{"id":554,"date":"2015-03-05T00:12:17","date_gmt":"2015-03-05T05:12:17","guid":{"rendered":"http:\/\/www.spacerogue.net\/wordpress\/?p=554"},"modified":"2023-02-24T11:46:12","modified_gmt":"2023-02-24T16:46:12","slug":"i-watched-csicyber-so-you-dont-have-to","status":"publish","type":"post","link":"https:\/\/www.spacerogue.net\/?p=554","title":{"rendered":"I watched CSI:Cyber so you don\u2019t have to."},"content":{"rendered":"

CSI has a proven formula for making popular TV shows. Unfortunately that history does not include accurate TV shows. When it comes to tech and things \u2018cyber\u2019 this is probably the preeminent example of CSI being bad and wrong at the same time.<\/a> I thought there was no way they could top this, I was wrong.<\/p>\n

Hollywood has had a long history of doing tech wrong. Take a look at the recent Scorpion TV show, on second thought don\u2019t, its almost as bad. Occasionally Hollywood does get Tech correct, like with the recent Blackhat movie, but while the tech was good the movie itself was bad for other reasons. The last time, perhaps the only time, Hollywood got the movie and the tech right was Sneakers, which is coming up on a quarter century in age.<\/p>\n

While I think it is great that TV shows like this bring technical issues to a mass audience, scaring people into thinking that the Internet is out to get them is probably not in anyone\u2019s best interest. Humans often do stupid things when they are scared.<\/p>\n

Let me talk first about the few things that CSI:Cyber got right. The show mentions that social media is a huge aide to law enforcement and one of the characters jokingly says that\u2019s why he doesn\u2019t use it. This is absolutely correct; Facebook, Twitter and other sites are often the first step in an investigation of any sort, often even before they interview witnesses or suspects.<\/p>\n

The softball shaped camera that is thrown through an open window into the bad guys lair near the end is an actual thing that is actually used by law enforcement. They got this right.<\/p>\n

In another scene one of the technical characters, who is labeled as \u2018the greatest hacker in the world\u2019 (I\u2019m not even going to touch that statement) claims that RATs or Remote Access Trojans are easy to get for $40 on the \u2018surface net\u2019. He is right about the easy to get part although his price is a little high and I have no idea what the \u2018surface net\u2019 is. But yes, tools that online criminals use like RATs are very easy to come by. The thing about Remote Access Trojans is that they are very similar to legitimate Remote Access Tools like say Go To My PC or Remote Desktop,<\/p>\n

Probably the most important thing that they got right in this show was when the Worlds Greatest Hacker was berating the lowly tech employee for allowing a vulnerability to exist in the companies software and the tech guy responds with \u201cI took it upstairs but they didn\u2019t listen.\u201d This is an all to common theme that is often repeated in the information security world. Company executives often refuse to listen to security concerns and instead focus more on the bottom line. This is probably the single truest thing this show got right.<\/p>\n

The second most important thing they got right was the weak security present in many Internet connected cameras. Many such cameras have default passwords and are easily searched for over the Internet allowing anyone to connect to the camera and watch and listen to what is happening. There have been cases where people will connect to a camera and then yell at the sleeping baby.<\/a> Manufacturers of these cameras were told about their default password problems but most refused to fix the problem, that is until these stories started to hit the press and the FTC started to levy fines.<\/a> Even after the companies issues an update to the devices firmware it is up to the owner of each camera to learn about the update and apply the patch themselves. This seldom happens leaving tens of thousands of devices installed in peoples homes that anyone can access.<\/p>\n

Other than that just about everything else in the show is just completely unbelievably wrong. Not only are things wrong but they play on known false tropes, like that lead can block radio signals (it can\u2019t), that convicted criminals are allowed to work in the field on active investigations, that you can quickly separate overlaid audio and translate it, that you need big wall sized monitors in order to catch bad guys, that hackers who could be half way across the world are conveniently just an hour or less away, that non-smart phones can have GPS aps and that cops treat forensic data so carelessly.<\/p>\n

One of the most egregious examples was the speed at which the characters analyzed the cameras source code and it came up all green and then turned red. Source code doesn\u2019t just magically turn red when malware is found. Reverse engineering is painstakingly hard, and it takes a lot of time. If code could just magically turn red if it did bad things, like it does in this show, the world would be a much much better place.<\/p>\n

I was especially troubled by one of the statements made early in the show \u201cAny crime involving electronic devices is by definition, cyber\u201d While this is just a TV show there are people who believe this or at least will be influenced by this. This scares me as I guess that makes my electric drill cyber.<\/p>\n

Also I loved how the characters on the show could do these crystal clear remote videoconferences from remote locations? How? They never bothered to explain where the camera was or what are they are using for bandwidth. If they did it with their cell phones I want to get on that data plan.<\/p>\n

And I could not overlook that they had the one black person on the show repeat a racist nursery rhyme “Einie meane miny moe, catch a\u2026” well they changed the word on the show but I\u2019m really surprised they let that through.<\/p>\n

If you didn\u2019t watch this show you didn\u2019t miss anything, at all, and I encourage you not to watch it, in fact just forget that that it exists and with any luck it will be canceled. And then we just have to wait for the next TV show to do tech wrong.<\/p>\n","protected":false},"excerpt":{"rendered":"

CSI has a proven formula for making popular TV shows. Unfortunately that history does not include accurate TV shows. When it comes to tech and things \u2018cyber\u2019 this is probably the preeminent example of CSI being bad and wrong at … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-554","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=\/wp\/v2\/posts\/554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=554"}],"version-history":[{"count":3,"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=\/wp\/v2\/posts\/554\/revisions"}],"predecessor-version":[{"id":761,"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=\/wp\/v2\/posts\/554\/revisions\/761"}],"wp:attachment":[{"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.spacerogue.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}