Nobody seems to use Windows and there is nary a mouse in sight. Progress in copying files is always displayed on the monitor using a 1990s style bar filling, always on a white on black screen
The attack I had in mind does: if the timing of a query depends, or you can cause it to depend, on whether the result is true or false, then first you query whether the first letter is “a”. If it is, move on to the second letter. If not, try “b”… there are tools like SQLmap that automate this procedure and you can watch it in action if you choose. Slightly more realistically, the passwords would not be stored in plain text, but you might be able to extract records that contain usernames and hashed passwords, which you can then crack offline (storing hashes of the passwords is not that much more secure than storing the plain passwords, for this reason).
There’s another episode where Gibbs was being talked through some kind of obstacle course with booby traps, with a computer on a countdown at the end. IIRC it was set to detonate an explosive of some kind when it reached zero. Instead of messing around with unplugging red wires or blue wires or trying to defuse it some other hight tech way, Gibbs just pulled out his gun and shot it.
Which is fine if the computer was going to send a “detonate” signal at the end. But would not be fine if the computer was instead going to cease sending a “don’t detonate” signal.
My old PDP-11 had them. Useful when manually entering the bootstrap sequence from switches.
I know this isn’t the thread topic, but Real Genius got this right. Our heroes want to sabotage the first test of a death ray satellite. The writers were smart enough to know that this thing would not be hooked up to any sort of network, so they had to go into the base and manually swap a PROM (Programmable Read Only Memory) with new directions. One of the many things that movie got right.
“Sir, all these lights are flashing out of sequence.” “Well, get them to flash IN sequence!”
There was an episode of Elementary where Holmes and Watson find a high explosive in their living room, wired to a cell phone detonator. Holmes simply rips the phone off bodily.
Yeah, and it might be plausible in a movie that a real AI (which WOPR was being presented as) could figure out a previously unknown vulnerability in the launch code system equivalent to SQL injection (or better yet, to a timing attack).
That notion has been presented to the public so often that county prosecutors now have a little speech that they give to jurors that this was ‘movie magic’ and that it doesn’t work that way in real life. And they often have to repeat/re-emphasize this during closing arguments in trials.
Because juries were disregarding photo evidence because the typical low-resolution, dark security camera footage didn’t look anything like as the clear, detailed photos shown in TV crime shows. And of course, defense attorneys would try to push juries to expect that perfection (“if the glove don’t fit, you must acquit”). It’s become an actual problem in courts.
This is more of a computer security thing than a “how computers work” thing, but I’m soooo tired of seeing a mystery thumb drive being anonymously delivered to some police precinct or federal law enforcement office and no one ever thinking twice about sticking it into the nearest computer…which, of course, is never air-gapped.
(And, of course, the network immediately becomes hacked/infected – but it’s the “hey, let’s just stick this in a random computer” thing that bugs the crap outta me.)
For the Average Joe, sure…I guess I expect “don’t stick mystery thumb drives in networked computers” to be covered in fictional law enforcement academies.