Start at 9:35 for a reasonable approach.

*nsfw

This video has been flagged as being Not Suitable For Work - declared nsfw by ant.

4:40 if you want to see just how raped the guy gets...

*promote

Promoting this video and sending it back into the queue for one more try; last queued Wednesday, February 24th, 2016 9:51pm PST - promote requested by enoch.

With the second guy though...he clicked a phishing link. If he didn't click that, then what? Nothing, I presume. That's the segment I want to see, the one where the person being "hacked" does everything right, to see how the hackers get in then.

If you can trick someone to install something on their PC, i'd call that social engineering. You'll be able to do what you like, if you're clever you'll get anything you want, but it takes little technical knowledge to do. I'm sure this guy knows his stuff, perhaps it would be irresponsible to show something a bit more technical and hacker-esque?

Or is hacking like magic and once you learn how it works, it all seems like cheating?

They can start with simple approaches and get progressively more difficult. We don't know if that was the first attempt.

For example, if they're determined enough it's simple enough to get your home ip address and target your router since the firmware's rarely updated. From there they have all unencrypted traffic on your network as well as metadata on your encrypted traffic. They can then target the main PC, particularly if it's not fully patched and not running additional security software, and so on.

It's all about how much effort they want to put into the attack. Try the simple stuff first, and if it's worth it you can get more and more complex.

I'm no expert but I am an interested bystander. I even read Bruce Schneier's blog, so I'm all, like, leet and shit

That was entertaining but I find it hard to believe someone so young can be so unaware of how easy it is to phish information out of the pool.

Very many people are completely oblivious, they spam their Facebook, Instagram and other Social Media feeds full with information on a day to day basis. Completely unprotected.

Usually they don't have any anti-spam plugin for their email client (and probably wouldn't even know how to install / configure it). Windows (and OS X) both have a great user interface which lulls the user into believing he has control of his system, when in fact he is not exerting any security and control on his own behalf.