Claims
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached.
These are not independently verified facts.
Ryan
MEMBER_OF
Lizard Squad
Ryan identifies himself as one of the hackers associated with Lizard Squad during the Sony and Xbox attacks.
Explicit
Confidence 90%
· Joe Tidy
EP 159
Details
“this man who calls himself Ryan says he is one of the hackers”
Joe Tidy ·
offsets 2627–2688
Joe Tidy
MEMBER_OF
BBC
Joe Tidy says he is the BBC's cyber correspondent.
Explicit
Confidence 99%
· Joe Tidy
EP 159
Details
“I’m the BBC’s cyber correspondent.”
Joe Tidy ·
offsets 1357–1391
Marko Leponen
MEMBER_OF
Finnish police
Marko Leponen is identified as the head detective/main detective in the Finnish police investigation.
Derived
Confidence 92%
· Joe Tidy
EP 159
Details
“I spoke to the head detective, Marko Leponen”
Joe Tidy ·
offsets 18908–18952
Julius Kivimaki
MEMBER_OF
Lizard Squad
Joe Tidy says Kivimaki was part of Lizard Squad among other teenage cyber-crime gangs.
Explicit
Confidence 98%
· Joe Tidy
EP 159
Details
“there were other gangs he was part of like Lizard Squad and UGNazi, Isis gang”
Joe Tidy ·
offsets 43917–43994
Julius Kivimaki
MEMBER_OF
Isis gang
Joe Tidy says Kivimaki was part of the Isis gang among other teenage cyber-crime gangs.
Explicit
Confidence 98%
· Joe Tidy
EP 159
Details
“there were other gangs he was part of like Lizard Squad and UGNazi, Isis gang”
Joe Tidy ·
offsets 43917–43994
Julius Kivimaki
POSSIBLY_SAME_AS
Ransom Man
The episode presents the possibility that Ransom Man was Julius Kivimaki, supported by speculation and investigative evidence, but does not treat the identity as certain at that point.
Uncertain
Confidence 90%
· Jack Rhysider
EP 159
Details
“Could Ransom Man be him? Speculators were thinking it, but the investigator, Marko, was finding actual evidence that was pointing to him”
Jack Rhysider ·
offsets 28689–28825
Ransom Man
USES
Ylilauta
Ransom Man also posted the stolen records and threats on the clearweb forum Ylilauta.
Explicit
Confidence 99%
· Joe Tidy
EP 159
Details
“As well as posting on Torilauta, he posted it to a clearweb forum called Ylilauta”
Joe Tidy ·
offsets 10065–10146
Ransom Man
USES
Torilauta
Ransom Man used Torilauta to announce the Vastaamo compromise, threaten publication, and publish records.
Explicit
Confidence 99%
· Joe Tidy
EP 159
Details
“he posted it on the darknet on a website which is now gone, but it was called Torilauta”
Joe Tidy ·
offsets 7160–7245
Ryan
USES
DDoS attack
Ryan admits involvement in taking down Xbox Live and PlayStation Network in the DDoS attack.
Explicit
Confidence 94%
· Jack Rhysider
EP 159
Details
“this kid calling himself Ryan appearing on Sky News not hiding his face or voice at all, admitting to taking down Xbox Live and PlayStation”
Jack Rhysider ·
offsets 3701–3840
Julius Kivimaki
USES
Interpor Red Notice
An Interpol Red Notice was issued to help locate and arrest Julius Kivimaki; the notice was used as part of the investigation's pursuit of him.
Explicit
Confidence 78%
· Joe Tidy
EP 159
Details
“Marko does the quite extreme move of putting out an Interpol Red Notice to try and find out where he is”
Joe Tidy ·
offsets 29001–29104
Microsoft Office vulnerability
AFFECTS
Microsoft Office 2007
The episode identifies the vulnerability Greg ultimately found as the first disclosed vulnerability in Microsoft Office 2007.
Explicit
Confidence 95%
· Greg Linares
EP 160
Details
“we have indeed the first vulnerability in Microsoft Office”
Greg Linares ·
offsets 46317–46375
macro virus
AFFECTS
Microsoft Excel
Greg's macro virus modified Excel grade sheets and caused the school's Excel files to crash when a later column was added.
Explicit
Confidence 96%
· Greg Linares
EP 160
Details
“the virus would restore the doc — the sheets when teachers opened up the sheets. That caused the Excel files to crash”
Greg Linares ·
offsets 15528–15645
Microsoft Office vulnerability
AFFECTS
Microsoft Visio
The successful vulnerability was found in Visio, a product inside the Office suite.
Explicit
Confidence 99%
· Greg Linares
EP 160
Details
“it happens to be in Office Visio. It was another product inside the Office suite.”
Greg Linares ·
offsets 45084–45165
Li Feng
ASSOCIATED_WITH
eEye
Greg alleges that Li Feng was placed at eEye to identify and report eEye's Microsoft zero-days; the account is explicitly unconfirmed.
Uncertain
Confidence 72%
· Greg Linares
EP 160
Details
“Li Feng, he was working for us to identify zero-days that you guys may have found”
Greg Linares ·
offsets 52178–52259
“I can’t confirm that that story is true”
Jack Rhysider ·
offsets 53560–53599
Li Feng
ASSOCIATED_WITH
Microsoft
Greg alleges that Li Feng worked for Microsoft while being placed at eEye to obtain information about eEye's zero-days; Jack says the story could not be confirmed.
Uncertain
Confidence 72%
· Jack Rhysider
EP 160
Details
“Microsoft got someone to — a job at eEye”
Jack Rhysider ·
offsets 51091–51131
“I can’t confirm that that story is true”
Jack Rhysider ·
offsets 53560–53599
1IM punter
DEVELOPED_BY
Greg Linares
Greg says he made the 1IM punter after finding the AOL client vulnerability.
Explicit
Confidence 98%
· Greg Linares
EP 160
Details
“I remember finding that and making the 1IM punter back in the day.”
Greg Linares ·
offsets 10118–10184
macro virus
DEVELOPED_BY
Greg Linares
Greg says he wrote macro viruses, including a macro virus that modified his school's Excel grade records.
Explicit
Confidence 98%
· Greg Linares
EP 160
Details
“I made a macro virus that would look for my student ID number”
Greg Linares ·
offsets 12961–13022
1IM exploit
DISCOVERED_BY
Greg Linares
Greg says he was one of the first people to discover the 1IM exploit.
Explicit
Confidence 98%
· Greg Linares
EP 160
Details
“I was one of the first to discover the 1IM exploit.”
Greg Linares ·
offsets 9919–9970
Greg Linares
EXPLOITS
access-camera buffer overflow
Greg exploited an unpatched access-camera buffer overflow to gain control of the cameras.
Explicit
Confidence 99%
· Greg Linares
EP 160
Details
“there’s an access buffer overflow that allows you to control and gain access to every one of these cameras”
Greg Linares ·
offsets 81361–81467
1IM exploit
EXPLOITS
Integer overflow
The 1IM exploit used an integer overflow in the AOL client triggered by an excessively long font-size value.
Explicit
Confidence 99%
· Greg Linares
EP 160
Details
“the integer overflow in the AOL client when you sent a font size with a long enough number”
Greg Linares ·
offsets 10026–10116
corporate espionage allegation involving Li Feng
INVOLVES
Li Feng
The corporate-espionage allegation centers on Li Feng and alleged placement between Microsoft, eEye, and a foreign government entity.
Uncertain
Confidence 90%
· Jack Rhysider
EP 160
Details
“this is corporate espionage”
Jack Rhysider ·
offsets 51576–51603
“I can’t confirm that that story is true”
Jack Rhysider ·
offsets 53560–53599
eEye Office 2007 vulnerability disclosure
INVOLVES
Microsoft Office vulnerability
The eEye Office 2007 disclosure involved the vulnerability Greg found through fuzzing and subsequent validation without a debugger attached.
Explicit
Confidence 98%
· Jack Rhysider
EP 160
Details
“eEye found another zero-day, this time in the latest Microsoft Office”
Jack Rhysider ·
offsets 38508–38577
eEye Office 2007 vulnerability disclosure
INVOLVES
Microsoft
eEye reported the Office vulnerability to Microsoft so it could investigate and patch it before public disclosure.
Explicit
Confidence 99%
· Greg Linares
EP 160
Details
“then we report to Microsoft”
Greg Linares ·
offsets 38367–38394
Greg Linares
MEMBER_OF
eEye
Greg joined eEye as a researcher after the company noticed his public exploit and malware work.
Explicit
Confidence 99%
· Jack Rhysider
EP 160
Details
“eEye saw that Greg was writing a lot of malware and posting it publicly, and they liked that and decided to hire him”
Jack Rhysider ·
offsets 26240–26356
Greg Linares
USES
Olly
Greg used Olly as a debugger to inspect application assembly, registers, memory, and behavior.
Explicit
Confidence 99%
· Greg Linares
EP 160
Details
“Olly is a tool that you attach to your — any application that you want to see at low level”
Greg Linares ·
offsets 35456–35546