3 ms·

> But your neighbour plugged into a life-support machine at the local hospital does, because your machine could be used as a staging point for further attacks.

by cesarb 3y ago

> But your neighbour plugged into a life-support machine at the local hospital does, because your machine could be used as a staging point for further attacks. Unless your machine is in a particularly privileged position (for instance, it's plugged into the hospital non-public network), there's nothing special the attacker can do with your machine that they couldn't do with their own machines. So this is just fear-mongering.

nonrandomstring 3y ago
> there's nothing special the attacker can do with your machine that they couldn't do with their own machines. Any obtainable CPU power, memory, IP address or storage is an asset, so they could: Run processes such as password cracking on your machine while still having their own to use. Store sensitive or illegal data encrypted on your disks as a dropbox for themselves or others. Launch recon scans or attacks from your device, using your IP address while staying hidden and leading the authorities back to you. Set up your machine as a proxy for routing other traffic, leveraging your geographical location. Set up your machine as a node in a distributed compute farm for mining, cracking or other tasks. Sell access to your assets to other bad hackers. ... we could literally go on for hours with ideas about how using *your computer instead of their own* gives an advantage and thus presents a motive. > So this is just fear-mongering. Two points I'll make: Maybe you *should* be afraid of all the ways contemporary cybersecurity is an absolute shitshow. Fear is not the best motive, but *is* a motive for making changes. There's a reason we have that part of our brains and the emotion it provides. I'm sorry you feel worried about what I said. Even though the threats are real I don't believe in scaring people. I think a better way is through education and empowerment. That's why I produce work like the Cybershow [0], where we try to make cybersecurity a little bit fun and irreverent. Come and listen to some shows if you care about computer security for yourself and people you love. [0] https://cybershow.uk https://cybershow.uk

by cesarb 3y ago

nonrandomstring 3y ago

> there's nothing special the attacker can do with your machine that they couldn't do with their own machines. Any obtainable CPU power, memory, IP address or storage is an asset, so they could: Run processes such as password cracking on your machine while still having their own to use. Store sensitive or illegal data encrypted on your disks as a dropbox for themselves or others. Launch recon scans or attacks from your device, using your IP address while staying hidden and leading the authorities back to you. Set up your machine as a proxy for routing other traffic, leveraging your geographical location. Set up your machine as a node in a distributed compute farm for mining, cracking or other tasks. Sell access to your assets to other bad hackers. ... we could literally go on for hours with ideas about how using *your computer instead of their own* gives an advantage and thus presents a motive. > So this is just fear-mongering. Two points I'll make: Maybe you *should* be afraid of all the ways contemporary cybersecurity is an absolute shitshow. Fear is not the best motive, but *is* a motive for making changes. There's a reason we have that part of our brains and the emotion it provides. I'm sorry you feel worried about what I said. Even though the threats are real I don't believe in scaring people. I think a better way is through education and empowerment. That's why I produce work like the Cybershow [0], where we try to make cybersecurity a little bit fun and irreverent. Come and listen to some shows if you care about computer security for yourself and people you love. [0] https://cybershow.uk https://cybershow.uk