Samy Kamkar MEMBER_OF Fonality
Samy helped start Fonality and later worked there.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“that’s when we started a company called Fonality”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Samy Kamkar MEMBER_OF Fonality
Samy helped start Fonality and later worked there.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“that’s when we started a company called Fonality”
Samy Kamkar USES Counter-Strike
Samy played Counter-Strike and investigated its audio and process behavior to create cheats.
Explicit Confidence 99% · Jack Rhysider EP 61 Details
“Counter-Strike was his favorite game”
Skyjack USES Raspberry Pi
Skyjack runs on a Raspberry Pi with wireless transceivers attached.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“I took a Raspberry Pi Linux computer, I put my software on it”
Samy worm USES lateral movement
The worm self-propagated from profile to profile through visitors who acquired the code.
Explicit Confidence 98% · Jack Rhysider EP 61 Details
“It just kept spreading.”
Samy Kamkar USES traffic-data spoofing
Samy created a proof of concept that sent fake Android-device traffic data to Google to make a route appear congested.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“all those fake devices, would send up information to Google saying hey, I’m one of these Android devices and I’m moving zero miles per hour”
National Security Agency USES Evercookie
The episode says classified documents indicated that the NSA sometimes used Evercookie to track users through Tor.
Attributed Confidence 94% · Jack Rhysider EP 61 Details
“the NSA sometimes uses Evercookie to track its users through Tor”
Samy Kamkar USES aim bot
Samy wrote aim bots for Counter-Strike cheats.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“Just writing aim bots”
Samy Kamkar USES side-channel attack
Samy demonstrated timing and power analysis using acoustic signals from a computer's processor to recover cryptographic keys.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“I can do timing and power analysis”
Samy Kamkar USES Arduino
Samy investigated whether a low-cost Arduino could perform side-channel attacks.
Explicit Confidence 98% · Samy Kamkar EP 61 Details
“on a two-dollar chip or an Arduino”
Samy Kamkar USES client-side validation bypass
Samy bypassed MySpace's client-side photo-count validation and submitted additional photos directly to the API server.
Explicit Confidence 99% · Jack Rhysider EP 61 Details
“he could bypass this validation and talk directly to the API server”
Openpath uses TLS as part of its secure phone-based access-control technology.
Explicit Confidence 98% · Samy Kamkar EP 61 Details
“We have things like TLS, we have AES”
Evercookie USES Flash cookies
Evercookie stores tracking identifiers in Flash cookies as one of multiple local-storage mechanisms.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“you’d store it in Flash cookies”
Skyjack USES drone hijacking
Skyjack was designed to hijack nearby wireless drones and control them as a swarm.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“it would then hijack and take over that drone”
Samy Kamkar USES packet sniffing
Samy used packet sniffing while analyzing Counter-Strike information.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“I started learning about packet sniffing”
Samy worm USES JavaScript
The worm used JavaScript that executed in visitors' browsers and copied itself to their profiles.
Explicit Confidence 99% · Jack Rhysider EP 61 Details
“he could get whoever visited his profile to execute the JavaScript code that he wrote”
Samy Kamkar USES DLL function hooking
Samy intercepted function calls within Counter-Strike DLLs to obtain positional information and alter game rendering.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“intercepting function calls within the DLLs of Counter-Strike itself”
Samy worm USES cross-site scripting
The worm propagated by causing profile visitors' browsers to execute JavaScript through a MySpace profile injection.
Derived Confidence 96% · Jack Rhysider EP 61 Details
“the code to add Samy as a friend was copied to that person’s profile”
Samy Kamkar USES PunkBuster
Samy treated PunkBuster's anti-cheat software as the target of a cat-and-mouse engineering effort.
Explicit Confidence 95% · Samy Kamkar EP 61 Details
“I was now playing against these engineers on PunkBuster”
Firefox USES Google geolocation API
Samy investigated HTML5 geolocation in a Firefox beta and found that the browser returned his exact location.
Explicit Confidence 95% · Samy Kamkar EP 61 Details
“I saw this thing about HTML 5 geo-location in a Firefox beta”
Google USES wardriving
Samy concluded that Android phones collect nearby Wi-Fi MAC addresses and signal strengths with GPS data, functioning as wardriving devices for Google.
Explicit Confidence 98% · Samy Kamkar EP 61 Details
“every Android phone in existence is a wardriving machine for Google”
Samy Kamkar USES memory injection
Samy used memory injection while developing Counter-Strike cheats.
Explicit Confidence 98% · Samy Kamkar EP 61 Details
“and then memory injection”
Openpath uses AES as part of its secure phone-based access-control technology.
Explicit Confidence 98% · Samy Kamkar EP 61 Details
“We have things like TLS, we have AES”
Samy Kamkar USES cross-site scripting
Samy found a way to execute JavaScript within a CSS tag on MySpace profiles.
Explicit Confidence 99% · Samy Kamkar EP 61 Details
“I found a way to execute JavaScript within a CSS tag”
Cyber Security Associates ASSOCIATED_WITH National Cyber Security Centre
CSA partnered with the NCSC to create a cyber-zone and teach students about cybersecurity.
Explicit Confidence 99% · Jack Rhysider EP 62 Details
“the NCSC partnered with CSA to help hold classes and teach students and teenagers more about cyber-security”
Bomb-threat allegations against US targets ASSOCIATED_WITH Cameron
Cam was convicted in connection with the bomb-threat allegations, although he says he had nothing to do with them and denied sending the relevant tweet.
Uncertain Confidence 87% · Cameron EP 62 Details
“I got charged for the bomb threats as well.”
“He tells me he had nothing to do with these bomb threats”