Person
person:elliot_alderson
Also: @fs0c131y, Elliot
Online identity used by Robert Baptiste on Twitter; the episode presents this as a pseudonymous identity distinct from his real name.
Online identity used by Robert Baptiste on Twitter; the episode presents this as a pseudonymous identity distinct from his real name.
“his name is Elliot Alderson”
“Elliot Alderson on Twitter has 120,000 followers”
Person cited as having first tweeted about a hack of an Indian legislative assembly website.
“I saw Elliot Alderson tweeting about this first.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Reverse engineering | Explicit | 49 |
| outgoing | USES | Android | Explicit | 49 |
| outgoing | USES | security research without authorization | Explicit | 49 |
| outgoing | USES | APK | Explicit | 49 |
| outgoing | USES | Google search queries | Explicit | 49 |
| outgoing | USES | web scraping | Explicit | 49 |
| outgoing | USES | Python | Explicit | 49 |
| outgoing | USES | GitHub | Explicit | 49 |
| outgoing | USES | Have I Been Pwned? | Explicit | 49 |
| outgoing | USES | doxing | Uncertain | 49 |
| incoming | SAME_AS | Robert Baptiste | Explicit | 49 |
| incoming | DISCOVERED_BY | Firebase security rules misconfiguration | Explicit | 49 |
| incoming | DISCOVERED_BY | Aadhaar web application weaknesses | Explicit | 49 |
| incoming | DISCOVERED_BY | Narendra Modi website upload vulnerability | Explicit | 49 |
| incoming | DISCOVERED_BY | 63red API vulnerability | Explicit | 49 |
Robert Baptiste SAME_AS Elliot Alderson
Robert Baptiste uses Elliot Alderson as his Twitter identity and says he can be called Robert or Elliot.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“he said his name is Robert Baptiste”
“You can call me Baptiste, Robert, Elliot.”
Elliot Alderson USES Reverse engineering
Elliot posts useful information about reverse-engineering and specializes in reverse-engineering applications.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“he’s posting real and useful information about reverse-engineering”
“he loves reverse-engineering them”
Elliot Alderson USES Android
Elliot's expertise is in Android applications, and he began his career as an Android developer.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“Robert’s expertise is in Android applications”
“He started his career as an Android developer”
Elliot Alderson USES security research without authorization
Elliot performs vulnerability research on applications without explicit authorization, describing himself as between a white hat and a grey hat.
Explicit Confidence 99% · Elliot Alderson EP 49 Details
“I don’t have the authorization, the explicit authorization to find these kinds of vulnerabilities.”
“You can consider me between the white hat and the grey hat”
Elliot Alderson USES APK
Elliot moved the Donald Daters APK to a computer, extracted its files, and decompiled the application.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“Elliot moved the APK from his phone to the computer, then he extracted the files from the APK and decompiled the app.”
Firebase security rules misconfiguration DISCOVERED_BY Elliot Alderson
Elliot discovered the Firebase exposure while inspecting the Donald Daters application.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“Elliot took this Firebase URL that he found in the app and tried to see if he could see what’s in the Donald Dater’s database.”
Elliot Alderson USES Google search queries
Elliot used Google search queries to locate publicly exposed Aadhaar cards and numbers.
Explicit Confidence 99% · Elliot Alderson EP 49 Details
“with some pretty good search query, I found a lot of Aadhaar cards”
Elliot Alderson USES web scraping
Elliot created an automatic scraper to retrieve Aadhaar data from publicly accessible sources.
Explicit Confidence 99% · Elliot Alderson EP 49 Details
“I created an automatic scraper in order to retrieve all the data automatically.”
Elliot Alderson USES Python
Elliot published the Python script used in his Aadhaar search challenge.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“he put his Google searches and Python script onto his GitHub account”
Elliot Alderson USES GitHub
Elliot published his Aadhaar search queries and Python script on GitHub.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“onto his GitHub account and published it for everyone to see”
Aadhaar web application weaknesses DISCOVERED_BY Elliot Alderson
Elliot says he found five or six issues in the Aadhaar web application after followers directed him to it.
Explicit Confidence 99% · Elliot Alderson EP 49 Details
“I found five or six different issue in their application”
Narendra Modi website upload vulnerability DISCOVERED_BY Elliot Alderson
Elliot discovered a vulnerability in Narendra Modi's website that allowed arbitrary file uploads.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“He discovered a vulnerability on it which allowed him to upload whatever file he wanted to their site.”
63red API vulnerability DISCOVERED_BY Elliot Alderson
Elliot says he quickly found a major vulnerability in the 63red API.
Explicit Confidence 99% · Elliot Alderson EP 49 Details
“Very quickly I managed to find a big vulnerability in their API.”
Elliot Alderson USES Have I Been Pwned?
Elliot checked R S Sharma's email address against Have I Been Pwned and found it in a breach.
Explicit Confidence 99% · Jack Rhysider EP 49 Details
“Elliot checked his e-mail in haveibeenpwned.com and yep, the e-mail was in a breach as well.”
Elliot Alderson USES doxing
Elliot explicitly rejects characterizing his redacted publication about R S Sharma as doxing, while describing doxing as bad.
Uncertain Confidence 84% · Elliot Alderson EP 49 Details
“Doxing is very, very bad and people shouldn’t do it.”
“This is not doxing. The goal was not to dox him.”