Defcon 21 - The Secret Life of SIM Cards

Karl Koscher & Eric Butler
August 1st--4th, 2013
Rio Hotel & Casino • Las Vegas, Nevada

[@zyldyks]

I think they really missed an opportunity to call their network "SimShady".

[@counterculturecocks]

Touche'

[@nixietubes]

at 31:56 it says "Shadysim" although i think it's a name of an app they made for it or part of a script

[@AureliusR]

@Tntmod54321 you clearly, clearly didn't get the original comment. WAY over your head.

[@paulgascoigne5343]

is it the real simshady?

[@pahanaama]

What?

[@killslay]

one of these defcon talks popped up in my suggested videos, hours later I'm deep down the KZbin rabbit hole.

[@nixietubes]

yup what happened to me was i was learning about the art of hacking and programming, Then i saw that defcon had some ted talk type shit and was like, oh dis gonna be some good shit and you were hours down the hole, i am weeks down dis hole

[@autofox1744]

Got here via Jason Scott talks... learning ALL the things now!

[@danhorus]

This is me right now. 4 to go on my Watch Later, haha

[@dirkstamavs]

same here checks date 2013 the fuck I have been missing out

[@JustAnotherThisDJ]

d1rksta same. Been watching these for 10 hours not got a clue what they're talking about tbh but it's clever as fuck.

[@nogosnoqt]

Gotta respect speaker 2. He was clearly uncomfortable with public speaking, but he dropped a huge load of interesting information.

[@datasilouk1995]

Very complicated but interesting to watch. I never realised that the SIM card was a smart CPU based card. I thought it was just a EEPROM.

[@chrissxMedia]

an* do you also think your HDD or SSD is just a spinning plate or flash cell? (not meant too offensive but this is obvious)

[@kaz_iaa]

@@chrissxMedia Necroposting while being an asshole. Nice.

[@statinskill]

Yes, it's likely an arm-m0 with 8-16K of ram with a serial interface and some non-volatile memory. Possibly the A3/A5 crypto and whatever crypto I'm potentially missing about UMTS and LTE might be in there in hardware as well. That's all it is. It has an ISO protocol for talking to it, bits send over a serial line and messages are along the lines of CLA INS LEN P1 P2. CLA and INS are class and instruction. Some instructions are even standardized like those to do with files, SELECT FILE, APPEND FILE etc. Files are not huge btw. There are a few bytes long maybe 512-1024 bytes max because the flash will be maybe anything from 8-32K. The smartcard OS firmware will usually observe wear levelling especially for files that get updated a lot. Without knowing too much I'll bet you have to access the GSM application by authenticating against a file using PIN1. Then you can use the instruction to calculate the reply to A3 crypto challenges. And then there are also ways to add your own SIM Toolkit applications. So you see, it's not at all just a piece of "dumb" flash memory. It definitely can do a hell of a lot more than your first home computer if you had one. Only the RAM is lots less, usually around 1-8K.

[@Reth_Hard]

I find it crazy to think that inside this tiny tiny chip there's a whole computer with better specs than a freaking NES (Nintendo). (Minus a few things like the GPU... I know...)

[@alerighi]

If it was only a simple EEPROM it would be so easy to clone. The reason you need a CPU inside is because that way the private keys never leave the SIM, but the phone simply sends commands to the SIM that computes the required cryptographic functions giving back the result, without the phone knowing the secret keys. That is the principle of operation of all smart cards (a SIM is just one of them), like the one in your credit card or your pay TV card.

[@will16320]

I was thinking this talk was out of date, then I saw it was from three years ago and realised these guys were the ones who pioneered sim apt

[@busteraycan]

what is sim apt?

[@ClonesDream]

@@busteraycan I second this

[@TheOnlySolipsist]

Lol I was thinking this comment was out of date then I realized it was from 3 years ago and realized the video was way out of date.

[@CrazyMineCuber]

@@TheOnlySolipsist I was thinking this comment to a comment was out of date. Any of you guys still alive?

[@assmonkey9202]

@@CrazyMineCuberthey are all in jail. Glowies got them

[@grilla6874]

the shot gave big man confidence

[@SeverityOne]

I used to work at a mobile service provider, where we had these little card reader/writers with which you could program these. From what I remember, we wrote our own little apps.

[@HappyBeezerStudios]

And here am I, 6 years later with my dual SIM phone...

[@asmolbean9300]

TIL that SIM cards have much more computational power than the Apollo 11 computer. Most people know that the Apollo 11 computer was primitive in contrast to today's technology, that even a £1 calculator has more power than it did, but it's amazing that SIM cards have up to 250kb of storage, 64kb ram and run at 30mhz while the Apollo 11 computer ran at 0.043mhz and had 4kb ram and a 32kb hard disk.

[@bravefastrabbit770]

and fools actually believe such technology managed communications between the earth and the moon....

[@cballe2288]

Absolutely fantastic work guys. You're an inspiration to us all.

[@SyphistPrime]

I would love to see a talk about actually running the GSM network. That would be interesting.

[@PatRiot-]

How quickly my inner nerd has come out after finding defcon!

[@peevi]

"This is used by the ISIS competitor, Google Wallet" LOL

[@nicolali4792]

I'm so glad to see this talk back. Ugh censorship.

[@gregory-thecomputermidwife9856]

Fug guys that's a lot of work and we'll prepped

[@srvfan42]

I want to know more about how they set up their own mobile network out in the middle of nowhere!

[@FurryWrecker911]

It's amazing how a lot of the stuff they're talking about back then that was experimental and new became standard practice years later.

[@tzisorey]

Interesting that the provider can load new applets through the air. I wonder what sort of auth is involved... Considering it's possible to set up a fake GSM base with SDR. Scary stuff.

[@shockingguy]

Tzisorey Tigerwuf Yeah I barely understand this stuff but I get it somebody could sneak something in that could be really powerful for them and damaging to you, stingray baby you’ve beenyou been Zucked!

[@eulemitbeule5426]

Yeah, probably a really good way for intelligence service to set up a wiretap... Just run a AT command to dial a number, turn the volume and responses on the display off and you just got yourself a nice mic in the room. Or send a sms to get your cell, etc. The possibilities are probably endless and it will run on every f*cking phone with no way to notice or delete it (srsly, who would check their SIM card for bugs?)

[@sharpfang]

*hackable*. They covered that. You send any junk to the card, it replies with a signed error message, you recover the key from the signature (weak hash) and sign your payload with that key.

[@dreadlock17]

Wow. And now "simjacker" is just made public

[@dreadlock17]

@@eulemitbeule5426 dude exactly what "simjacker" could do

[@ivragi]

But can you run Doom on those?

[@johnsausage]

7:32 If the SIM applet can run arbitrary commands on the phone, doesn't this basically mean that this is some way to "listen" to a phone? I mean arbitrary commands could also mean it can run commands in the background probably without showing anything to the user and therefor activate the microphone and transmit the data to the carrier (or to whomever).. right?

[@DangerousPictures]

39:11 back when isis was a payment...

[@stevebez2767]

Day mean when space station enc decode over smart net,pays?

[@JM-pq1hy]

Have you considered that maybe that's exactly what it still is? Terrorist payment method..... After all, ISIL is the group, so why the change? Those in charge like to name two or more things the same that seem not to be related, but actually are.

[@MyDadIsBillGates]

isis was also an egyptian goddess, are they also related? did she invent the payment method and birth the terrorist organization too?

[@yellowcrash10]

And their enemy was Google.

[@RobertBreckenridge13]

Wow, whoever recorded the sound or set the mic gain needs to listen to this at full volume with headphones on. My PC volume was at 75% and my KZbin volume was at 50%, and "welcome, everyone" almost blew my speakers out.

[@myboint]

Good stuff. Thanks for upload.

[@LordmonkeyTRM]

Sim Card is a computer...?! Mindblown.

[@tracezachdaniels4264]

SO SHWEEEETTT...much love Tee with LIONS NAMED LEO.[the music worldwide} so fun..

[@salbahis82]

in my country running application in simcard is still a common...

[@fuuzegfx]

Where are you from?

[@iant419]

justFuuZe Prolly south asia.

[@MamboBean343]

justFuuZe Going with Filipino. They're subscribed to a few Phillippines-based TV series channels. The Phillippines would make sense, too, given the nation's rather poor telco situation.

[@RealTheCrasher8]

I once tried to install an app from the internet onto a windows phone (back when they still were a thing) and not onto the SIM card. I wondered why it had this stange STK name. Now i know why i never got it to work.

[@DragoNate]

actually, the concept of things being stored on your SIM card that you can easily pop out and move to another device isn't awful in itself. i see the issue of where that _would_ have led things, but if we could just use it to simply move important data around, it would be nice.

[@Saturnringer]

Didn't know this I've had a Sim card even before a phone . interesting how a piece of smart card can be programmed in different ways.

[@edgarmartinez7099]

I can't find the programmable smartcards on ebay. Can anyone help with this? i want to purchase them but first I need to find them.

[@Anfros.]

So you if you could change the number dialed you could redirect the call to switch with a recording device/tap and then redirect to the original number dialed? Sounds like a good way to tap phone. But I have no experience with this tech so I really don't know if that would be possible.

[@MrDeadcows]

Something like that just happened to Estonian foreign minister. Check it out.

[@xAxMxWx]

Anders Fredriksson ever hear that wierd noise right before the ring when you call your drug dealer?

[@luci_ly]

I'd love to see a talk about other aspects of the network, like implementing the gsm protocol, but I'm also about 10 years late so I guess there isnt much use in asking now

[@Garbaz]

Why in the work would you run Java on such a limited system, that's crazy. But looking at 27:42 , craziness seems to be the norm.

[@Garbaz]

Rex2k10 That's disturbing. Why the hell would one put a Java VM on a µController? I even feel like I'm wasting efficiency when using C instead of Assembly.

[@ninjawarthog8580]

I believe the main reason was standardization to make it easier for third parties to write apps; reduce complaints from angry users that can't get their game/app to work on their new hand set, and probably a failed attempt at predicting the ways in which mobiles would develop.

[@Fennecbutt]

"Failed attempt". Lol you do realise Android, the most popular mobile phone operating system in the world supports the Java apis.

[@agvulpine]

Surely the reason JAVA was used instead of Python or some derivative of C is the total limited scope of people who program these things, ever. It's a tiny circle jerk of a few industry leaders, their circle of developers, and managers who have never written a line of code themselves but heard of JAVA on Linkedin.

[@peregrinusoblivione4967]

It is because it is a much safer language to develop with, and if you are going to have any idiot able to develop an app that can be accessed by something that is in every other person in the worlds pocket. You are going to want to avoid that shit storm. There are also Java elitists. The best thing Java did was lend its name to JavaScript.

[@BrainSeepsOut]

Before I got a Windows Phone smartphone I would always move my contacts to my SIM card to move between phones but no modern phone OS allows that anymore! Unless there's an app for that?

[@AnLaggy]

android does allow it, at least on samsung devices

[@0x7fffeeee83]

Anlaggy Laggy Samsung FTW

[@0x7fffeeee83]

***** What?

[@sanguinevitae]

***** Its android, android is the operating system. Samsung is the phone maker.

[@sanguinevitae]

>mfw put down by totally not op *:(*

[@barryhernandez6428]

Great vid As always 👍🤜🤛💪

[@landlockedviking]

Imagine taking that back to commodore 64 time...

[@meezrahman]

watching in 2024 Thx😮

[@lawabidingcitizen1-e7f]

Very helpful video. Well done!

[@HackersOnBoard]

Hello dear friends The 2nd December 2019 we get notified of the censorship of our channel by the new KZbin Guidelines (who change every 6 months) because of "Content reusing without including substantial original commentary or educational value" so in consequence the Monetization of our channel was disabled. This is a little bit tricky because these Guidelines wasn't there in 2013, 2014, 2015 and so on... It is abnormal to change the rules during a game ...even more before Christmas! Since 2013 we are trying to share the best Security Conference on our channel and we need your help to keep it up. As you already know I was fighting the disease since the last 2 years and it's difficult and without resource and support I wouldn't be able to keep up on this way. You can support us on Patreon if you find our work valuable. You can also express your dissatisfaction regarding our situation to KZbin on Twitter, Facebook, Instagram and wherever you can. to help us regain our rights. Your support in anyway will be truly appreciated Thanks guys for taking time reading me and stay tuned! Merry Christmas to you all and God bless you all! www.patreon.com/HackersOnBoard Bitcoin Wallet: 1NWM4upgKj8iF7zknzmnHG8Mm2pvAyTHqc

[@jacobdavidcunningham1440]

8:10 lol just jumps in this is a neat talk, I did not realize a SIM was a computer, thought it just held some memory or something

[@PhilXavierSierraJones]

I have a SIM card that, upon first boot, forces the phone into programming mode, connects to a cell tower, registers the phone, writes it to EEPROM then never calls the function ever again, effectively turning it into an one-time card.

[@starwatching5216]

That's pretty interesting, care to share more about that? Do you have any documentation/videos talking about this?

[@FFVison]

The name, ShadyTel describes pretty much any telecom nowadays

[@rentacowisgoogle]

I hope ISIS Co. changed up its branding...

[@rentacowisgoogle]

Only need to read the url haha

[@Axodus]

+rentacow fuckin isis ruined them ):

[@stevebez2767]

Trashed the shuttle like some KZbin commenter asked,challenger next,planes?

[@davee1233]

Softcard now

[@adrianalaniz6057]

Is there a way to know if this has been done to me? Very confident it is happening by the misleading information I get while on my phone. I get phone calls from different numbers with people who have the same voice claiming they’re from different companies, plus I haven’t had an amber alert the past year or two.I also seen a comment where they worked at a service provider where they had SIM card readers/writers, & my provider had me switch my sims card about 2 times back to back when I’d go to pay my phone bill. Seemed odd to me

[@Catcrumbs]

That's interesting. I never knew there were mobiles without SIMs. How do you bring your number from one phone to another that way?

[@Ewr42]

I think the phone is network bound, so you get a compulsory subscription for the network companies which collaborate with phone companies. I think If you lose a phone you buy another one of the same network version and calls their customer service to cancel the old number or the new one and choose which will be used I'm really not sure tho

[@colinbyerly5212]

Thanks for the idea , as new products that are now very interchangeable and allow switching and reading and writing and copy and inter device direct wire connections . As well as transfer of complete Lynix portable device add ons with diverse cell phone multiple adapters at high speed and so much more ability’s . That it’s like a explosion of device uses that never before was so affordable and micro processed and diverse that only ones creative excitement will limit one especially with satellite and ham station and frequency scanners to really make AI a co pilot with a crew working to develop what you simply question if it’s only possible then it’s done before you finish talking with predictive technology .

[@IamTristanC]

39:49 boy did that name not age well since 2013

[@RichardFRicardo]

Good Job! Dealing with SIM-SWAPPING problem in Africa. Any ideas?

[@Some_Beach]

That NFC card company's name probably didn't age well

[@nnslife]

Nice talk, interesting to hear about what happens in SIM-cards. He said "ISIS" at 39:51. I am reporting this video for terrorism.

[@kaioker]

watching in 2017, boy how names change meaning...

[@LaskyLabs]

I really hope SIM cards have gotten less complicated...

[@imsamurai3000]

Do you have permission to monetize these defcon conferences? This is not really your content.

[@ZarkowsWorld]

Darren >> There is no fair use in copying someones work and re-posting it in verbatim. And absolutely not to monetize it.

[@uzaircassim4373]

Ads Darren... Ads

[@shockingguy]

Just watched it, no ads here

[@mathewmccloskey8242]

@D C That's not how fair use works...

[@issacnewton9443]

@@shockingguy I got 10 ads, maybe you have an ad blocker because it's definitely monetized.

[@emeliedenmodige2470]

development in this area?

[@grilla6874]

great talk

[@icemine2418]

why did yt recommed me this

[@seanrobinson6035]

Where do you buy a blank SIM Card

[@MStrickkk]

The Other Onion Router?

[@ricardoruiz3542]

could you use this to execute arbitrary code? In the right environment?

[@neoqueto]

I wonder if one can write apps in assembly for it and somehow make it interface with the hardware. A SIM card is literally more powerful than a C64.

[@statinskill]

neoqueto -- Maybe there is but that might be a feature on specific SIM cards. What I have found is just by going to Wikipedia's sim toolkit page and then clicking on the ETSI standards document in the references. That's an eye opener just by itself, because it describes the command the phone accepts from the SIM and how the SIM can f with your phone in many ways. But the Standard you want is ETSI TS 131.113 which talks about the USAT interpreter and it's programming environment. It seems to be just a byte code interpreter with specific data types for text messages etc. And skimming through the manual I find in section 8.8 "Execute Native Command". The instruction code is 47H/C7H followed by length in bytes, then some stuff and finally a 16 bit NCI. You don't get to just jump anywhere you want, you have to give it a native call identifier. And that's where I'll bet it gets card specific. You're going to have to tell the card os to create a new application for you with a certain AID. In that command you're going to have to tell it how many bytes long. Then you would create the application files including writing your binary to a file and setting a special execute bit on it. The AID is probably the NCI. But for that you are going to have to have a USIM that supports this business, has space available and had its access rules/protections set so you can do it, or you have the crypto keys to unlock these features. And then I wondered if you can buy fresh un programmed USIM cards online and it turns out you easily can for a very reasonable price. I have no idea what they are the ones I looked at and I would only buy if they can supply the keys and the technical manual. You will likely deal with Chinese who don't speak much English. Now that's what's possible on the interface between the SIM and the phone and you have been educated on it for free. As a bonus I am just going to throw in I bet you didn't know your sdcards contained a arm core you can run code on using vendor specific sdcard commands.

[@tr233]

being java developer myself, i pretty amazed where java can run, well it would be coll if the showed actualy spy app which can record audio on the sim card!

[@FXP1688]

I'm pretty amazed what Java shouldn't have run. That's just painful to watch.

[@LaLaLand.Germany]

I torched my SIM after this... Bad SIM, bad, bad... If these nerds figured this out, what could "security" agencies do? What is happening? Did i fall down the rabbit hole by watching this?

[@nikhilrd7686]

hey guys I am graduated in Computer science engineering.I am interested to pursue Master's.Please help me in choosing the domain in master's...

[@SuperAWaC]

so sms applet programmers are like modern day PLC programmers lol

[@annacichocka7734]

No body is safe from shadism aka sadism LMAOOOO

[@DavidDavida]

whats with allaAds again??

[@peyton_uwu]

wheres the doom port for sim cards cmon people we're waiting

[@AlexCheerNZ]

in NZ we have Semble which requires you to upgrade your sim to a more secure sim. would it use SWP?

[@Div1ne_1]

But can it run crysis?

[@leighabrown2992]

Nice.

[@rojoladybug2140]

My family clone every phone and new sim i get

[@genericdeveloper3966]

I don't get it

[@brickwilbur9805]

HELP ANYONE WITH SOME ANDROID SKILLS! I HAVE BEEN ATTACKED. A few days ago, while watching a KZbin video(via the App) on my Samsung Galaxy S20 FE 5G, the left half of the video portion was covered with a pinkish/orangish screen with the words "MICROWAVE SPY CAMERA 1.XXXX" (where xxxx was 4 digits that I don't remember). After about 20 seconds, I clicked the next video and the exact same thing occurred. I then clicked back to the previous video and the video didn't have this "notice". Then I returned to the new video and it was no longer there either! I played one more completely different video and it wasn't on it either. I tried to look in the developer options for how to see active programs running and it listed about 20, but nothing that stood out as suspicious. I just now put the phone in airplane mode. How can I inspect my phone for evidence of this "screen notice"? Maybe some kind of cache files containing the "screen notice" or whatever? Is there a way to get a dump of ALL processes running before it's too late and it terminates, or the cache gets deleted? I would like to get proof this exists on my phone. Need evidence. Please help ASAP!!

[@VidarrKerr]

This was very convoluted. Like many of these Defcon lectures, most of this info is already documented and easier to read and comprehend from the original sources -- rather than the half-assed, reverse engineered, game these "hackers" play.

[@mikesmith-kt9wj]

So where are these bytes being sent? From the simcard to the phone?? What if I want these bytes sent to my lab top???

[@Nitrxgen]

as much as i *love* very in-depth talks into protocols and communications, and i do love this one, but the speakers tutting between each sentence is driving me insane, i can't ignore it :(

[@Seth9809]

Why is their ads on this? Did you present this?

[@herauthon]

What about Android and Security ? Is Rooting and moving to some other OS a good security thing - i wonder Because what are the next security steps and how mature is security on 'smart'-Phones ?

[@movingelectrons]

how did they start their own telco network though??? thats what i wanted to know...

[@shawnireland1197]

Probably a fem-to-cell or reverse engineered one and setting Sim card to connect to it..

[@movingelectrons]

@@shawnireland1197 thank you! still would be nice to have some concrete data on what was used and how

[@grog8164]

What do you mean by secure bitcoin transaction 37:37 ?

[@yashguptta]

If the sim keys cant be changed so how the cloning of it is done??

[@davemacnicol8404]

They really do police themselves on here. Very heavy with technical details and and general capabilities but nothing practical or really relevant. How companies use our SIM and what are the pros and cons of sim phones? Is the burner phone really a thing and how to keep your opsec tight? Capabilities plugged in and on VS outside of phone or inside phone off? Possible USB compatibility for loading direct to sim or pull from? What's the worst possible trouble someone can give you by hacking or otherwise having access to your SIM? I mean the audience are wannabes or amateurs mostly, but still, at least make it relevant to Defcon

[@arielaye3648]

thanks actualfactsbot

[@EthanSeville]

I have SIM toolkit on my OnePlus 2 but when I open it just closes 32:56

[@BOMBOVA]

quite cool,

[@kiiikoooPT]

Ahm and it works like this ahm and it do that ahm... The part I really got was the ahm... lol Must be really hard to make presentation in front of a big audience thats why they keep the ahmmmm :) looks like a yoga session ;)

[@glennsprigg2378]

Francisco Oliveira I noticed that you use a real name, and real photo, like i do.... but please be constructive. This lad, (or 98% of us) may not be a 'professional' speaker/orator/spokeman/function-compere and may be a bit nervous. He's not trying to compete with Hollywood pros but trying get a tech topic across. Their forum's about real people, not a fake congressman speech with white teeth xx Anyway... hello where ever you are.... from sunny Australia....

[@boxbox6290]

Glenn Sprigg alister cook england captain says uhhmmm uhmmm ummmm uhmmmmm aahhmmmm

[@DaytonPid]

He keeps ranting on about little public information about sim cards. One word, Google. There is TONS of information.

[@wolfzap]

No sound?

[@georgei2480]

If you have such limited capacity for these "smart cards" why not program in C++ at the metal layer instead of bloating the card with a JC-VM?

[@jcmmmbrains2718]

I made the mistake of noticing all of the "umm's" ..hard to focus on the talk now

[@zadtheinhaler]

JC MmmBrains it wasn't the "umms" for me, it was the lip-smacking noises that drove me spare, that both speakers did it was maddening.

[@SummerFunMan]

And what happens if, as a new speaker there at Defecation Con, you *aren't* a drinker and would refuse any kind of alcoholic drink even once?

[@rentacowisgoogle]

+Maxx Fordham If you give a good speech they will probably leave you alone. Otherwise GTFO.

[@SummerFunMan]

Well actually, rentacow, these guys and others already *were* giving a good speech, but they still had them take a drink -- just because it was their *first* speech. So no, it's not about how good the speech is. So if there's someone who has an *actual* answer on what their reaction might be if you politely declined the drink like I would, I'd love to hear your answer. Thanks, if so.

[@QuantumPlurality]

+Maxx Fordham you have to understand that these aren't normal nerds, they are a secret satanic cult who worship alcohol as a divine conduit. So naturally, if you refused to drink you would be ritualy disembowled on a pentagram covered alter, and the alpha-nerd would feast on your still beating heart.

[@SummerFunMan]

(Missing hyphen from "still[-]beating" set aside...) Yeah, huh, QuantumPlurality? :-P

[@SummerFunMan]

Well, water or not, Charlie Powell, the word "shot" need not be encased in quotation marks (if you use anything, it'd be double to start with anyway), since even if it's not alcoholic, the little amount in a shot glass is still a shot. Okay, so *maybe* this convention has a question on your application form asking you if you drink alcohol, and you could mark "no," and they might bring you something other than that for your mid-to-end-speech toast. Well, how do you know about the supposed water-swigging guy?

[@John-ul4qt]

lol at 8:10-8:15

[@vanjabrusic5503]

Exellent evrything my chooices my videa

[@hirstytechno]

Karl Koscher & Eric Butler. AKA the virgin brothers

[@DemocracyManifest-vc5jn]

Great talk but these talkers were fighting for attention and need to work on their teamwork. Geez how old are they. Maybe they’re just excited about their talk?

[@thunderpop20]

I got my business card and want to put a website up

[@StriKe_jk]

eh.. ehm..

[@xAxMxWx]

666

[@nonnobissolum]

Ya know, I don't understand a damned thing they're talking about....

[@kaioker]

watching in 2017, "....this system is used by ISIS...." huh? what? did i miss something?

[@bdnugget]

Some things are worse than ISIS, like static.fjcdn.com/pictures/Turbo+anal+isis_b53324_5508709.jpg

[@goatcheeseguru7976]

isis?!

[@goatcheeseguru7976]

I bet stock for that company plummeted...