Re:North Korea's 6000-man army of hackers come into their own
by ben_jones on Monday October 16, 2017 @02:26AM
(#15481263)
Honest question, can you learn netsec etc. without many thousands of hours of "fooling around" on the internet? Participating in online discussion boards, reading postmortems and documentation, listening to conference speakers? How does the military train it? I have trouble believing you can develop these skillsets without carte blanche to the internet. Are they importing talent from surrounding regions? Do they just run "dumb" hacking tools made by others against low hanging fruit?
[ Parent
| on HN ]
Re:North Korea's 6000-man army of hackers come into their own
by Jach on Monday October 16, 2017 @02:36AM
(#15481302)
I suspect a lot of important personnel in NK (including some programmers and some university students; that set probably overlaps a lot) have access to the internet, or at least most of it, even if monitored. So don't assume that they're not learning in isolation. But even if so, there are common principles you could study from books and test systems. (They'd be smart to apply their people to securing their own systems as well with red/blue teams...) Plus if you know your target, you can dedicate your time to finding ways to attack that target, you don't need to keep up to date with the latest from e.g. tech talks.
Re:North Korea's 6000-man army of hackers come into their own
by ringaroundthetx on Monday October 16, 2017 @02:31AM
(#15481282)
sure you can learn it without all that. hacking is just a puzzle, with the most intuitive use being the GUI presented, but needing to learning how to look at the puzzle.
concepts of privilege escalation are simple, and most organizations are vulnerable with low hanging fruit.