What can one learn by watching a twitter/mikko speech?

Geo-locations of all Mirai-infected devices — IMPERVA

I’ve watched many videos of twitter.com/mikko before. He is such a good speaker and a valuable Persona in the INFOSEC scene and CRO at F-Secure. I wanted to write some key points in another one of his captivating speeches.

• Yahoo , in 2016 , during the merger , got hacked and leaked over 1 billion user credentials , including passwords . This incident shaved off $350m from the valuation.
• LinkedIn was hacked in 2012 , leaking 130 million user accounts , including emails and UNENCRYPTED PASSWORDS .
• One of the linkedIn accounts belonged to Mark Zuckerberg , with the password , “dadada” . And It turns out that he was using the same password everywhere , except his facebook account.
• In January 2017, F-Secure found a ransomware , Popcorn trojan. What’s amazing,innovative and brilliant about it is that , if you don’t want to pay the 1 BTC they ask , you can apply for a referral system and get your files back for free,by using your own unique URL for infecting other systems , whence 2 of them pay ransom. F-Secure tested It, It works. You Read more here
• Some time ago , F-Secure set up a free WiFi spot in London and in terms of service read “By using this service You agree to give Your first born child to F-Secure. Or your favorite pet , if you don’t have a child” . Everybody accepted.
• Power of default FTW !!! In October 2016 , a DDOS attack was carried out with 120.000 IoT devices and 0 computers. Mirai Botnet launched the attack from 49,657 unique IPs. All devices were infected by trying a set of 61 default passwords. I’ve read more here , here and here.