Press "Enter" to skip to content

La necesidad de apoyar el hacking ético | Enrique Serrano | TEDxYouth@PaseodelPrado


in my day to day I see how big

business positions of responsibility

related to cybersecurity

they are occupied by people who

it just takes a long time

company but does not have the experience

necessary for these positions because

when the experience does not mean

how many years have you been without a payroll or

how many years has been working for me

I mean real experience knowing the

cybersecurity from the bottom

of the matter to have dealt with her

have even experienced some fright

or be aware that this happens

on the other hand also in the field

staff I see how there are many dangers

related to technology that does not

are being solved and worse still not

they’re just not being solved but

that we even accept that they happen and not

we look for a solution as a solution to

these two points

let’s say it would be he what

thank you we define as hackers but

clear hackers that according to salem that

as they leave the universities or

from very young who are learning and

you know this from the beginning with that

experience that I mean that that

real experience in my case

I started about ten or eleven years ago

when he was around 14 and truth

is that I started because I liked and

because I like to investigate and over or

less than a little after starting already

I went into a hacker community that

what we do in this community

every week we meet and

we are dealing with very topical issues

related to hacking

this way we are weekly

practically updated with the

latest news

of course not only everything is beautiful

in the world from here when you start

because there are also parts that are not

so nice in the case of my case

I started with computers not not so much

phones and such and starting with this

Well, I had to ask my mother

enough times that he will renew it

because you break your computer

they end up pulling yourself out when

you start are many things that can

happen if something does not interest you to start

in this world no but good luckily

my environment and the people that I have to my

around are aware that the

cybersecurity is important and you have to

be protected not threats are

always there and I always say that it is not

more than in real life

you go down the street and there are certain

threats that may arise but

luckily we also have some rules

and the authorities that make these

standards are met but then what

occurs online what standards there is a line or

what authorities are there well I tell them

when I started that a while ago

long in the law in this country allowed

hack in quotes practically what

that you would like since you did not know how

judge this for example educational a

website and activities the panel

control could modify the page

see customer data cards

as much credit could say that

would be to get in the privacy of

someone or private property since

it’s a web page but I really do not know

it knows what to do

that was only if you get caught therefore

in 2011 approximately one was approved

law in which hackers are already

they knew but they knew each other yes

as a bad figure to do evil and

since this year

if your daughter that abbas was worse than attacking

someone at gunpoint down the street

but more and not just I say

hacked the web page a server one

database but if you tried

plunder although they did not get it anymore

was committing a crime was yes

these because this law is still in force

So what do we do if the end is

having a very large gap one

temporary breach of hackers that

we started when I started and those who

they started as of 2011 you can not

learn at home to plunder no longer

you can get a company with 23 24

years after finishing the race or any

course and pretend to be asked for six or

seven years of real experience because

you can not physically or legally

experience it

well what happens this also what

bought many times with chess or

with great mathematicians the great

philosophers of history that from the

four years say I did not start or the

pianists and started playing the piano with

four years

today I started playing chess with six

years now this can not be lived with

in relation to cybersecurity

we’re losing I’m sure a lot

talent that today could be

protecting us in this very moment

they would be one more figure in society

that’s why I think it’s very important

differentiate between hackers and

cybercriminals

the hackers are good the two are

great experts in cybersecurity

but the prince

the jaqueses use it to do the

well they usually have one we usually have a

curiosity about the challenges to overcome us

forever

and a little bit further and instead the

cybercriminals what they do

simply for your own benefit

They are usually cheap but

good at the end of the day to do evil

then I will give an example so that

we feel all today here imagine

that today for example even in this

same moment to create a social network

there hacked your computer

home the answer that all good that

almost everyone tells me it ‘s good

total

Who is going to want to plunder me or me

I have nothing to hide, not if a

famous person I’m not a politician that

because they are going to want to leave

therefore I do not care and I do not

I worry so much about this well

thought is an error because it is a

error because many times when we

touch us we are not the end of this

attack but we are simply a

medium for an end that perhaps neither

we imagine that it exists or that it is

possible for example have hacked a network

of a social network could be done

sell followers could sell

comments there is a lot of business because

apparently they do leave here it does not happen

nothing but when they go to a million like

you you who you are anonymous

It means that there are a million

anonymous people

these contents are data of people who

then they can be used to harass

other people to attack other

Business

and there is still a message that only

hear that it ‘s good

in the case that they do this I am not

conscious or do not know it does not happen either

but it happens not because

authorities when they arrive they call

our door

that’s why this is on a personal level what

wants to extrapolate what is to be seen

with me and you imagine what happens with

big companies or if they hacked a

server with strategic documents

a great company or a government

this is the order of the day and then

already good finally the banks but

maybe it’s even better not to comment it is not for

a bank

why in all this is not simply

that he tells you that today also the

market gives me the reason

currently the posts in

cybersecurity every time they are

more requested and more and more

people that form

why do they realize that there is a niche

no but of course how can you learn

cybersecurity

since I was young because I have that vocation

here we have a lack or a lack of

of strategy how to do it and to

final is a problem no and what

solutions may have looked at I’m going to

tell one that is working I think

that pretty well is quite novel

they call the ctf they capture the flag or

capture the flag in Spanish that

are the challenges in which experts in

security we prepare an environment as

like real life and on page

web a server and we leave inside a

message the flag should be a string

of text where you post a message is the one with

the password

check this server and find this

file does not upload to a computer and 31

points and in this that is done then

usually use all the

areas of cybersecurity that in

that time are important because

passwords of social networks for

create computers servers bases of

data and that after all this that

more score has the winner of the

game because this for example has

worked very well with the selection

Spanish hacker to which my

colleagues and I have selected to

here and for Spain and we have created this

European champions year has not been

posted many sites but I want that

you know that right now we are champions

from jaca europe

but this is a reality and it is good

this means that it is working not

I ‘ve done it in this european championship

was used the cetes were used for

measure the winners and what happens clear

in this way if we could get this

in the schools in the families is not

way to challenge people

we could take out this creativity and

imagination that it takes to be

hacker always hacker is a person who

look beyond what you want to look for more

who has a need to see more

there, not what I say if we put

other colleges elsewhere

of our smaller society

we would have a figure recognized as

such as hacker that would be the one

even today you could not be

protecting the same

Well, right now we have a saying

of us, I am counting and simply

we have to guide him there are many

initiatives in many groups of hackers

to be phenomenal that arise but we

is to guide it because we have left

decide if we want to continue being

always

behind the attacks or if we want that

distance that always between attack and

solution make it be minimized or

even in some occasions to try

that these attacks do not even exist

why it brings me a demonstration to

today to see on screen so that

there the importance of having in

cybersecurity since now

same

let’s say there are certain attacks or what

over the years certain

attacks that have been for years

exploited and what the worst of all is

that maybe we never know that he used them

to do evil or maybe in this

the same instant there is still a

vulnerability or a computer failure

that is allowing them to access

to our cameras that I’m reading

our private messages to our

emails but good what

yes we can know right now is what

I know what is going to be shown on the screen

in the part on the left

you have a column that called

devices where the

physical address of our

phones and on the right side is the

the wifi network that they are looking for every

phone that appears on the screen

raise your hand please and if they

you will see who has the same wifi

activated but without having it connected to

No network checked please because

and many hands go up

there many times that is many times what

what happens is that although the phone

be with wifi put and not be

connected to any network

he is talking is saying i have

a list of remembered the one of my house the

from the office and I want to look for them because

if I understand is that he is that the

user wants to use wifi

therefore our phones is

showing all networks right now

that they have remembered and those that do

are eager to connect eagerly

since when we connect the phone

mobile wifi starts updating and

There’s a lot more activity going on than

pass

as you see in the device column

course some x for privacy because

these identifiers are unique

each network card of our

devices but the wifi network

let’s say it’s the one that had

remember yourself that among the public

what is the next step is this because

well a cybercriminal and a hacker

could be right now these

networks and detecting which of them are

those without password

it’s usually coffee shops

in which good for free wifi

you connected the whole world six days the

people start to know that this is not

sure but they think more about the fact

that they can be spying on that

moment do not think about this when

it will still move activated looking

a network without a password

a cybercriminal can create that

same network in addition with a few steps very

simple and your mobile within the

inside your pocket I would be

connecting to it is no longer necessary or

that stings in a trap or that commits

some mistake

the mobile already in the pocket would be

connecting to this network that the

cyberattacker creates and what happens with this

it happens to us that the scheme is the

following

this is you this is the network that has

created fake internet that happens that

all the communication that goes internet

you are seeing them cybercriminal

saving systems technical details

encryption in that I’m not going to get in but

yes you will be seeing part

information that other devices

they are transmitting internet

I insist from your pocket

today not today we are not going to do the

demonstration of hacking someone in

direct since you can not but let’s go the

next step I just commented and

for that reason to finish simply

tell you that this type of attack

many people maybe because of ignorance or

for lack of technological education or

in computer security

always turned on this type of attacks

it would have been avoided simply

disabling the judgment of our

nation phones as simple as

Press a button

would make it possible that maybe we are

spying on all the traffic that comes out of

our devices but no more than

this was a little bit further and the

question is how many simple actions

like this one we are avoiding our day

to day and they do that maybe even in

this moment we are being looted

thank you very much

3

”

Be First to Comment

Leave a Reply

Your email address will not be published. Required fields are marked *