Most hacking these days is social engineering:

I befriend you, and one day I send you a sad meme with a dog. Sorry about that, its just that dog reminded me of the dog I had when I was in primary school… Oh, you had a dog in primary school too?.. Oh cool, my dogs name was Rex too!

secret question 1: what was my childhood pets name?

This is why my secret questions and answers are all fucked up and something I’d never answer in real life.

what is the name of my favourite fictional character?

Adolf Hitler

I mean… yes.

Correct.

Ever heard of red-teaming?

Just pretending to be some unnanounced maintenance crew, what, they didn’t let you know we were scheduled for today?

…and then 9/10 times, blamo, you’re now either in or very close to in a server room.

This is why its utterly insane to just give other people your passwords and swipe patterns and such.

Even assuming they never have any malicious intent, ever, the amount that an idiot can fuck shit up unintentionally is potentially unlimited.

This is why 95% of most ‘hacking’ operations, by amount of persistent and consistent effort, are spearphishing or some kind of social engineering, barely 5% of the actual consistent effort is in… actually developing some package based around one or multiple exploits.

Here’s maybe an example of that:

Oh we all just have to get new PCs with TPM2 chips now, cuz MSFT said so, or something.

Oh well all just have to allow full kernel access rootkits on our PCs to play video games now, cuz game makey people said so.

Oh I should just join this discord and download and install this cryptowallet from here, cuz its the updated version.

Wouldn’t want to look stupid and risk social ostricization for going against what everyone else is doing!