Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Advanced Encryption Standard RELATED_TO DES

AES was released as a newer and substantially stronger cipher than DES.

Explicit Confidence 99% · Jack Rhysider EP 12 Details

“They released a new cypher called Advanced Encryption Standard, or AES.”

Jack Rhysider · offsets 21906–21977

Deep Crack SAME_AS DES Cracker

Jack says the EFF called the DES-cracking tool Deep Crack.

Explicit Confidence 99% · Jack Rhysider EP 12 Details

“The EFF called this tool Deep Crack”

Jack Rhysider · offsets 20757–20792

Clipper Chip USES cryptography

The Clipper Chip was developed as a mechanism for electronically encrypting data.

Explicit Confidence 97% · Jack Rhysider EP 12 Details

“a new way to encrypt data electronically using a specialized computer microchip”

Jack Rhysider · offsets 15421–15500

Enigma machine USES cryptography

The Enigma machine was used to code messages during World War II.

Explicit Confidence 94% · Cindy Cohn EP 12 Details

“the enigma machine which they were using to code”

Cindy Cohn · offsets 2079–2127

Julius Caesar USES cryptography

Cindy says Caesar used a cipher as an early example of cryptography.

Explicit Confidence 94% · Cindy Cohn EP 12 Details

“Caesar had a cypher that they used.”

Cindy Cohn · offsets 1951–1986

AT&T USES Clipper Chip

AT&T added the Clipper Chip to its phone after the government urged it to do so.

Explicit Confidence 99% · Jack Rhysider EP 12 Details

“AT&T added the Clipper Chip into the phone”

Jack Rhysider · offsets 15911–15953

PGP USES cryptography

PGP is presented as a cryptographic method used for secure communication.

Derived Confidence 91% · Jack Rhysider EP 12 Details

“Businesses started using PGP as a form of communicating trade secrets and sensitive data.”

Jack Rhysider · offsets 8674–8763

Internet Census of 2012 ASSOCIATED_WITH AusCERT

Parth worked on analyzing the Internet Census data while employed by AusCERT, although the project was not directly related to Australia.

Explicit Confidence 98% · Parth Shukla EP 13 Details

“I worked for AusCERT for about a year and a half and out of that, for a whole year, I was working on just this.”

Parth Shukla · offsets 24193–24304

Carna Botnet ASSOCIATED_WITH botnet

The researcher’s program was described as a botnet: software running on many unauthorized computers to perform a common task.

Explicit Confidence 99% · Jack Rhysider EP 13 Details

“They were creating a botnet. A botnet is a program running on many computers that are all working together to do the same task”

Jack Rhysider · offsets 2833–2960

Carna Botnet EXPLOITS weak default passwords

The Carna Botnet gained access to systems using weak default username/password combinations, including admin/admin and root/root.

Explicit Confidence 99% · Jack Rhysider EP 13 Details

“They used the following four username/password combinations: admin/admin, admin with no password, root/root, and root with no password.”

Jack Rhysider · offsets 1738–1873

Aidra Botnet EXPLOITS weak default passwords

Aidra used the same weak default-password vulnerability as the Carna Botnet.

Explicit Confidence 97% · Jack Rhysider EP 13 Details

“someone else was also building a botnet and using the exact same vulnerabilities”

Jack Rhysider · offsets 6839–6919

Lightaidra EXPLOITS weak default passwords

Parth said Lightaidra exploited the exact same vulnerability as the earlier botnets.

Explicit Confidence 99% · Parth Shukla EP 13 Details

“The tool called Lightaidra exploited the exact same vulnerability.”

Parth Shukla · offsets 22957–23023

Carna Botnet LEADS_TO Internet Census of 2012

After collecting billions of probes and data points with Carna, the researcher created the Internet Census of 2012 project.

Explicit Confidence 99% · Jack Rhysider EP 13 Details

“With all these billions of probes and data points collected from the Carna Botnet, it was now time for the researcher to pour through all this data”

Jack Rhysider · offsets 8857–9004

“The researcher called this project the Internet Census of 2012.”

Jack Rhysider · offsets 9035–9098

Parth Shukla MEMBER_OF AusCERT

Parth said he previously worked for AusCERT.

Explicit Confidence 99% · Parth Shukla EP 13 Details

“Previously before Google I used to work for AusCERT, the Australian Computer Emergency Response Team”

Parth Shukla · offsets 15372–15472

Parth Shukla MEMBER_OF Google

Parth identified himself as currently working as a security engineer at Google in Switzerland.

Explicit Confidence 99% · Parth Shukla EP 13 Details

“I’m currently a security engineer at Google here in Switzerland.”

Parth Shukla · offsets 15306–15370

Internet Census of 2012 MENTIONS MAC address

The Internet Census data included MAC addresses for the identified devices.

Explicit Confidence 99% · Parth Shukla EP 13 Details

“it just basically contained MAC addresses, manufacturers, RAM, hostname, CPU info, IPs, country codes of all the devices.”

Parth Shukla · offsets 17243–17364

Carna Botnet RELATED_TO Aidra Botnet

Aidra was found on some of the same computers as Carna and used the same vulnerabilities, creating an operational relationship between the two botnets.

Explicit Confidence 99% · Jack Rhysider EP 13 Details

“They were finding this other botnet on the same computers that the Carna Botnet was installed on. It was known as the Aidra Botnet.”

Jack Rhysider · offsets 6922–7054

“Aidra had infected over 30,000 of the same computers as the Carna Botnet.”

Jack Rhysider · offsets 7200–7273

Carna Botnet USES Telnet

The Carna Botnet scanned internet-connected systems running Telnet and used Telnet access during its propagation.

Explicit Confidence 98% · Jack Rhysider EP 13 Details

“The researcher created a program that would scan and find unprotected systems and then upload that same program to the systems it found”

Jack Rhysider · offsets 2635–2770

“The first mission was just to see how many devices were running Telnet with default passwords.”

Jack Rhysider · offsets 4918–5012

Aidra Botnet USES denial-of-service attack

Aidra was used to take down computers and was characterized as having malicious intent.

Explicit Confidence 90% · Jack Rhysider EP 13 Details

“It was being used to take down computers and did bad things.”

Jack Rhysider · offsets 7099–7159

Carna Botnet USES internet-wide scanning

The Carna Botnet was used to scan the entire internet, including IP addresses and the top 100 ports.

Explicit Confidence 99% · Jack Rhysider EP 13 Details

“This new mission was to use those vulnerable devices to do a full scan of the internet; not just checking for Telnet but pinging every IP and checking the top 100 ports.”

Jack Rhysider · offsets 5013–5182

Internet Census of 2012 USES GeoIP lookup

The Internet Census data was enriched with geographic locations using GeoIP lookups on IP addresses.

Explicit Confidence 99% · Jack Rhysider EP 13 Details

“GeoIP lookups were done on every IP address to determine where that computer was in the world.”

Jack Rhysider · offsets 9935–10029

Carna Botnet USES lateral movement

The Carna Botnet propagated by uploading itself to systems it found and using those systems to scan for additional systems.

Explicit Confidence 99% · Jack Rhysider EP 13 Details

“then upload that same program to the systems it found, and then put that system to work scanning for more systems.”

Jack Rhysider · offsets 2717–2831

Free Marty G ASSOCIATED_WITH Martin Gottesfeld

The Free Marty G campaign was established in support of Martin Gottesfeld while he was jailed awaiting trial.

Explicit Confidence 98% · Jack Rhysider EP 14 Details

“Martin’s wife has set up a campaign called Free Marty G”

Jack Rhysider · offsets 20296–20351

#OpJustina ATTRIBUTED_TO Anonymous

The campaign is presented as an Anonymous operation, with the video ending in a declaration that Operation Justina is engaged.

Explicit Confidence 99% · Anonymous EP 14 Details

“Operation Justina engaged.”

Anonymous · offsets 10046–10072

Boston Children’s Hospital network attack ATTRIBUTED_TO Anonymous

The attack is attributed in the episode to Anonymous, which publicly claimed responsibility for the campaign and was described as conducting the attacks.

Attributed Confidence 94% · Jack Rhysider EP 14 Details

“the hospital was under a severe attack from Anonymous”

Jack Rhysider · offsets 15130–15183