In this episode we meet Elliot Alderson (@fs0c131y) from Twitter. Who is this strange masked person? What adventures have they gotten themselves into? Many stories will be told. The mask will be lifted. Sponsors This episode was sponsored by Thinkst Canary. Their canaries attract malicious actors in your network and then send you an alert if someone tries to access them. Great early warning system for knowing when someone is snooping around where they shouldn’t be. Check them out at https://canary.tools. Go to https://nordvpn.com/darknet to get 70% off a 3 year plan and use code darknet for an extra month for free! Learn more about your ad choices. Visit podcastchoices.com/adchoices
Jack Recider shares some profound life lessons from TV show Mr. Robot and introduces the theme of true stories from the dark side of the internet.
DRATA offers continuous monitoring and visibility into your risk, security controls, and audit readiness for various compliance standards such as SOC 2, ISO 27001, GDPR, and HIPAA, among others. The platform streamlines compliance for over 14 frameworks and automates custom frameworks and controls, making it a trusted compliance partner for companies like Notion, Lemonade, and Bamboo HR.
The Donald Daters app, specifically created for Donald Trump supporters to find each other, was found to have a serious security flaw. Personal user data was stored in an online database using Firebase, which had no security protocols in place.
The host questions the balance of publicly shaming companies versus helping them when it comes to finding vulnerabilities that could threaten user data.
Aadhaar cards in India are linked to personal data such as bank accounts and SIM cards, making them a prime target for hackers and sharing this information publicly can have serious consequences for citizens.
The speaker shares a personal experience where someone managed to obtain all his personal information including phone numbers, email address, photos, and name. Although the speaker is a public person, some information was still accessed through Adar vulnerability.
The reaction of 63 Red to being named and shamed by a security researcher could set a dangerous precedent for the community and send a bad message. The researcher, who offers free security assessments, highlighted the risks of poorly built websites and applications, exposing the vulnerability of the new ad-hoc app recently launched by 63 Red.
A discussion on the difference between finding vulnerabilities and exploiting them, and the ethical responsibilities of security researchers.