Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Ryan MEMBER_OF Lizard Squad

Ryan identifies himself as one of the hackers associated with Lizard Squad during the Sony and Xbox attacks.

Explicit Confidence 90% · Joe Tidy EP 159 Details

“this man who calls himself Ryan says he is one of the hackers”

Joe Tidy · offsets 2627–2688

Joe Tidy MEMBER_OF BBC

Joe Tidy says he is the BBC's cyber correspondent.

Explicit Confidence 99% · Joe Tidy EP 159 Details

“I’m the BBC’s cyber correspondent.”

Joe Tidy · offsets 1357–1391

Marko Leponen MEMBER_OF Finnish police

Marko Leponen is identified as the head detective/main detective in the Finnish police investigation.

Derived Confidence 92% · Joe Tidy EP 159 Details

“I spoke to the head detective, Marko Leponen”

Joe Tidy · offsets 18908–18952

Julius Kivimaki MEMBER_OF Lizard Squad

Joe Tidy says Kivimaki was part of Lizard Squad among other teenage cyber-crime gangs.

Explicit Confidence 98% · Joe Tidy EP 159 Details

“there were other gangs he was part of like Lizard Squad and UGNazi, Isis gang”

Joe Tidy · offsets 43917–43994

Julius Kivimaki MEMBER_OF Isis gang

Joe Tidy says Kivimaki was part of the Isis gang among other teenage cyber-crime gangs.

Explicit Confidence 98% · Joe Tidy EP 159 Details

“there were other gangs he was part of like Lizard Squad and UGNazi, Isis gang”

Joe Tidy · offsets 43917–43994

Julius Kivimaki POSSIBLY_SAME_AS Ransom Man

The episode presents the possibility that Ransom Man was Julius Kivimaki, supported by speculation and investigative evidence, but does not treat the identity as certain at that point.

Uncertain Confidence 90% · Jack Rhysider EP 159 Details

“Could Ransom Man be him? Speculators were thinking it, but the investigator, Marko, was finding actual evidence that was pointing to him”

Jack Rhysider · offsets 28689–28825

Ransom Man USES Ylilauta

Ransom Man also posted the stolen records and threats on the clearweb forum Ylilauta.

Explicit Confidence 99% · Joe Tidy EP 159 Details

“As well as posting on Torilauta, he posted it to a clearweb forum called Ylilauta”

Joe Tidy · offsets 10065–10146

Ransom Man USES Torilauta

Ransom Man used Torilauta to announce the Vastaamo compromise, threaten publication, and publish records.

Explicit Confidence 99% · Joe Tidy EP 159 Details

“he posted it on the darknet on a website which is now gone, but it was called Torilauta”

Joe Tidy · offsets 7160–7245

Ryan USES DDoS attack

Ryan admits involvement in taking down Xbox Live and PlayStation Network in the DDoS attack.

Explicit Confidence 94% · Jack Rhysider EP 159 Details

“this kid calling himself Ryan appearing on Sky News not hiding his face or voice at all, admitting to taking down Xbox Live and PlayStation”

Jack Rhysider · offsets 3701–3840

Julius Kivimaki USES Interpor Red Notice

An Interpol Red Notice was issued to help locate and arrest Julius Kivimaki; the notice was used as part of the investigation's pursuit of him.

Explicit Confidence 78% · Joe Tidy EP 159 Details

“Marko does the quite extreme move of putting out an Interpol Red Notice to try and find out where he is”

Joe Tidy · offsets 29001–29104

Microsoft Office vulnerability AFFECTS Microsoft Office 2007

The episode identifies the vulnerability Greg ultimately found as the first disclosed vulnerability in Microsoft Office 2007.

Explicit Confidence 95% · Greg Linares EP 160 Details

“we have indeed the first vulnerability in Microsoft Office”

Greg Linares · offsets 46317–46375

macro virus AFFECTS Microsoft Excel

Greg's macro virus modified Excel grade sheets and caused the school's Excel files to crash when a later column was added.

Explicit Confidence 96% · Greg Linares EP 160 Details

“the virus would restore the doc — the sheets when teachers opened up the sheets. That caused the Excel files to crash”

Greg Linares · offsets 15528–15645

Microsoft Office vulnerability AFFECTS Microsoft Visio

The successful vulnerability was found in Visio, a product inside the Office suite.

Explicit Confidence 99% · Greg Linares EP 160 Details

“it happens to be in Office Visio. It was another product inside the Office suite.”

Greg Linares · offsets 45084–45165

Li Feng ASSOCIATED_WITH eEye

Greg alleges that Li Feng was placed at eEye to identify and report eEye's Microsoft zero-days; the account is explicitly unconfirmed.

Uncertain Confidence 72% · Greg Linares EP 160 Details

“Li Feng, he was working for us to identify zero-days that you guys may have found”

Greg Linares · offsets 52178–52259

“I can’t confirm that that story is true”

Jack Rhysider · offsets 53560–53599

Li Feng ASSOCIATED_WITH Microsoft

Greg alleges that Li Feng worked for Microsoft while being placed at eEye to obtain information about eEye's zero-days; Jack says the story could not be confirmed.

Uncertain Confidence 72% · Jack Rhysider EP 160 Details

“Microsoft got someone to — a job at eEye”

Jack Rhysider · offsets 51091–51131

“I can’t confirm that that story is true”

Jack Rhysider · offsets 53560–53599

1IM punter DEVELOPED_BY Greg Linares

Greg says he made the 1IM punter after finding the AOL client vulnerability.

Explicit Confidence 98% · Greg Linares EP 160 Details

“I remember finding that and making the 1IM punter back in the day.”

Greg Linares · offsets 10118–10184

macro virus DEVELOPED_BY Greg Linares

Greg says he wrote macro viruses, including a macro virus that modified his school's Excel grade records.

Explicit Confidence 98% · Greg Linares EP 160 Details

“I made a macro virus that would look for my student ID number”

Greg Linares · offsets 12961–13022

1IM exploit DISCOVERED_BY Greg Linares

Greg says he was one of the first people to discover the 1IM exploit.

Explicit Confidence 98% · Greg Linares EP 160 Details

“I was one of the first to discover the 1IM exploit.”

Greg Linares · offsets 9919–9970

Greg Linares EXPLOITS access-camera buffer overflow

Greg exploited an unpatched access-camera buffer overflow to gain control of the cameras.

Explicit Confidence 99% · Greg Linares EP 160 Details

“there’s an access buffer overflow that allows you to control and gain access to every one of these cameras”

Greg Linares · offsets 81361–81467

1IM exploit EXPLOITS Integer overflow

The 1IM exploit used an integer overflow in the AOL client triggered by an excessively long font-size value.

Explicit Confidence 99% · Greg Linares EP 160 Details

“the integer overflow in the AOL client when you sent a font size with a long enough number”

Greg Linares · offsets 10026–10116

corporate espionage allegation involving Li Feng INVOLVES Li Feng

The corporate-espionage allegation centers on Li Feng and alleged placement between Microsoft, eEye, and a foreign government entity.

Uncertain Confidence 90% · Jack Rhysider EP 160 Details

“this is corporate espionage”

Jack Rhysider · offsets 51576–51603

“I can’t confirm that that story is true”

Jack Rhysider · offsets 53560–53599

eEye Office 2007 vulnerability disclosure INVOLVES Microsoft Office vulnerability

The eEye Office 2007 disclosure involved the vulnerability Greg found through fuzzing and subsequent validation without a debugger attached.

Explicit Confidence 98% · Jack Rhysider EP 160 Details

“eEye found another zero-day, this time in the latest Microsoft Office”

Jack Rhysider · offsets 38508–38577

eEye Office 2007 vulnerability disclosure INVOLVES Microsoft

eEye reported the Office vulnerability to Microsoft so it could investigate and patch it before public disclosure.

Explicit Confidence 99% · Greg Linares EP 160 Details

“then we report to Microsoft”

Greg Linares · offsets 38367–38394

Greg Linares MEMBER_OF eEye

Greg joined eEye as a researcher after the company noticed his public exploit and malware work.

Explicit Confidence 99% · Jack Rhysider EP 160 Details

“eEye saw that Greg was writing a lot of malware and posting it publicly, and they liked that and decided to hire him”

Jack Rhysider · offsets 26240–26356

Greg Linares USES Olly

Greg used Olly as a debugger to inspect application assembly, registers, memory, and behavior.

Explicit Confidence 99% · Greg Linares EP 160 Details

“Olly is a tool that you attach to your — any application that you want to see at low level”

Greg Linares · offsets 35456–35546