Jim Lawler USES brush pass
Jim used or describes brush passes as a way for sources to hand over materials covertly.
Explicit Confidence 98% · Jim Lawler EP 116 Details
“at a car pickup or a brush pass where they hand me things”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Jim Lawler USES brush pass
Jim used or describes brush passes as a way for sources to hand over materials covertly.
Explicit Confidence 98% · Jim Lawler EP 116 Details
“at a car pickup or a brush pass where they hand me things”
Jim Lawler USES covert communication device
Jim describes equipping sources with covert communication devices for electronic information transfer.
Explicit Confidence 98% · Jim Lawler EP 116 Details
“We might equip them with what we call a covert communication device”
Central Intelligence Agency USES social engineering
Jack says the CIA uses the same social-engineering techniques used to gather unauthorized data.
Explicit Confidence 99% · Jack Rhysider EP 116 Details
“the CIA uses the exact same techniques to gather foreign intelligence”
Jim Lawler USES thumb drive
Jim describes receiving intelligence on thumb drives, including through dead drops.
Explicit Confidence 99% · Jim Lawler EP 116 Details
“These days, they might download stuff to a thumb drive and provide it to me”
Xbox parental controls vulnerability AFFECTS Xbox Live
The Xbox parental-controls vulnerability allowed a user to bypass the child account restrictions and access games on the father's account.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“there was a vulnerability in the Xbox parental controls that allowed someone to just type in all spaces to get out of the kid’s account”
cross-site scripting AFFECTS CyberChef
Daniel found a Git-based XSS vulnerability in CyberChef when it was first published.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“when they first published it, there was a git based XSS in it”
TalkTalk incident COMPROMISES TalkTalk
The TalkTalk incident involved unauthorized access to TalkTalk's network and theft of substantial amounts of data.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“get into TalkTalk’s network and start moving around and stealing data”
GCHQ published CyberChef as an open-source project.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“GCHQ basically published this open-source project called CyberChef”
cross-site scripting DISCOVERED_BY Daniel Kelley
Daniel found a cross-site scripting vulnerability on a Microsoft subdomain.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I found a cross-site scripting vulnerability in – on a subdomain in this login panel”
Xbox parental controls vulnerability DISCOVERED_BY Kid
The five-year-old identified the Xbox parental-controls bypass and demonstrated it to his father.
Explicit Confidence 98% · Jack Rhysider EP 117 Details
“they even credited the kid in the bug report as a security researcher involved with identifying it”
TalkTalk incident INVOLVES SQL injection
The incident began with an SQL injection vulnerability on a TalkTalk subdomain.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“What he’s effectively found is an SQL injection on a subdomain”
TalkTalk incident INVOLVES Daniel Kelley
Daniel was involved in the incident by using data obtained from the TalkTalk breach to send a ransom demand, although he says a friend carried out the database download.
Explicit Confidence 98% · Daniel Kelley EP 117 Details
“I had access to this data and I basically decided to gather all of the e-mails from the data”
Mirai botnet attack on college network INVOLVES DDoS
The incident consisted of repeated DDoS attacks that disrupted the college network and coursework access.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“by DDossing that website, in effect, nobody could log in and nobody could really access their work”
Mirai botnet attack on college network INVOLVES Mirai
The college-network attack involved Daniel using a Mirai botnet.
Explicit Confidence 96% · Daniel Kelley EP 117 Details
“I essentially DDossed that college”
Mirai is described as being effective at flooding an IP address and carrying out DDoS attacks.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“It’s very good at doing DDoS attacks”
Daniel Kelley USES Mirai
Daniel was given access to a Mirai botnet and used it to attack his college's network.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I basically had access to this botnet. It was essentially a Mirai botnet”
Daniel Kelley USES bug bounty program
After his conviction and while on bail, Daniel began participating in bug bounty programs.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I started engaging in all of these bug bounty programs”
A booter is described as a tool used to carry out DDoS attacks.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“a booter was, which is a type of hacking tool that does this kind of DDoS attack”
Daniel Kelley USES blackmail and extortion campaign
Daniel describes conducting a hacking spree involving blackmail and extortion of website owners.
Explicit Direction flagged Confidence 99% · Daniel Kelley EP 117 Details
“my criminality essentially escalated from low-level offending to blackmail, fraud, and computer hacking”
Daniel Kelley USES Bitcoin
Daniel demanded Bitcoin in exchange for not publishing stolen data or vulnerability information.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“What Daniel was asking was anywhere between five and forty Bitcoin”
Daniel Kelley USES World of Warcraft
Daniel says he was obsessed with World of Warcraft and spent thousands of hours playing it competitively.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I used to be obsessed with a certain game called World of Warcraft”
Daniel Kelley USES responsible disclosure
Daniel submitted the proof of concept for the Microsoft XSS vulnerability through Microsoft's responsible disclosure process.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I basically took the proof of concept and submitted it to Microsoft’s security team”
Daniel Kelley USES Tor
Daniel says he used Tor when sending the TalkTalk extortion email.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“when I sent the extortion e-mail to TalkTalk, I used Tor”
Daniel Kelley USES booter
As a teenager, Daniel used a booter to conduct a DDoS attack against another player's connection.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“So, I had a booter and Skype Resolver, and I decided to test this theory”
Google dorking USES Google
Google dorking is described as using Google searches to identify exposed files and potentially vulnerable websites.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“Google dorking is where you use Google as a vulnerability scanner”