SuperWall DEVELOPED_BY RockYou
RockYou built the SuperWall Facebook application.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“they built a Facebook app called SuperWall back in 2007”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
SuperWall DEVELOPED_BY RockYou
RockYou built the SuperWall Facebook application.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“they built a Facebook app called SuperWall back in 2007”
Have I Been Pwned? DEVELOPED_BY Troy Hunt
Troy Hunt says he runs the data breach notification service Have I Been Pwned?
Explicit Confidence 99% · Troy Hunt EP 33 Details
“I run the data breach notification service Have I Been Pwned?”
SQL injection vulnerability DISCOVERED_BY Imperva
A security researcher at Imperva identified the SQL injection vulnerability and notified RockYou.
Explicit Confidence 93% · Jack Rhysider EP 33 Details
“He notified RockYou of this vulnerability”
Tom EXPLOITS SQL injection vulnerability
Tom tested websites for SQL injection and exploited the vulnerability in csfd.cz and later rockyou.com.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“Tom saw this website was vulnerable to SQL injection and started seeing what kind of fun he could have.”
“He immediately started checking for himself and sure enough he was able to get right in”
RockYou INITIAL_ACCESS_VIA SQL injection
The RockYou breach began through a SQL injection vulnerability in rockyou.com.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“rockyou.com was vulnerable to SQL injection”
RockYou INVOLVES Federal Trade Commission
The Federal Trade Commission investigated the breach and fined RockYou over its handling of children's records.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“The FTC investigated the breach and found that RockYou had stored almost 180,000 children’s records”
RockYou INVOLVES Children’s Online Privacy Protection Act
The FTC determined that RockYou's handling of children's data violated requirements under COPPA.
Explicit Confidence 98% · Jack Rhysider EP 33 Details
“The FTC determined that RockYou had known that children were users on the site and they didn’t protect their data which put them in violation of these rules.”
Imperva was involved when a security researcher at the company warned RockYou about the vulnerability.
Explicit Confidence 98% · Jack Rhysider EP 33 Details
“a security researcher at Imperva saw the forum post that rockyou.com was vulnerable to a SQL injection”
RockYou INVOLVES SQL injection vulnerability
The breach involved RockYou's SQL injection vulnerability, which was later fixed after notification.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“They worked all weekend to resolve this SQL injection on their site”
Amichai Shulman MEMBER_OF Imperva
Amichai Shulman says he was working with Imperva by 2009 and had co-founded the company.
Explicit Confidence 99% · Amichai Shulman EP 33 Details
“by 2009 I was working with Imperva, a company that I founded in 2002”
Amichai Shulman MEMBER_OF Unit 8200
Amichai Shulman says he spent eight years in Unit 8200, the Israeli military division.
Explicit Confidence 96% · Amichai Shulman EP 33 Details
“I spent eight years in the military”
“he started out in Unit 8200, the secret Israeli military division”
RockYou applications required users to log in to MySpace, and RockYou stored those MySpace credentials.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“RockYou would capture these MySpace logins and store them on their own site again in clear text”
RockYou built and operated applications integrated with Facebook, including SuperWall.
Explicit Confidence 95% · Jack Rhysider EP 33 Details
“They were also making social media games, too. They were killing it on Facebook and MySpace”
Tom used BayWords to publish posts about websites he had hacked.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“So he gave BayWords a try. BayWords was a simple blogging platform”
Tom USES SQL injection
Tom used SQL injection through website login fields to query databases and obtain user data.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“he could issue SQL commands and query the database [00:10:00] right through the username field of the login page”
RockYou USES Plaintext password storage
RockYou stored user passwords and social-media credentials in clear text rather than hashing or encrypting them.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“RockYou had been storing the user passwords in clear text”
Kali Linux USES RockYou password list
Kali Linux is described as including the RockYou password list by default.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“Kali Linux, a popular hacking operation system, comes with the RockYou password list on it by default”
Tom USES RapidShare
Tom uploaded the extracted RockYou password list to RapidShare.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“He posted this to RapidShare, a popular file sharing site”
RockYou USES Password hashing
After the breach, RockYou began hashing its passwords.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“They started hashing their passwords after that, too.”
Hunter Moore ASSOCIATED_WITH revenge porn
Jack says Hunter helped popularize the term revenge porn, while describing Hunter’s site as a venue for such material.
Explicit Confidence 96% · Jack Rhysider EP 34 Details
“I think it was actually Hunter [00:20:00] who now popularized it.”
STOL ASSOCIATED_WITH revenge porn
STOL was dedicated to stolen nude photos; Jack says it was not quite revenge porn.
Uncertain Confidence 88% · Jack Rhysider EP 34 Details
“It’s not quite revenge porn; maybe stolen porn?”
Anon-IB ASSOCIATED_WITH revenge porn
Anon-IB became a destination for revenge porn and stolen nude images.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Anon-IB was now becoming the go-to place for revenge porn and also to post stolen nudes.”
Apple worked with the FBI and provided evidence for the investigation into the account compromises.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“Apple began working with the FBI to do an investigation”
Gary Jones ASSOCIATED_WITH Hunter Moore
Gary said Hunter offered him money, and the episode presents Gary as the hacker working with Hunter to obtain images.
Explicit Confidence 94% · Gary Jones EP 34 Details
“He offered me money.”
Jack Rhysider AUTHORED Darknet Diaries
Jack says the show is made by him.
Explicit Confidence 99% · Jack Rhysider EP 34 Details
“This show is made by me, zero hot Jack Rhysider”