RaFa MEMBER_OF World of Hell
RaFa is described as a member of World of Hell.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I got in contact with a guy named RaFa who was a member of World of Hell”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
RaFa MEMBER_OF World of Hell
RaFa is described as a member of World of Hell.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I got in contact with a guy named RaFa who was a member of World of Hell”
Tommy DeVoss MEMBER_OF TDK
Tommy says he eventually joined the IRC hacker crew TDK, short for Those Damn Kids.
Explicit Confidence 99% · Jack Rhysider EP 60 Details
“he eventually joined an IRC hacker crew called TDK”
Tommy DeVoss MEMBER_OF World of Hell
Tommy says he started hacking with World of Hell and later describes defacing a website as part of that group.
Explicit Confidence 98% · Jack Rhysider EP 60 Details
“so he started hacking with World of Hell”
“I defaced my first website as part of World of Hell”
Tommy DeVoss MENTIONS Computer Fraud and Abuse Act
Tommy says he was charged with violating the Computer Fraud and Abuse Act after using the internet to make the bomb threat.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I was actually charged with violating The Computer Fraud and Abuse Act”
Tommy DeVoss MENTIONS Edward Snowden
Tommy cites Edward Snowden’s 2013 leaks when arguing that online activity is monitored by the US government.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“Thanks to Edward Snowden’s leaks back in 2013”
World of Hell TARGETS Yahoo
Tommy lists Yahoo.com.ph among the sites he or World of Hell targeted during their defacement activity.
Explicit Confidence 88% · Tommy DeVoss EP 60 Details
“Yahoo.com.ph, nokia.com, sony.com”
Tommy DeVoss USES SSRF
Tommy used the blacklist bypass across multiple endpoints for SSRF testing.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I ended up being able to bypass the blacklist in a total of fifteen or sixteen different end points for SSRF”
TDK USES server split
TDK used server splits to isolate servers and take over IRC channels.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“DDoS that server to split it off in the network and then they’d just basically take over the channel”
Tommy DeVoss USES blacklist bypass
Tommy found a way to bypass Nexus RF’s blacklist.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I found a bypass for their blacklist that they had used”
Tommy DeVoss USES AltaVista
Tommy says Dznutz instructed him to use Yahoo AltaVista to read material about hacking.
Explicit Confidence 96% · Tommy DeVoss EP 60 Details
“The first thing that he told me was go to Yahoo AltaVista. He was like, read everything that you can find about hacking.”
TDK used DDoS attacks against servers as part of IRC network conflicts.
Explicit Confidence 99% · Jack Rhysider EP 60 Details
“Then we’d DDoS that server to split it off in the network”
World of Hell USES Website defacement
World of Hell carried out website defacement, including defacements performed by Tommy as part of the group.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I defaced my first website as part of World of Hell”
Tommy DeVoss USES DDoS
Tommy says he DDoSed his school’s IP address to take down its internet connection.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I would actually DDoS my school’s IP address to take our internet down”
Tommy DeVoss USES remote code execution
Tommy obtained remote code execution on Yahoo servers through the ImageMagick vulnerability.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I actually got remote code execution on two of Yahoo’s servers”
Tommy DeVoss USES HackerOne
Tommy used HackerOne’s bug-bounty platform to report vulnerabilities and receive rewards.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I reported my first bug on HackerOne to Yahoo in March of 2016”
TDK members built botnets to identify servers associated with operators in target rooms.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“We would build botnets to go and check every single op in our target room”
NFC credit-card decryption-key attack AFFECTS NFC
The attack affected NFC credit cards by enabling decryption and access to card information when the decryption key was obtainable.
Explicit Confidence 97% · Samy Kamkar EP 61 Details
“you could actually just buy a chip with the decryption key”
National Security Agency ASSOCIATED_WITH Windows zero-days
Samy says the NSA stockpiled Windows vulnerabilities and zero-days; the episode presents this in the context of the NSA leaks.
Explicit Confidence 98% · Samy Kamkar EP 61 Details
“They stockpiled Windows vulnerabilities, zero-days that nobody knew about”
Samy worm DEVELOPED_BY Samy Kamkar
Samy says he wrote the virus that became the MySpace worm; Jack identifies it as the Samy worm.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“I realize oops, I just wrote a virus.”
Openpath DEVELOPED_BY Samy Kamkar
Samy says he started Openpath with friends and helped build its secure access-control business.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“I’ve started a company called Openpath with some friends”
Evercookie DEVELOPED_BY Samy Kamkar
Samy created the open-source Evercookie JavaScript library.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“I created this open-source JavaScript library called Evercookie”
Skyjack DEVELOPED_BY Samy Kamkar
Samy put his drone-hijacking proof of concept into the open-source Skyjack project.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“I put all of this into an open-source project called Skyjack”
NFC credit-card decryption-key attack DEVELOPED_BY Samy Kamkar
Samy created a proof-of-concept attack against additional NFC credit cards, including a VISA Chase card.
Explicit Confidence 98% · Samy Kamkar EP 61 Details
“I just created a proof-of-concept that opened up this to some additional credit cards”
MySpace worm INVOLVES MySpace
The incident affected the MySpace website, eventually taking the whole site offline.
Explicit Confidence 98% · Samy Kamkar EP 61 Details
“the whole site is down; the whole team is here working on it”
MySpace worm INVOLVES Samy worm
The MySpace incident involved the self-spreading Samy worm.
Explicit Confidence 99% · Jack Rhysider EP 61 Details
“Samy has just created a MySpace worm and it’s spreading”