Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
GinMaster infects Android phones and tablets, steals private data, and can give attackers access to the device.
Explicit Confidence 98% · Jack Rhysider EP 127 Details
“millions of Android devices infected by this”
“it can steal user data, take control of the device”
zombie bug AFFECTS WebKit
The zombie bug was a vulnerability in WebKit that had been fixed, reintroduced, and later exploited in the wild before being patched again.
Explicit Confidence 99% · Maddie Stone EP 127 Details
“this was a zombie bug and that it had actually been originally fixed back in 2013”
“here we were in 2022 with the bug exploited in the wild and patched again”
Pegasus is described as spyware used by NSO; Jack also identifies NSO as the company behind and selling it.
Explicit Confidence 99% · Jack Rhysider EP 127 Details
“Pegasus is the spyware used by NSO”
“Pegasus is the spyware used by NSO, which is a company based in Israel”
proof-of-concept exploit DEVELOPED_BY Maddie Stone
Maddie partnered with Jann Horn to write a proof-of-concept demonstrating exploitation of the Android vulnerability and its usefulness in the Pegasus chain.
Explicit Confidence 99% · Maddie Stone EP 127 Details
“I partnered up with Jann Horn to write a proof-of-concept”
proof-of-concept exploit DEVELOPED_BY Jann Horn
Jann Horn partnered with Maddie Stone to write a proof-of-concept exploit for the Android vulnerability.
Explicit Confidence 99% · Maddie Stone EP 127 Details
“I partnered up with Jann Horn to write a proof-of-concept”
Chamois DISCOVERED_BY Maddie Stone
Maddie investigated and identified Chamois as a sophisticated malware family and botnet.
Explicit Confidence 96% · Maddie Stone EP 127 Details
“one of the biggest malware families that I was not expecting”
“it became clear that it was this botnet and this family of malware”
zombie bug DISCOVERED_BY Sergei Glazunov
Sergei Glazunov was the original reporter of the bug in January 2013.
Explicit Confidence 99% · Maddie Stone EP 127 Details
“my teammate Sergei Glazunov was actually the original reporter of the bug back in January 2013”
The Mariner 1 mission was developed and operated as part of NASA's space program.
Explicit Confidence 96% · Jack Rhysider EP 127 Details
“In the 1960s, NASA developed the Mariner Space Program.”
“That was the end of the Mariner 1 spacecraft”
Mariner 1 LEADS_TO software engineering
The software failure that destroyed Mariner 1 helped prompt software engineering becoming a formal discipline.
Explicit Confidence 94% · Jack Rhysider EP 127 Details
“This software bug didn’t just crash a spaceship, but it launched a whole new field of study”
Maddie Stone MEMBER_OF Google Project Zero
Maddie accepted the role and joined Google Project Zero.
Explicit Confidence 99% · Jack Rhysider EP 127 Details
“So, she took the job and joined Google Project Zero.”
Maddie Stone MEMBER_OF Applied Physics Laboratory
Maddie worked at the Applied Physics Laboratory for her first four-and-a-half years after college.
Explicit Confidence 98% · Maddie Stone EP 127 Details
“That’s where I ended up for the first four-and-a-half years”
Google Project Zero OPERATED_BY Google
Project Zero is described as a team within Google.
Explicit Confidence 98% · Jack Rhysider EP 127 Details
“This is a very talented team within Google”
North Korean hackers TARGETS Google Project Zero
According to Google Threat Analysis Group, North Korean hackers targeted security researchers, including researchers from Project Zero, in an attempt to steal zero-day exploits.
Attributed Confidence 98% · Maddie Stone EP 127 Details
“Google TAG, the Threat Analysis Group, discovered that North Korean hackers were targeting security researchers, including security researchers from Project Zero”
Chamois USES anti-analysis
Chamois performed extensive anti-analysis checks to determine whether it was being examined by a security researcher.
Explicit Confidence 99% · Maddie Stone EP 127 Details
“doing an incredible amount of anti-analysis”
Chamois USES Java Native Interface
The malware's presentation covered Java Native Interface manipulations.
Explicit Confidence 97% · Maddie Stone EP 127 Details
“some of the JNI or Java native interface manipulations”
Chamois USES anti-debugging
Chamois performed extensive anti-debugging checks.
Explicit Confidence 99% · Maddie Stone EP 127 Details
“as well as doing an incredible amount of anti-analysis and anti-debugging checks”
Chrome was built on top of WebKit at the time the original bug was reported, before splitting off in 2014.
Explicit Confidence 98% · Maddie Stone EP 127 Details
“Chrome was still built on top of WebKit as their browser engine”
Maddie Stone USES variant analysis
Maddie and her team perform variant analysis to prevent attackers from reusing variants of previously public vulnerabilities.
Explicit Confidence 98% · Maddie Stone EP 127 Details
“We complete variant analysis before the attackers are able to”
Safari uses WebKit as its browser engine.
Explicit Confidence 99% · Jack Rhysider EP 127 Details
“WebKit product. This is the browser engine that Apple’s Safari browser uses”
Maddie Stone USES Reverse engineering
Maddie worked on reverse-engineering firmware and hardware at the Applied Physics Laboratory.
Explicit Confidence 98% · Maddie Stone EP 127 Details
“working on reverse-engineering of firmware and hardware”
Maddie Stone USES Assembly language
Maddie studied and taught Assembly language and created projects for the course.
Explicit Confidence 97% · Maddie Stone EP 127 Details
“I had actually listed that that was my favorite language”
“I became the teaching assistant for that course”
Pegasus USES Android exploit used in the Pegasus chain
An Android exploit was used by NSO in the delivery chain for Pegasus.
Explicit Confidence 99% · Maddie Stone EP 127 Details
“NSO had this Android exploit that they were using to target Android users in their delivery of Pegasus”
ShadowCrew CONTAINS Database dumps
ShadowCrew hosted database dumps that users posted to the site.
Explicit Direction flagged Confidence 99% · Jack Rhysider EP 128 Details
“he started seeing people posting database dumps to the site”
ShadowCrew DEVELOPED_BY Seth Sanders
Brett says Seth Sanders built ShadowCrew as a site focused initially on fake IDs.
Explicit Confidence 99% · Brett Johnson EP 128 Details
“he goes off and builds ShadowCrew, okay? Just him. He builds ShadowCrew”
CVV1 hack EXPLOITS CVV1 security-code implementation weakness
The CVV1 hack exploited banks that failed to implement or validate the card security code.
Explicit Confidence 99% · Jack Rhysider EP 128 Details
“there were some banks that didn’t implement that security code at all”
“This became known as the CVV1 hack”