Linus reveals the cause of Linus Media Group's YouTube hacks

[WYP]

YouTube needs to harden their security against these common hacks.



Read more about Linus detailing the cause of yesterday's YouTube account hack.

 

[meuvoy]

It's funny how this kind of thing has been going on for years, but it takes a big tech channel to literally shame google about it, for them to do anything about the issue.

 

[AlienALX]

How about his staff don't open dodgy PDFs?

I mean FFS, even *I* don't do that, let alone would I at a work place.

 

[meuvoy]

How about his staff don't open dodgy PDFs?

I mean FFS, even *I* don't do that, let alone would I at a work place.

That would be the same as requiring all the people who bought an NVIDIA RTX card with the 12VHPWR coenctor to be able to tell that it wasn't fully plugged in and never cause a fire hazard.

It doesn't matter how much you focus on teaching people to not poke the crack in the wall, someone will eventually do it and the wall will break and the water will come flooding in. The correct way to handle these things is to just repair the wall, close the gap or whatever. If you don't, it's only a matter of time untill things go south.

And from the video that they published earlier, it looks like they wrote a very convincing e-mail with no spelling errors and that receiving requests like these is a common thing with their sponsors, so even a very informed person could still end up doing it.

I for one receive PDF files multipe times each day on my e-mail from people who work with me, if one of them infected one of these PDFs or someone else tried to copy the common e-mails I receive daily, unless I caught the different e-mail adress I would certainly fall for it. Given, it's kinda hard for me not to notice an odd e-mail adress because it's not common that my colleagues change their e-mail adresses and a new one would not come with the same contact name, but it could still happen depending, for example on my state of mind at that time or if one of my colleagues recently warned me of an e-mail change or had an issue with his e-mail account, I could literally be expecting a different e-mail to arive.

 

[Warchild]

I think people forget how effin good some mails are, at replicating legit and genuine companies or contact points.

A colleague internally working in security sent a "test" mail to all of us and copied GSMA (https://www.gsma.com/)

He did it so perfect that 40% of staff followed the link. It was a harmless redirect but still provided him with a counter for how many fell for this phising.

 

[AlienALX]

I agree it is very clever and well done. However, even *I* won't open a PDF sent in the mail to me. Let alone if I were in that position. Then again, maybe I wouldn't care as much lol.

 

[Dicehunter]

How about his staff don't open dodgy PDFs?

I mean FFS, even *I* don't do that, let alone would I at a work place.

Have you seen LTT's staff ? Most look like they just emerged from the backwoods of Appalachia, Common sense is the last thing I'd expect any of them to practise. I'm truly amazed that company hasn't folded in on itself.

 

[CalVic]

How about his staff don't open dodgy PDFs?

I mean FFS, even *I* don't do that, let alone would I at a work place.

Please do not under estimate the capability to which the lengths some threat actors will go too.



I've conducted this line of work, for years ethically testing. 100% success rate.

 

[Dawelio]

I agree it is very clever and well done. However, even *I* won't open a PDF sent in the mail to me. Let alone if I were in that position. Then again, maybe I wouldn't care as much lol.

That's just you though, you're one out of 8 billion people.

 

[AlienALX]

That's just you though, you're one out of 8 billion people.

I'm a retired IT tech. I've been retired for 15 years.

I wouldn't open a dodgy looking file. That's why I've never had memz or many other viruses.

If his staff are not techies? Fine. then he needs to train them. Or at least teach them to be street smart on the internet.

And yes, lots of people get hacked, scammed etc. But that's for a reasonz they ain't got a high IQ. They don't work in Linus's marketing team.

 

[Dawelio]

I'm a retired IT tech. I've been retired for 15 years.

I wouldn't open a dodgy looking file. That's why I've never had memz or many other viruses.

If his staff are not techies? Fine. then he needs to train them. Or at least teach them to be street smart on the internet.

And yes, lots of people get hacked, scammed etc. But that's for a reasonz they ain't got a high IQ. They don't work in Linus's marketing team.

Again, you're one out of 8 billion people in this world...

And that last sentence, is basically you're calling everyone who get hacked, scammed etc dumb. Since according to your sentence, they get hacked and scammed due to not having an high IQ.

Sometimes I wonder if you just write on here without thinking before you do. Or if you just simply don't give the slightest of what it is that you're actually writing at times. Despite of the quote in your signature.

I'm out of this discussion now.

 

[AlienALX]

Again, you're one out of 8 billion people in this world...

And that last sentence, is basically you're calling everyone who get hacked, scammed etc dumb. Since according to your sentence, they get hacked and scammed due to not having an high IQ.

Sometimes I wonder if you just write on here without thinking before you do. Or if you just simply don't give the slightest of what it is that you're actually writing at times. Despite of the quote in your signature.

I'm out of this discussion now.

Dude, if you don't understand my viewpoint or what I am saying why do you engage? It seems to me you sometimes "rage read" my posts and get all peed off with them. When really you don't know me, have never met me and just don't seem to understand.

One of the first things I learned on a computer in 1996 when I first got the internet was don't open suspicious files. Back then there was a virus called Chernobyl that wiped your BIOS chip. It's the same sort of common sense you learn about crossing the road. You need at least some sort of wits about you fella. Or driving a car.

That is what you fail to understand. I think very well and very quickly.

BTW dude let me explain the line you seemed to have taken a issue with.

Have you seen any of those shows where people hand over money to scammers? and even when they are told outright they have been scammed they keep chasing their losses and giving them more money refusing to believe the truth?

Or the guy on the TV who gets sent an email saying they have cam footage of him masturbating and he pays a ransom.

It just comes down to a lack of intelligence and awareness dude. I get those emails all of the time. Some are quite scary, as they seem to have information about you. What they fail to understand is I don't have a camera LOL. So it takes a bit of common sense.

I get several emails a day telling me my Prime account has been hacked and I need to sign in again. With guess what? a PDF. LOL. I know for 100% that Amazon do not send emails like that OR make those phone calls. I know that because I learned, fast.

The internet is a shoddy place. With all sorts of s**t and scum lurking around. So you need to have basic commons sense and a little bit of knowledge.

 

[Warchild]

Dude, if you don't understand my viewpoint or what I am saying why do you engage? It seems to me you sometimes "rage read" my posts and get all peed off with them. When really you don't know me, have never met me and just don't seem to understand.

One of the first things I learned on a computer in 1996 when I first got the internet was don't open suspicious files. Back then there was a virus called Chernobyl that wiped your BIOS chip. It's the same sort of common sense you learn about crossing the road. You need at least some sort of wits about you fella. Or driving a car.

That is what you fail to understand. I think very well and very quickly.

BTW dude let me explain the line you seemed to have taken a issue with.

Have you seen any of those shows where people hand over money to scammers? and even when they are told outright they have been scammed they keep chasing their losses and giving them more money refusing to believe the truth?

Or the guy on the TV who gets sent an email saying they have cam footage of him masturbating and he pays a ransom.

It just comes down to a lack of intelligence and awareness dude. I get those emails all of the time. Some are quite scary, as they seem to have information about you. What they fail to understand is I don't have a camera LOL. So it takes a bit of common sense.

I get several emails a day telling me my Prime account has been hacked and I need to sign in again. With guess what? a PDF. LOL. I know for 100% that Amazon do not send emails like that OR make those phone calls. I know that because I learned, fast.

The internet is a shoddy place. With all sorts of s**t and scum lurking around. So you need to have basic commons sense and a little bit of knowledge.

The reason why Dawelio has issues with your post is

1. English is not his first language
2. Your use of the English language is even hard for me to read sometimes, and also you don't type in a neutral way. You come across as hostile or aggressive even if its not intended.

Put into perspective that text doesn't have emotion, people reading your posts will take it harshly.

But that's for a reasonz they ain't got a high IQ.

This was hard for me to read considering the bad sentencing. Ain't is bad English and usually reserved for informal speech. Not text. (not sure if it was intentional) So imagine someone (not British) trying to take away points you are making, even if valid, when you type like that. This is not a dig at you, but just making a point why you find replies that are hostile. Its because you come across that way even if you don't intend to.



Also OC3D has three threads on the same topic. The news articles could have at least been amended or updated with new information as opposed to a new piece.

 

[NeverBackDown]

Also OC3D has three threads on the same topic. The news articles could have at least been amended or updated with new information as opposed to a new piece.

Agreed. It's just become a cluster F of same crap different thread.

 

[AlienALX]

The reason why Dawelio has issues with your post is

1. English is not his first language
2. Your use of the English language is even hard for me to read sometimes, and also you don't type in a neutral way. You come across as hostile or aggressive even if its not intended.

Put into perspective that text doesn't have emotion, people reading your posts will take it harshly.




This was hard for me to read considering the bad sentencing. Ain't is bad English and usually reserved for informal speech. Not text. (not sure if it was intentional) So imagine someone (not British) trying to take away points you are making, even if valid, when you type like that. This is not a dig at you, but just making a point why you find replies that are hostile. Its because you come across that way even if you don't intend to.



Also OC3D has three threads on the same topic. The news articles could have at least been amended or updated with new information as opposed to a new piece.

OK man fair points, and taken.

BTW the bit where I said Reasonz etc I was just being silly and deliberately trying to sound stupid

I think the hardest part of language to grasp is sarcasm tbh.