Eijah USES key derivation
Eijah says one of his utilities performed key derivation.
Explicit Confidence 99% · Eijah EP 16 Details
“and perform key derivation.”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Eijah USES key derivation
Eijah says one of his utilities performed key derivation.
Explicit Confidence 99% · Eijah EP 16 Details
“and perform key derivation.”
Eijah USES process injection
Eijah says one of his utilities attempted to inject content into a process.
Explicit Confidence 99% · Eijah EP 16 Details
“Another one would try to inject content”
Finn school hacking incident ATTRIBUTED_TO Finn
The school hacking incident is attributed to Finn; he later describes carrying out the account and website compromises.
Explicit Confidence 99% · Jack Rhysider EP 17 Details
“Finn now has logged into the school’s main website as the principal.”
Finn COMPROMISES school website
Finn logged into the school’s official website as the principal and altered the principal’s profile and biography.
Explicit Confidence 99% · Jack Rhysider EP 17 Details
“Finn now has logged into the school’s main website as the principal.”
“Finn’s access only allows him to change the principal’s bio.”
Finn school hacking incident COMPROMISES school website
The incident resulted in unauthorized access to and defacement of the school’s main website.
Explicit Confidence 99% · Finn EP 17 Details
“I wiped everything. His picture, that was deleted off this website. His biography, that was deleted.”
Finn EXPLOITS exposed shared folder
Finn accessed an exposed shared folder/server that allowed users to view files associated with another person’s computer.
Explicit Confidence 98% · Finn EP 17 Details
“This shouldn’t be open like this.”
“You were able to see what they had downloaded, what they were holding on their computer”
Finn school hacking incident INITIAL_ACCESS_VIA school WiFi network
Finn and another student initially explored the school’s WiFi networks while trying to find the WiFi password.
Explicit Confidence 93% · Finn EP 17 Details
“There’s two WiFi networks; you have the BYOD which is the Bring Your Own Device policy and then you have the WiFi that was only for the teachers.”
Finn school hacking incident INVOLVES exposed shared folder
The incident involved the school’s exposed shared folder, which exposed files from the principal’s computer.
Explicit Confidence 98% · Jack Rhysider EP 17 Details
“That shared folder happened to be the principal’s computer.”
Finn school hacking incident INVOLVES MAC address
The school linked Finn’s tablet to the incident through a matching MAC address.
Explicit Confidence 99% · Jack Rhysider EP 17 Details
“After three hours the school did determine the tablet was used in this hack because of a matching MAC address.”
Finn school hacking incident INVOLVES unauthorized account access
The incident involved unauthorized access to the principal’s Twitter account and the school’s website.
Explicit Confidence 99% · Jack Rhysider EP 17 Details
“I was able to access the Twitter feed of the principal.”
“Finn now has logged into the school’s main website as the principal.”
Finn school hacking incident INVOLVES Data exfiltration
The incident involved copying and publicly posting student, employee, parent, and other private information.
Explicit Confidence 99% · Jack Rhysider EP 17 Details
“He then posted the principal’s Social Security Number and other private info.”
“I posted the list of everybody’s e-mail and then everybody’s password.”
Finn says the tablet’s apps came from an app he thinks was Bugtroid, which contained apps used for penetration testing.
Uncertain Confidence 82% · Finn EP 17 Details
“The apps on it were from this app – I think Bugtroid.”
Finn USES credential reuse
Finn tried passwords found in the principal’s password document against the principal’s Twitter account and later reused the Twitter password on the school website.
Explicit Confidence 99% · Finn EP 17 Details
“I go through the list of passwords. I tried the first one on his Twitter”
“what if he’s using the password for his Twitter for this?”
Finn USES Data exfiltration
Finn copied files from the principal’s exposed folder into Google Drive, describing this as a way to avoid a download paper trail.
Derived Confidence 96% · Finn EP 17 Details
“I would copy and paste the files into there, that way there was no – I guess you could say, paper trail of me actually downloading the files.”
Finn used the principal’s Twitter credentials to access and post from the principal’s Twitter account.
Explicit Confidence 99% · Finn EP 17 Details
“I look back down at my tablet and all I see is ‘Twitter would like to use your location.'”
“This fucking worked.”
Finn USES penetration testing
Finn used a tablet configured with applications he described as being used for penetration testing.
Derived Confidence 86% · Finn EP 17 Details
“It was an app that had a bunch of the apps used for penetration testing.”
Finn used Pastebin to publish links containing private school-related documents and information.
Explicit Confidence 99% · Jack Rhysider EP 17 Details
“Finn went on to post links to Pastebin where he was posting private documents.”
Finn USES Admin Panel Finder
Finn scanned the school website with Admin Panel Finder to locate an administrative login page.
Explicit Confidence 99% · Finn EP 17 Details
“I first scanned the page using this app called Admin Panel Finder.”
Finn USES unauthorized account access
Finn gained unauthorized access to the principal’s Twitter account and the school website using credentials found in an unprotected password document.
Explicit Confidence 99% · Finn EP 17 Details
“I see at the bottom of the text document he has a Twitter password.”
“I looked back down at my tablet and I’m in.”
Finn USES Google Drive
Finn used Google Drive to copy files from the exposed folder without directly downloading them.
Explicit Confidence 99% · Finn EP 17 Details
“I would get the folder and open Google Drive on the browser and I would copy and paste the files into there”
Monkey Paw AFFECTS slot machine
The Monkey Paw tricks a slot machine into dispensing additional coins by making it think a payout coin did not fall.
Explicit Confidence 99% · Jack Rhysider EP 18 Details
“This tricks the machine to think that when the payout occurred, the coin never fell, thus making another coin fall.”
electromagnetic pulse AFFECTS slot machine
An electromagnetic pulse can cause certain slot machines to behave abnormally, including issuing instant credits or excessive payouts.
Explicit Confidence 99% · Jack Rhysider EP 18 Details
“By placing an electromagnetic pulse around certain slot machines it can cause the machine to behave abnormally”
Game King Double Up bug AFFECTS Game King
The Double Up bug affects Game King video poker machines.
Explicit Confidence 99% · Jack Rhysider EP 18 Details
“The bug they found would let them change their bet after the win”
“This would be the first bug like this found on Game King.”
Aaron Swartz ASSOCIATED_WITH Computer Fraud and Abuse Act of 1986
The episode cites Aaron Swartz's case as another case involving alleged CFAA violations.
Explicit Confidence 96% · Jack Rhysider EP 18 Details
“One was Aaron Swartz, who was arrested for downloading academic articles without permission.”
John Kane ASSOCIATED_WITH Computer Fraud and Abuse Act of 1986
John was charged with conspiracy and violation of the Computer Fraud and Abuse Act of 1986; the applicability of the law to his conduct was disputed.
Explicit Confidence 99% · Jack Rhysider EP 18 Details
“John and Andre were charged with conspiracy and violation of The Computer Fraud and Abuse Act of 1986.”