark using his mobile device to actually hack into multiple TV screens and monitors, and it's actually kind of realistic. You're welcome. As you could easily break into, say, a Chromecast or Apple TV, and most Smart TVs are actually internet-connected now, so it's working. There's a big attack surface, a lot of ways to actually break into these TVs and cast something that otherwise you shouldn't. Weird science stealing processing power. Problem is your computer's a wimp, and we need a lot more power than this. That's why you see James [Music] [Applause] [Music]. We have another clip with some graphical interface that isn't very accurate. I

know that, but you know, we can use some fun 3D visuals. However, the act of breaking into a computer, especially one with more computing power and resources than your own, to try to crack something or decrypt something, is pretty accurate today. The clips we saw in wargames and weird science take place in the same time period. However, what we saw in wargames was a lot more accurate than what was depicted here. We also get another classic access denied screen. Yeah, yeah, live free or die hard. Executing a virus in this clip, they don't really show actually any hacking. They do show running a virus. However, to actually run a virus or upload a virus, you already must have access to the target system. Thanks for that. Essentially, you will need to have found a vulnerability that you can run the virus on, and only then can you actually execute that virus. Snowden surveillance, think of it as a Google search, except instead of searching only what people make public, we're also looking at everything they don't. So emails, chats.

SMS whatever yeah but which people the whole kingdoms no way this is real seriously there's actually a program called xkeyscore that the NSA uses execute scores under 702 Authority which means no warrants that we actually found out about from Snowden after he leaked a ton of documents to the press and her principal our government and other governments do have the capabilities to do this sort of thing the social network hackathon encryption and then intercept all traffic of work secure of course they're happy yes all behind a picture on you later here's the beauty if we can find a code written this is interesting because it's actually rumored to be true that Facebook would have these drinking programming hackathons yeah although I don't expect so many people and so much of a party atmosphere the type of system that he's talking about hacking into is pretty accurate this sort of thing is actually typical at Def Con a yearly hacking conference in Vegas people are hacking into each other systems defending against other hackers and again a lot of drinking transformers

alien hacking in this clip. They're trying to listen to a half team. However, you're not actually going to be able to do that for this type of hat. No way or hacking into a lot of computers. You will listen to sound. However, if you are trying to listen to certain types of radio frequencies and recognize what kind of sound or modulation it might be, the direct match to the signal in Qatar. There actually was a hack recently in Dallas where someone used radio frequency to set off every emergency siren in Dallas, breaking encryption under siege to see here. Access encoded gigabyte of RAM to do the trick in this clip. He's attempting to break some encryption by adding a gigabyte of RAM. You could buy two RAM to do this, but adding that gigabyte of RAM really is not relevant to breaking the encryption here. Oh, you might need some significant memory or storage space, but it's not something you'll do in the middle of your operation, really. So, not that realistic. Yeah, blackhat NSA hacking. You asked him to change his password. He

downloaded the PDF. What he downloaded was the key logger. That was a pretty long password for someone who can't actually differentiate the difference between a PDF file and an executable. What he downloaded was the key long because really he downloaded something that looked like a document, but because it was actually a key logger, that means it was a program that executed and ran an application. Who really had to steal the code? That key loggers are a pretty common way to access information from an individual. So if you want to record their keystrokes, see what they're typing, be honest, learn passwords, websites they visit, usernames, and other private information, key logger is the typical way that someone will install that on your machine and learn that information about you. Is in Jakarta Avengers 2 Age of Ultron Ultron hacking Jarvis your intentions to be hostile at the rate of progress with machine learning and artificial intelligence. Something like this where two different systems could actually begin to learn about each other, communicate with each other, and actually attack each other. This is rage the visualized 3D orbs in real space are not

so accurate as insane. In the future, machines will be able to think and will have access to physical components that they can actually move around. I am a programmer, so we could see something like this. However, the actual orbs of electricity, or balls of electricity, that is pretty much set in science fiction. We're out on my field to Criminal Minds hackers competing. First, we need you to look up the name Colby Baylor. This might be the coolest girl I've ever met, but her GUI is mind-blowing. That's weird. This is also kind of similar to hackers where two hackers were competing, taking over controller machine. It was a bit more accurate in hackers though, as they were essentially competing on the same target system, trying to prevent the other person from accessing it. In this, you see they're competing on a system, but then someone else's system actually gets hacked. What the hell? So in this case, there are multiple systems getting hacked, and it's just a little bit less realistic. This isn't good. We mentioned the Linux

operating systems completely Linux-based open source programming, and you don't see this in government systems. I mean, outside of like Switzerland, which actually is used in plenty of government series. There's lots of open source software used sort of across the world, including our government, right? I get it. The GUI comment is not too accurate. Her GUI is mind-blowing. Usually, when you're breaking into something, you're not actually going to run into any GUI, your graphical user interface. That's weird. And even if you do, it's usually not that exciting. Sneakers, freakin' I'm gonna bounce just call through nine different relay stations throughout the world and off two satellites. National Security Agency Director of Operations, please. It's my dime. I'll ask the questions. It started the trace. This is a cool demonstration of freakin' where they're actually jumping, not just to one other machine over the phone. Who are you and made the second leg, but actually relaying from phone to phone to phone. And you guarantee my safety. Freakin' is not as popular anymore as most machines.

are Internet-connected rather than dial-up or phone-connected. We make the call, but we make it our way. Algorithm hacking via email in or the weakest link in any security systems. It's you with your shitty passwords and how you share every part of your life online. And now I own Sam Novak's computer. In this clip, they're not showing too much of the actual hacking, but he does mention that he's exploiting the kernel. I'm just exploiting the vulnerability. Her kernel access was created. This is pretty difficult to do. However, there has been a recent vulnerability in antivirus software. It's always a way in where if you received an email with this very specific exploit, it could actually exploit the antivirus software running in your kernel, which is essentially your operating system, and give the attacker full control of your computer. Means they work for me. I think that's what they're implying here, even though they're not really showing the actual exploit. The difference does that make to me. Conclusion. Hollywood has the challenge of depicting hacking, which can

Actually, it can be quite a challenge because it's not that visually stimulating. However, it is always exciting when I do see a clip that actually is realistic.

Hacker Breaks Down 26 Hacking Scenes From Movies & TV | WIRED

WIRED

영화에서 해킹은 종종 비현실적인 3D 시각 인터페이스로 묘사되지만, 실제로 효율적인 방법은 콘솔이나 단말기를 사용하는 것입니다.

이탈리아 잡에서 신호등을 제어하기 위해 비디오 피드와 알고리즘을 사용하는 것은 많은 시스템이 해킹에 취약하기 때문에 현실적입니다.

해킹 장면의 일반적인 테마는 혼란스러운 정보 과부하, 프로그래밍 전문 용어, 사회 공학 등이며, 일부 요소는 정확한 반면 다른 요소는 극적인 효과를 위해 과장되어 있습니다.

해킹은 1980년대의 전화 기반 '괴롭힘'에서 오늘날의 사이버 침입으로 진화했으며, 미래의 접근을 위한 백도어를 남겨두고 있습니다.

"미스터 로봇"이나 "NCIS"와 같은 영화는 해킹 시나리오를 묘사하며 구식 기술을 사용하는 병원과 같이 보안이 취약한 시스템을 쉽게 침입할 수 있음을 보여줍니다.

해커를 차단하는 것은 해커가 IP 주소를 빠르게 변경하고 악용된 서버를 교체하여 추적 및 차단을 어렵게 만드는 능력으로 인해 더욱 어렵습니다.

미디어의 해킹 및 사이버 보안 현실

이 영상은 합법적인 앱과 레이어드 코드를 마스킹하는 가짜 광고가 등장하는 일반적인 해킹 시나리오를 보여줍니다.

바이러스를 분해하여 분석을 위해 기계 코드로 바꾸는 과정이 정확하게 묘사되어 있습니다.

미디어는 종종 해커의 속도를 늦추는 효과를 과장하지만, 원격 액세스를 위해 RAT와 같은 도구를 사용하는 것은 실제 전술이며, 가상의 도구와 전력망이 온라인 상태라는 일반적인 오해에도 불구하고 UNIX 터미널과 루트 액세스 묘사는 어느 정도 사실적입니다.

스마트폰과 스마트 TV와 같은 디바이스의 연결성이 증가함에 따라 해커의 공격 범위가 넓어지고 있습니다.

아이언맨 2에서 토니 스타크가 모바일 디바이스를 해킹하는 장면은 인터넷에 연결된 디바이스에 침입하는 것이 얼마나 쉬운지를 반영하여 사실적으로 묘사되었습니다.

워게임, 라이브 프리 또는 다이 하드와 같은 영화에서 해킹과 바이러스 실행에 대한 묘사는 정확도가 다양하며, 실제 해킹은 대상 시스템에 먼저 액세스해야 하는 경우가 많습니다.

외계인 해킹은 팀을 엿듣는 것으로 묘사되지만 이러한 유형의 작전에는 비현실적입니다.

최근 미국 댈러스에서 발생한 해킹 사건은 무선 주파수를 이용해 비상 사이렌을 작동시킨 사례로, 이러한 해킹 수법의 잠재적 위험성을 강조합니다.

키로거는 키 입력을 기록하여 개인 정보를 훔치는 데 일반적으로 사용되며, 시스템 제어권을 놓고 경쟁하는 해커의 묘사는 실제 시나리오보다 현실적이지 않습니다.

해킹과 오픈 소스 소프트웨어의 현실

리눅스 기반 오픈 소스 프로그래밍은 스위스와 같은 곳을 제외하고는 정부 시스템에서 흔히 볼 수 없습니다.

해킹에 대한 내러티브는 종종 그래픽 사용자 인터페이스의 역할을 경시하는데, 실제 해킹은 일반적으로 복잡한 릴레이와 취약점 악용을 포함합니다.

할리우드에서는 해킹을 정확하게 묘사하는 데 어려움을 겪고 있지만 사실적인 묘사는 언제나 흥미진진합니다.