해킹 기법: 위험 및 보안 조치 설명

### 기술의 어두운 면: 해킹 위험과 보안 대책
* 💻 19살에 저는 **바이러스를 유포한 죄**로 비밀경호국의 급습을 받고 **2년간 컴퓨터를 사용하지 못하게 되는 심각한 결과**에 직면했습니다.
* 🔌 보안을 위한 장치가 악의적인 의도로 용도가 변경될 수 있지만, **장치를 속여 폭발할 가능성이 있는 경우 큰 폭발이 아닌 경미한 스파크**가 발생할 가능성이 높습니다.
* 🛡 해킹의 표적이 될 가능성은 낮지만 신뢰할 수 없는 링크를 통한 멀웨어 공격은 여전히 흔한 위협이므로 사용자는 해킹을 방지하기 위해 **카메라를 가리는 것**이 좋습니다.
* 🔑 여러 사이트에서 동일한 비밀번호를 사용하는 것은 소비자에게 큰 위험이므로 **고유하고 강력한 비밀번호**를 위해 **비밀번호 관리자를 사용하는 것**이 필수적입니다.
* 🚗 연구원들이 시스템의 취약점을 이용해 **지프 그랜드 체로키와 같은 차량을 원격으로 제어하는 기능**을 시연하는 등 자동차 해킹은 충분히 가능한 일입니다.
* 📡 차고 문과 같은 장치에 있는 수신기는 단순하기 때문에 **무차별 대입 공격에 취약**하여 최소한의 노력으로 무단 액세스를 허용합니다.
* 🚦 신호등은 산업 시스템을 통해서도 조작될 수 있으며, **공격자는 직접 접근하지 않고도 신호를 전송**하여 조명 패턴을 변경할 수 있습니다.
* 👁 최신 카메라는 해킹을 통해 **상태를 표시하지 않고 작동**할 수 있어 일상적인 기술의 보안에 대한 인식의 필요성이 강조되고 있습니다.

새미 캄카르는 올바른 기술을 사용하면 자동차 및 카메라 해킹이 놀라울 정도로 가능하다고 말합니다.

I can't think of any mechanism that would actually allow you to act physically cause something to explode. Alright, car hacking, that is 100% doable. Okay, they're looking at someone's camera. I see if you are concerned about your camera being hacked. There's a very easy solution and it's uh hi. I'm Sammy Kamkar. I'm a security researcher and computer hacker. Today, we're gonna be breaking down hacking techniques in the video game watchdogs. Be sure to LIKE and subscribe for more episodes of experts react. Oh, that's interesting. You could potentially see electricity. I mean, there's actually devices you can use to hold up to see power going through things. Like, you typically have to be pretty close. Actually, you could use something like a FLIR camera just to see heat signatures. Because you would see Heat, essentially resistive losses going through anything with power running through it. So, that might give you a similar visual île to what he's saying. It is absolutely doable because it's a gate. You're probably gonna want something

like a clicker, right? Like a garage door clicker. So, that clicker is gonna communicate over a radio frequency (RF) within the electromagnetic spectrum. And with that, there's gonna be a receiver connected to that system in order to trigger the gate, to trigger the motor. Now, that RF receiver is gonna be looking for some specific signal, and typically that's a fixed code. It's like a password, let's just say it's one, two, three, four, or five. So, if you ever send that one, two, three, four, five on the right frequency with the right modulation and encoding, then the receiver will pick that up and say, Oh, that's the right code. Now, the problem with a lot of these garages and gates that are controlled by these receivers is the receivers themselves. The code they're looking for, the password they're looking for, is typically a very, very, very small number. But rather than one, two, three, four, or five, it's more like one, two, three, and then each one that they sell, they just change the number. So, in one case, the

numbers like 1, 2, 3. In the other case, the number is like 2, 3, 4. And this key space, or basically the amount of possible combinations, is typically so, so low that you can very easily build a device, program it to say, Okay, I'm gonna try code one, and I'm gonna try code two, I'm gonna try code three. And because you can send that at such a high speed, within seconds or four minutes, you can then unlock most of these garages or gates that are using these fixed codes. It's like a password, and you know if you can go through all the possible passwords, you can actually open these traffic lights. Actually, that's actually something that has been done. Traffic lights are typically controlled by these industrial systems that are really synchronizing a lot of the lights within a town. However, some of these traffic lights will also have additional mechanisms or additional systems that are connected. The older ones used to actually have these infrared sensors, so you'd see a sensor next to the traffic light, and the

infrared they were looking for was a strobe at a certain frequency, and that frequency was configured based off that town's police sirens or ambulance or fire. So that if one of those sensors saw it, it would then say, Oh, I know that's an ambulance or that's a cop car. I'm going to turn red for all the lights around me. And you, as an attacker, could potentially build a device that transmits the correct signal to say, you know, Change the traffic light signal without ever even having access to this device in the first place. Oh, that can be done. It depends on the vehicle. I demonstrated this with a device that created called Own Star, which can essentially take over OnStar vehicles and allows us to do things like unlock the vehicle, remote start, as well as turn on the alarm, even if it's really far away from you because they're actually internet-connected. But it really depends on the vehicle and how they're setting that off, but this is actually doable. All right, car hacking. Unlock any car without breaking in. Yeah.

that is 100% doable. Lots of attacks. There's the own star and roll jam and Charleville and Chris Valasek were able to do all sorts of stuff to vehicles. They were able to remotely control a Jeep Grand Cherokee. It was on the road, so they've done some really awesome attacks. Explosive hacking, Rick enemies, grenade. Well, that's probably totally doable because the people who are probably making grenades or remotely explodable, it's probably a super, super simple receiver, right? You're not gonna spend years of research trying to make a really secure receiver that only explodes when you send, you know, a very particular thing. You're probably just gonna take some off-the-shelf component that you bought online, hook it up, and now you have a remote transmitter for it. And if I know of what all the common, you know, ubiquitous receivers and transmitters are, I'm just gonna brute force and send all of those, and I'll probably set off a lot of sort of off-the-shelf transceivers. They're not

meant for security. They're meant for, you know, remotely turning on your light bulb, but someone is building a makeshift bomb. They're gonna be using that kind of stuff as well, most likely. Okay, you could definitely trick a device into believing it has more current capability than it actually does. Realistically, there's gonna be some sort of breaker that will prevent something like an explosion. I mean, generally, when you have too much current, what you're gonna do is you're just gonna create a fuse. It will be a very, very, very tiny explosion, nothing you would even notice, right? You might see just a tiny bit of smoke. I can't think of any mechanism that would actually allow you to act physically, cause something to explode. You would need some sort of actual explosive material in there. The most you'd really see from something like this is a big spark, and then that's it. Anything else would really just self-extinguish because they're designed to [Music]. Okay, they're looking at someone's camera. I see intrusion detected. All right, they

have an ID and choose your detection system. That's cool, yeah. There's definitely a tech that can trigger people's camera and microphone without them knowing. Most modern computers will have a physical light that's tied to the camera, so you know that it's enabled. But it's kind of interesting because there are methods of attacks where you can rewrite the firmware within the camera itself. Because the light isn't just 100% tied to the camera being enabled, it's actually tied to a microcontroller. And that microcontroller enables the camera and simultaneously turns on the LED. So if you can rewrite the firmware of that microcontroller, you can then say, you know what, I want you to enable the camera, but do not turn on the LED. There's some pretty cool websites where you can actually see all of these msconfig online cameras, all these IP cameras that are out of people's homes, outside monitoring traffic, all sorts of things. You can basically just go through hundreds and thousands of these cameras to see what's going on. You can just

scroll and scroll and scroll and say, Oh, that looks interesting, click on it and expand and see, and just jump right into that live view. If you are concerned about your camera being hacked, I mean, the likelihood is very low, but there's a very easy solution, and it's just to cover it up. There, the attacks that are most likely to hit everyday users of these technologies are going to be things like malware, things that encrypt files on your computer because you opened an email and clicked the link that you shouldn't have, or downloaded something from an email you shouldn't know. So, I'd say, in general, things to really protect yourself are: don't open untrusted links, try to be cognizant and cautious when you're opening emails that are requesting you to do something or to download a file or open a file. I think the biggest thing that I see that consumers can be hit with is just the fact they're using the same password on multiple websites. So, if you're actually using the same password in multiple places, I definitely suggest

just get a password manager. You only have to remember one password, and from then on, you can have strong, randomized passwords on every website you use. And if one of those gets hacked for any reason, they can't log into any of your other accounts because all of your accounts have different passwords. Those are the top things that will really protect any most consumers. The interesting and fascinating and terrifying thing is that technology is really just invading everything. Even if you don't want to use technology, if you buy a car or you buy a phone, it's gonna have so much technology built in that you've never even asked for. It has a huge impact, and I think a positive impact on our lives, but there is always a dark side to it. I've heard of watchdogs, and I've heard that it's hacking-related. While granted a lot of this isn't realistic simply just due to how fast he's able to do it, a lot of this is absolutely possible. So, it was very cool, and it seems pretty fun. I think I'd be having to try to take

give it a shot. When I was 19, I got in a bit of trouble after releasing the virus. I was raided by the Secret Service. I got in trouble for computer hacking, and then I couldn't touch the computer for a couple of years. Oh my god, are you serious? Yeah. [Music]

Hacker REACTS to Watch Dogs | Experts React

Enjoy a bunch of great gaming content made by people who love video games!

For all brand deals requests, please fill out this form : https://forms.monday.com/forms/159f9f9aff5bd72f69375463381a13e1?r=use1


Gamology

보안 연구원인 새미 캄카르가 비디오 게임 와치독스에 묘사된 다양한 해킹 기법에 대해 설명합니다.

그는 자동차 해킹이 가능하다고 설명하며 카메라 해킹 문제에 대한 해결책을 제시합니다.

또한 캄카르는 고정 코드를 악용하여 차고와 신호등을 잠금 해제하는 방법을 설명하며 신호등을 제어하는 산업 시스템의 동기화에 대해 강조합니다.

차고문 리모콘은 무선 주파수(RF)를 사용하여 수신기와 통신하여 게이트의 모터를 작동시킵니다.

수신기는 일반적으로 비밀번호와 같은 고정 코드를 찾아 접근 권한을 부여합니다.

여러 장치에 적은 수의 코드를 사용하면 보안 취약점이 발생할 수 있으므로 강력한 무작위 비밀번호를 사용하는 것이 필수적입니다.

잠재적인 사이버 보안 위협과 자동차 해킹

적외선 센서는 긴급 차량 신호를 모방하여 신호등을 조작하는 데 사용되었습니다.

Own Star 장치는 인터넷에 연결된 차량을 장악하여 차량 잠금 해제 및 시동과 같은 기능을 원격으로 제어할 수 있는 기능을 시연했습니다.

또한 마이크로컨트롤러의 펌웨어를 재작성하여 컴퓨터 카메라를 해킹하는 방법도 있어 LED 조명을 트리거하지 않고도 카메라를 작동시킬 수 있는 가능성이 있습니다.

기술 해킹으로부터 자신을 보호하는 방법

카메라가 해킹당할 가능성은 낮지만, 이를 은폐하는 것은 간단한 해결책입니다.

일반 사용자를 대상으로 하는 일반적인 공격에는 신뢰할 수 없는 링크를 통한 멀웨어와 여러 웹사이트에서 동일한 비밀번호 사용이 포함됩니다.

수신기와 송신기에 기성품 부품을 사용하면 차량 원격 제어와 폭발물 해킹도 가능합니다.

이 연사는 19세에 바이러스를 유포한 혐의로 문제가 되어 비밀경호국에 의해 급습을 당했고, 그 후 몇 년 동안 컴퓨터를 만지지 못했습니다.

보안 장치가 해로운 목적으로 오용될 가능성에 대해 이야기하지만, 큰 폭발을 일으킬 가능성은 낮게 평가합니다.

연사는 대부분의 사고는 작은 불꽃이나 연기로 끝날 것이며, 이러한 장치는 자체 소화되도록 설계되어 있다고 강조합니다.