I’m gonna dumb this down for people like me:
if a user does unexpected things in a program, sometimes it can abuse the program so that it allows the user to do what it shouldn’t.
Most software nowadays is incredibly attuned to this so there’s truckloads of things that have already been brushed over in a software but software always has remaining holes in it.
When you develop a software, you have to make it work in the right way, and then you have to stop it from crashing when used in the wrong way. But if you “hack” some software, you only need to find out how to use it the wrong way. That’s why software development and red teaming are very very different fields. Though generally cybersecurity (at least in my eyes) is considered one of the most difficult fields in computer science because of the broad base knowledge required.
I’m gonna dumb this down for people like me: if a user does unexpected things in a program, sometimes it can abuse the program so that it allows the user to do what it shouldn’t.
Most software nowadays is incredibly attuned to this so there’s truckloads of things that have already been brushed over in a software but software always has remaining holes in it.
When you develop a software, you have to make it work in the right way, and then you have to stop it from crashing when used in the wrong way. But if you “hack” some software, you only need to find out how to use it the wrong way. That’s why software development and red teaming are very very different fields. Though generally cybersecurity (at least in my eyes) is considered one of the most difficult fields in computer science because of the broad base knowledge required.
most sites getting pwned are for really simple things, like the number 4. It’s usually human error and slipups