New "Hacker" Movies (to be released, or new this year)

[MiracleGrwProxy]

Ok. WarGames was a movie many early attendees went to see before Defcon 1. Some parallels can be drawn between it and Defcon.
What is the name of the conference? DEFCON
What were the first two cities targetted with missle strikes? Las Vegas and Seattle.
What is a central "skill" found in the main character? "Hacking"

Sooo....
Comments about:
War Games 2: The Dead Game (2007)
The Net 2.0 (2006)
Can You Hack It? (2006/2007)

Expectations? Guesses? Opinions?

[converge]

Re: New "Hacker" Movies (to be released, or new this year)

War Games 2: The Dead Game (2007)

I'll believe it when I see it. Right now it kinda sounds like i-robot, except without the robots,.. from what I've read of the plot, it seems very scattered and leaning towards a Fugitive/US Marshalls kind of flick than a pioneering systems flick.

The Net 2.0 (2006)

.. will suck harder and longer than the first itteration. I know this because I read the plot. ITS THE SAME LOUSY PLOT AS THE FIRST ONE, except this time they don't have any noteable actors/actresses to fuck it up even more.

Can You Hack It? (2006/2007)

heh

[The Dark Tangent]

Re: New "Hacker" Movies (to be released, or new this year)

Believe it or not one of the goons is an 'adviser' to War Games 2. I'll have to get the scoop from him!

[astcell]

Re: New "Hacker" Movies (to be released, or new this year)

I will be interested to see what some of the advising was. I can see it now:

"No, no, no. Hackers are fatter than that."
"Trust me, he needs to be wearing a black t-shirt. There IS no other clothing color."
"PING is not a hack command."
"You can't put spaces in email addresses! Are you daft?!"
"'Teh' is not spelled 'The.' 'Teh' is not a typo."
"The faucet should not provide water, but Red Bull."
"Hackers can outhack feds, they just can't outrun them. Hell, they can't outrun a centipede with a limp."
"His first girlfriend needs to be Tubgirl."

[VAX_to_PBX]

Re: New "Hacker" Movies (to be released, or new this year)

WarGames may be interesting. I know everyone has been wanting realism in this genre of movie for a long time now. Let's just hope there is some fiction in the plot because no one wants to see a flick about yuppies in denial auditing code, and doing pen testing on the latest consumer software while trying not to come off as too suburban guerrilla.

'The Net' would suck no matter the casting because the plot is/was too shallow.

It'd be interesting to hear the complaint's if it turns out to be another movie with glamor pussy's quoting eighteenth century poetry, and wearing some of the most bad attempts at cyberpunk themed fashion ever to come out of the butt nut think tank's.

[Vyrus]

Re: New "Hacker" Movies (to be released, or new this year)

you know im pritty sure i SAW a documentry done on adrian lamo from that perspective, i think this might be a rehash ?!

[MiracleGrwProxy]

Re: New "Hacker" Movies (to be released, or new this year)

The Net 2.0 (2006)

In going with the opening character narroration:


The main character parents should have chosen another name. Then this film would be, "Hopeless."




Discussion about the film below here.





Aparrently they have a friendly computer virus that supported GUI-text and on-screen countdown timers.

To show how skilled she is, they show her, running an antivirus scanner from a CLI in windows?

She has one of those one-character-at-a-time key/password guessers. How much time on "the casting couch" in Hollywoodland would be required to get that program from their special effects people? We should get Hollywood special effects people to talk at Defcon and share their exploits with us.

In the film, they showed people on the street in burka, so why didn't she try a disguise?

Why did she re-use her phone after she knew it was compromised?

Hooray for suspension of the laws of Inertia with the gun-shot-to-blow-up-the-car while it was in motion. Shot while in motion, its forward momentum was not conserved.

Too many problems to mention them all here.

[VAX_to_PBX]

Re: New "Hacker" Movies (to be released, or new this year)

If I remember correctly I read a textbook year's back on broadcasting history that mentioned a bill past in, or around 1948(atomic bomb research, and the NSA model) that prevented potential malicious instructional material via licensed publisher's, and producer's. This could have something to do with "hacker movies" not having character's using realistic attacks like heap overflows to take over target networks, or CLI manipulation to escalate privileges.

A good example of this is hacker documentary's like you see on TLC. If they gave actual instructions in those to shows on how they "get root on a FTP server" they'd have a fleet of industry policy makers filing lawsuits like nobody's business.

I remember a case in 2000 where AOL was sued by a company for broadcasting a security series that exposed the method of hacking ATM machine's through default password's, and key sequences even though the information was available in public domain via the manufacturer's websites.

It helps to think non-linear before passing judgment on stuff by the way. Just blasting subjects on such a broad level kind of demeans any valid argument.

[TheCotMan]

Re: New "Hacker" Movies (to be released, or new this year)

If I remember correctly I read a textbook year's back on broadcasting history that mentioned a bill past in, or around 1948(atomic bomb research, and the NSA model) that prevented potential malicious instructional material via licensed publisher's, and producer's. This could have something to do with "hacker movies" not having character's using realistic attacks like heap overflows to take over target networks, or CLI manipulation to escalate privileges.

Citations for the bill?

A good example of this is hacker documentary's like you see on TLC. If they gave actual instructions in those to shows on how they "get root on a FTP server" they'd have a fleet of industry policy makers filing lawsuits like nobody's business.

Even though there are attempts to ensure lockpicking on TV and at the movies is displayed in such ways as to have something missing (usually the tension bar) there have been movies that included both the tension bar and the pick/rake and showed proper technique to exploit weakness of locks to being picked or raked.

As for TV, check out a recent episode of that OCC show (Orange County Choppers) on the discovery channel. When they locked their keys in their mobile trailer, they hired a locksmith to come out and let them in. The footage of the locksmith raking the keyhole added to the use of a tension wrench did show a proper technique.

On MythBusters, they had an episode that examined the effectiveness of shooting a lock to defeat lock security.

In the original , "The Net," there were attempts made to use invalid IP addresses, but there was a screenshot with a traceroute that did use and show valid IP addresses, including a reference to a single IP which was used by the "bad guy." It also included a sequence where the protagnosit purposefully infected a machine with a computer virus, in order to force a DoS to the machine.

In the movie the Matrix (part 2 or part 3) where "Trinity" rode the motorcycle off a roof to break into a shack in another building with a control room for an electrical power control facility. In this, wasn't there was a demontrated use of nmap within a CLI to search for an open port.

In WarGames (1983 pre 1984), there were demonstrations of WarDialing and the concept of shorting to ground telephone contacts on old phones.

Terminator 2 provided the concept of a brute force guessing tool with their "ATM Machine" sequence and an alarm control.

How many times have you seen movies where biometric systems are bypassed by chopping off a person's [arm|hand|finger], or the not-likley-to-be-effective extract-the-eyeball and put the eyeball on a pen to defeat a retnal scanner.

Additionally, in GATTACA, there were samples of methods to bypass more biometric systems and defeat drug tests.

It would seem that there are plenty of examples of movies providing demonstrations much closer to reality than what we see in most films.

I remember a case in 2000 where AOL was sued by a company for broadcasting a security series that exposed the method of hacking ATM machine's through default password's, and key sequences even though the information was available in public domain via the manufacturer's websites.

techniques to defeat ATM which included the "post deployment, installed facade" have been shown on news programs and demonstrated at part of investigative journalism in other shows on TV.

Additionally, anyone can sue anyone at any time for anything, but succes is another matter.Not having the case get thrown out or dismissed long before the case is heard, is also an issue.

If there really is a law to censor content in films that demonstrate exploits of systems and computer systems, it would seem that we have cited examples for exceptions, and not much in the way of coverage of correction, where these films are altered before being released on DVD, months or years later.

It helps to think non-linear before passing judgment on stuff by the way. Just blasting subjects on such a broad level kind of demeans any valid argument.

Where do you see things being blasted at a broad level? How about some specific citations of things being blasted at such a broad level?

[VAX_to_PBX]

Re: New "Hacker" Movies (to be released, or new this year)

Your guess is as good as mine on the subject of the bill. I've made it a habit to stay away from the justice system both intellectually, and physically.

I agree! Anyone can sue anyone at anytime. That's why America has so many suburbs, and ass holes. :P

You forgot 'Enemy of The State' where the glamor spooks used tension wrench, and pick combination's, and even electric picks(dildo picks.) Lazy locksmiths usually break double sided wafer lock's though. That's why they are standard on all modern vehicle's.

Biometric system's aren't even used in Norad, or the Pentagon. Both above DoD grade. They are basically for false consumer security, and security model research for a decade from now.

That tool that was used in T2 was a Mag Trunk A/N generator that was obsolete not 1 year after the Database query vulnerabilities where discovered, and the VPN's where updated(They actually used AX.25 Satcom around then.) What's funny is ~96% of the "old skool" hacker community still don't know how they work, or how to even make BUS traces on mag stripes. There where piles of them confiscated in the 80's by the NSA, and FED branches though.

We actually made a A/N generator for kicks out of PS2 part's last year(specially the power ribbon,) and presented it at a 'look back' kiosk at a ecommerce conference in Tokyo Japan. We also presented a 3D model closely resembling the more modern South Easter VPN grid of Bank of America, and issues concerning embedded windows XP implementations they're still using.

[TheCotMan]

Re: New "Hacker" Movies (to be released, or new this year)

Made in Germany, but shown in the US, and sold in the US on DVD:
"23 - Nichts ist so wie es scheint" (1998) http://www.imdb.com/title/tt0126765/
In addition to other samples of exploit, there was pseudo-code example of a trojan horse to steal passwords from users as they logged in.

(Code was on-screen, by the way.)

I think we have a thread here (with links to a story) where a biometric system was installed in a prison, to results that you might be able to predict.

[VAX_to_PBX]

Re: New "Hacker" Movies (to be released, or new this year)

I don't actually know anything, and most of the technical stuff I rant about in my post's is peter pan mystical security stuff that doesn't exit..literally(A/N Generator.)

I do know however pseudo code is pseudo code. It isn't even real instruction syntax, but you are correct about that. One of these day's you'll get that B.S. in Particle Physics you always wanted, and get that job in the base station out in the desert doing radio astronomy on dark matter, and stellar collisions that makes you touch your self.

[TheCotMan]

Re: New "Hacker" Movies (to be released, or new this year)

I don't actually know anything, and most of the technical stuff I rant about in my post's is peter pan mystical security stuff that doesn't exit..literally(A/N Generator.)

The concept of brute-force sequence guessing is still demonstrated, just like in war dialing from war games.

I do know however pseudo code is pseudo code. It isn't even real instruction syntax, but you are correct about that.

The concept was still evident in the sample trojan. An echo of "Username:" a string grab, and echo of "Password" with silent string grab, then a call to the real login program.

One of these day's you'll get that B.S. in Particle Physics you always wanted, and get that job in the base station out in the desert doing radio astronomy on dark matter, and stellar collisions that makes you touch your self.

Shhh! I thought the topic of what makes me touch myself was supposed to be secret.

You want another one, which is more recent? The HBO Special about vote hacking included a sample step-by-step of one person showing another person how to manually edit voteds on a central vot counting machine. Clicky-clicky.. typing-typing. (Physical access.)

It also included a description of how the card could be pre-stuffed with negative votes "for" one candidate and prestuffed with positive votes (same magnitude, with respect to offset from zero) for another candidate, as a method to stuff the votes in favor of one candidate, all while ensuring the total number of votes counted still added up without raising any flags.

[Z^2]

Re: New "Hacker" Movies (to be released, or new this year)

One of these day's you'll get that B.S. in Particle Physics you always wanted, and get that job in the base station out in the desert doing radio astronomy on dark matter, and stellar collisions that makes you touch your self.

I don't know about you, but Arecibo is much hotter

sweet control-room setup

[DaKahuna]

Re: New "Hacker" Movies (to be released, or new this year)

Biometric system's aren't even used in Norad, or the Pentagon. Both above DoD grade. They are basically for false consumer security, and security model research for a decade from now.

While this may have been true in the past, I think it is now changing, at least in some of the more secure areas I am exposed to. Most of the higher security areas in DoD contractor buildings now are even resorting to some form of biometrics for access, most often in conjunction with electronic cypher locks.

In DoD biometrics are now even apart of the information that is being put on the military ID cards as well as the common access card.