Mike Ritland

speaker

855 appearances 6 recordings 1 series first heard Nov 2024 last heard Feb 2025

Mike Ritland’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

No recordings in the last 12 months.Older appearances are listed below; set an alert to hear about the next one.

Appearances

newest first · ▶ plays the moment

The Shawn Ryan Show · #164 Mike Grover - How Hacking Tools Are Changing Cyber Warfare · 29 Jan 2025 podcast

A lot of places have strict controls. So with the USB rubber ducky, it does the keystroke injection. It looks like a thumb drive by Hack5. That's my business partner. They invented that 15 years ago-ish. what they would do is you could put like salaries.xls on it. So it's like, oh, that must be the company salaries and litter it in the parking lot, right?

That's one way that people would be convinced to pick it up in the parking lot, bring it inside, plug it in, see what's on it, right? And boom, they've just infected themselves with malware, right? There's a downside to that, which is depending on how bad that payload is, If you're a red team, you're an employee of this company, right?

You've got malware sitting on a loose object that anyone could pick up and bring it home, bring it into another business, and now you have just infected another business. That's not ideal, right? So certain environments, their legal team is like, no way. You put geofencing on this. You have a payload where it boots up and just says, am I in the office? Is the corporate Wi-Fi present? Cool.

If not, completely wipe everything.

Yep. And where it isn't.

So this scan right here, this was done by LumaField. They've got a CT scanner, which is basically an x-ray scanner that takes a lot of x-rays, little slices across a product, and then assembles it into a 3D object. So LumaField, I actually just did some work with them to sit down and talk about their machines they use for all kinds of things.

manufacturing inspection but also starting to get into like security stuff like where you can literally see inside this is a scan of the end of one of my cables so right here is the connectors usb connectors and over here we got the components so this is the main processor and this little thing over here is the antenna you can kind of see the usb wires running out the bottom there wow and the cool thing is let's see if i can turn this there it is that is

the whole internal and lots more components kind of on the back. You can use this to step through every layer and just see literally every little detail about something. So if you got untrusted hardware for instance, that scanner would reveal all of the internals. In this case, it's just really cool and it shows off, here's what's inside my cable. Man. All the magic.

I think I'm going to. It's a beautiful scan.

Yeah. They have done a lot of work to kind of democratize the access to CT scans. CT scanning machines are normally this industrial machine that's really hard to use and really expensive. Like we're talking like a million plus dollars for machines, roughly. They do a subscription where it's like the cost of a maintenance contract. And they did some amazing stuff to make it super usable.

Like you can see me turning this. It's super easy to use the outputs and set it up, and they did something magic. I don't know that they communicate this, but the sensor in an X-ray machine normally decays, and you have to replace it. They've somehow made an eternal scanner, so it reduces the cost as well, which I don't know.

I'm completely obsessed with their technology right now, so sorry for the momentary splurge on that.

Good stuff.

I got everyone, basically. So here's the thing. Me, personally, I've got one customer, Hack5. And we can probably go into the story about how we met. But basically, when I was making these things by myself and I needed to take the jump into manufacturing, I had a lot of bad experiences, but Hack 5 was amazing. They're like, let me just kind of show you the ropes, right?

Like manufacturing, running a business, all this stuff. Darren has been great to me. So I sell all of my stuff to him. And all of my products are available on Hack 5 as a result. They take care of who gets it. And they have very tight expert controls. There's a lot of countries they just will not ship to.

Yeah, you can. You're not in a prohibited country. Wow. So yeah, you can just go on there and buy it. And hobbyists can use it. Security researchers, awareness training. So that's where you go on stage and kind of just show off. concerning things so that people will change their behavior, and primarily red teams.

There's lots of red teams in the private space, you know, Fortune 500s, military, industrial, government, all have their own equivalencies to that. And again, the red team is where you are emulating what an actual attacker does from end to end, from

penetrating to the cup, getting into the company and all the entire chain of hopping around and getting to the crown jewels, pulling those back out that, that is red teaming. And, um,

this is used a lot there so uh i have a lot of customers who will also reach out just for advice on how to use the cables or maybe they've run into a situation like that legal constraint like hey this is cool but like oh yeah cool let me just fix that and solve that legal problem now i don't know like the full scope of what they're doing but it's like oh here's a problem i can solve that for you um

There's, yeah, every... They are the people I've talked to, and now I know a lot more than I can talk about here, but there are plenty of people who have said, yeah, you're going to Sean Ryan, go ahead and you can talk about it this way. A couple people... Who are those people? Yeah, so...

Showing 661–680 of 855 · page 34 of 43