• @Lord_ToRA@lemmy.world
    link
    fedilink
    English
    474 months ago

    Holy shit. People have legit asked me this question. Although, I’m an IT professional and they didn’t jump to that question just from building a PC.

    • Ephera
      link
      fedilink
      English
      184 months ago

      When I got asked that once, I told them they should bring me their laptop. 10 minutes tops and I’ll have access to their files. They really didn’t know, if I was bluffing or not.

      (I wasn’t. The average laptop is genuinely that badly secured.)

      • @JDubbleu@programming.dev
        link
        fedilink
        94 months ago

        Almost every personal computer that isn’t a MacBook is poorly secured due to the lack of filesystem encryption as a default. No one encrypts their data at rest, and as such you just have to pull their drive and read it with another computer. Hell, I don’t encrypt my entire file system despite being aware of this because of the inconvenience of added boot time, but everything that matters is encrypted and backed up across multiple devices.

        The best thing anyone can do is keep the amount of critical, digital data they have to a minimum, keep that data encrypted and backed up, and use a password manager properly. That alone makes it exceedingly unlikely you will ever be a victim of cybercrime solely because you’re more of a pain in the ass to compromise than 99.9% of the world.

        I personally have almost 10TB of data between all my systems, but of that maybe 10 MB is actually valuable to anyone but me.

        • bitwolf
          link
          fedilink
          44 months ago

          Windows encrypts by default now. I don’t know if any Linux distros do by default but it was certainly option for me to enable it at install time.

        • @PlatinumSf
          link
          34 months ago

          Pretty sure bitlocker is enabled by default since Windows 11 rolled, to my understanding it’s part of the reason they now require Microsoft accounts for device on boarding.

      • @cm0002@lemmy.world
        link
        fedilink
        54 months ago

        Lol Windows user password is the digital equivalent of a pad lock, it only keeps honest people honest lmfaoo

        • @LifeInMultipleChoice@lemmy.world
          link
          fedilink
          2
          edit-2
          4 months ago

          Local accounts, yes. How are you bypassing Microsoft accounts with 2 factor authentication enabled? Unix and Mac passwords were the same for local accounts before.

          Easiest way right now would be to acquire a username password to get into their phone provider, say Verizon. Then log into their Verizon account and move their phone number to a new phone. (this will only require knowledge of their security questions, also a phone not purchased by a card or registered to you if you don’t want it traceable)

          Once done then you can reset the password using the unknown password to their Microsoft account using the 2 factor that sends to their phone number…maybe.

          Especially on windows 11 we don’t stand much of a chance getting passed.

          Likely easier to pick up the password book they wrote all of their passwords down in and accessing them. (Performed by most people over 50 I know)

          Edit: also, you will find their Facebook password written there haha

          • @cm0002@lemmy.world
            link
            fedilink
            -14 months ago

            Assuming bitlocker isn’t enabled (Which it probably isn’t since it’s still not default yet AFAIK) boot Linux live USB > access files under user folder on disk

            • @LifeInMultipleChoice@lemmy.world
              link
              fedilink
              2
              edit-2
              4 months ago

              Bitlocker is enabled by default, requiring tpm. Which internal tpm is used by most all devices. Also you won’t get into any commercial devices as the bios will be locked by password, so booting by USB will not happen.

              Source: Microsoft, “On supported devices running Windows 10 or newer BitLocker will automatically be turned on the first time you sign into a personal Microsoft account (such as @outlook.com or @hotmail.com) or your work or school account.”

      • @MonkderZweite@feddit.ch
        link
        fedilink
        14 months ago

        There’s literally an open source tool suite you can flash on a thumb drive, stick it in a sleeping notebook and get access to it. Sadly don’t find it anymore.

      • @rdyoung@lemmy.world
        link
        fedilink
        14 months ago

        Do you know the wonder that is konboot? It works on every version of windows with old school offline accounts, it even works/worked on Linux and it leaves no trace.

        • Ephera
          link
          fedilink
          English
          34 months ago

          I had not heard of it before. I would have just booted a Linux Live USB. So long as there’s no disk encryption, you can just access the hard drive in the laptop like any other data disk.

          Or in other words, I’m actually not even trained/informed about hacking. I just accidentally acquired this knowledge by installing Linux at some point. 🙃

        • whoareu
          link
          fedilink
          74 months ago

          YOu mean I have been hacking instagram for a year O.o

      • @Lord_ToRA@lemmy.world
        link
        fedilink
        English
        44 months ago

        I can guarantee you that someone in the Facebook HQ has their password on a sticky note. I bet they even think having it stuck under their keyboard means it’s hidden.

  • AwkwardLookMonkeyPuppet
    link
    fedilink
    English
    16
    edit-2
    4 months ago

    Most of us older computer nerds and coders certainly tried to hack Facebook back in the 00’s. To answer Grandma’s question, no, we cannot.

    • @cbarrick@lemmy.world
      link
      fedilink
      English
      244 months ago

      Back in undergrad, before Facebook went HTTPS only, I would setup “free wifi” and steal people’s cookies for shits and giggles. Use the cookies to authenticate with FB and send random messages to people.

      Looking back, I probably shouldn’t have been doing that. Definitely illegal.

      • AwkwardLookMonkeyPuppet
        link
        fedilink
        English
        84 months ago

        They were just barely starting to get serious about legislating cyber security, so you were only maybe breaking some laws. I remember in the 90’s it was a lawless land. There were no laws against hacking, or at least none that anyone understood, and most sites had terrible security. I gained access to someone’s Hotmail once just by trying “anon/anon” as a user/pass combo. I also used to gain access to e-commerce customer databases just by googling certain SQL strings. I’d poke around and then send the webmaster an email letting them know their site was vulnerable.

        • @Sprokes@jlai.lu
          link
          fedilink
          54 months ago

          There isn’t a law against hacking but I am sure there are other applicable laws when you do harm while hacking.

          • @chicken@lemmy.dbzer0.com
            link
            fedilink
            34 months ago

            There is, it’s called CFAA and is absurdly broad. Pretty much any time you

            knowingly accessed a computer without authorization

            it’s technically illegal.

            • kase
              link
              fedilink
              24 months ago

              So you’re telling me every time I stole my sister’s phone and took goofy selfies with it?? Straight to jail???

                • kase
                  link
                  fedilink
                  24 months ago

                  (⁠ ⁠⚈̥̥̥̥̥́⁠⌢⁠⚈̥̥̥̥̥̀⁠)

              • @chicken@lemmy.dbzer0.com
                link
                fedilink
                1
                edit-2
                4 months ago

                Seems that way yeah. Naturally this sort of law is selectively enforced to nab whoever they have a problem with though so probably your sister doesn’t have the clout to bring you to justice.

      • @SolarMech@slrpnk.net
        link
        fedilink
        -14 months ago

        Looking back, I probably shouldn’t have been doing that. Definitely illegal.

        You know that stuff you post on lemmy is probably on databases everywhere for like, forever, right?

        • @gaael@lemmy.world
          link
          fedilink
          24 months ago

          Who’s gonna press charges for the “hey mom, today I ate my poo” message they sent 10 years ago ?

  • @UnculturedSwine@lemmy.world
    link
    fedilink
    64 months ago

    Had a random guy that I spoke to at a bar ask me if I could hack a university to forge a degree for him when I told him I work in IT. Even if I could do something like that, it seems like a really risky and unethical thing to do for some rando at a bar.

    • Captain Aggravated
      link
      fedilink
      English
      34 months ago

      I could probably do that in LibreOffice. Like, how hard is it to print out a thing that says “BACHELOR’S OF SCIENCE” in that stupid old school font.

    • @datelmd5sum@lemmy.world
      link
      fedilink
      14 months ago

      I once had the knowledge how you could hack a government system to get free fishing licenses. Seemed like a high risk / low reward type of deal though.

  • LazaroFilm
    link
    fedilink
    English
    64 months ago

    So you know how to crochet? Can you make me a bulletproof vest?