Her Never-Ending Quest to Make Zero Days Hard🎙Darknet Diaries Ep. 127: Maddie

Maddie Stone's day job at Google is to squash million-dollar bugs: The vulnerabilities that criminals and nation states pay BIG bucks to know about and exploit. Her work protects activists, journalists - and ultimately everyone - from the malware lurking around every corner of the Internet.
Visit darknetdiaries... for a list of sources, full transcripts, and to listen to all episodes.

[@ScottCalvinsClause]

I listen to your content in podcast format while walking my dog, then watch it again when you release it on KZbin. I know nothing about the topic but love learning.

[@ExactConsciousness]

I find it really interesting and presented in an easy listening way.

[@MygenteTV]

What wait?! He make videos of these podcasts? Where. I be doing the same thing you do, while out with my dog or driving for work

[@ScottCalvinsClause]

@@MygenteTV I listen to it on castbox but I'm sure it's on other platforms under Darknet Diaries.

[@MygenteTV]

@@ScottCalvinsClause I see, I live in Europe so I don't know this app you are talking about. But I will dig more into it

[@RaverOperatorGeeza]

I listen whilst cooking or washing up or working when not receiving phone calls (when I can)! It's a great interest, and change from horror stories about ghosts and things that I'm not super into really, this is far more interesting and with a new listener / subscriber, I'm hooked!

[@ArturoGonzalez-uz1by]

I was going to home after work but after listening to Maddie talk about this stuff I decided…I better go study a few hours….MS in cybersecurity I love this stuff

[@ArturoGonzalez-uz1by]

Looks like a scam is going on

[@andoriannationalist3738]

Ever read the comments and see how many others are also getting a degree in Cyber security? I went to school for RN (BSN). I was worried there was too many people going into other areas so Nursing I was guaranteed to have work. Hate it. 20 years of pure hell working with clucking hens. Go for the cyber security degree.

[@MygenteTV]

This is crazy, I was exploiting a Linux server and it took me 3 days( finally got it yesterday) to understand why I couldn't get a reverse shell from that box, and just as in this video I was missing a stupid quote( " ) in my shellcode. Programing/hacking is beautiful but the only ugly thing about it, is that a whole project can go wrong over a letter or character

[@harstar12345]

You are wrong, that is the beauty.

[@MygenteTV]

@@harstar12345 Lol no, how is this the beauty? I was debugging my exploit for 3 days trying to understand what was wrong. As matter of facts many times you have the right exploit at hand and end up changing it or doing unnecessary mod. Is like when you do something on python even a extra Tab space between 2 string or a little and you are done.

[@dersg1freak]

@@MygenteTV sometimes it really feels like computers arent deterministic, doesnt it? :D

[@MygenteTV]

@@dersg1freak what do you mean?

[@dersg1freak]

Its just a joke on human error really. It can be tough to spot mistakes - that has driven me nuts before and i joke about it saying the machine is indeterministic even though the problem sits in front of the computer not inside ;)

[@RedRavenRuler]

Im so glad the algorithm fed me your content. I listen to it while I work, it is presented in such a way it's easy to digest so I can still retain what you're telling us. Ive gotten a few coworkers into it now to and we have been pkaying the "have you listened to this one yet" game haha. So much epic backlog to work through.

[@Stevekitty2369]

I listen to you pod cast and KZbin videos all the time!!! You got my interest in learning coding and ethical hacking. I always was interested in it but after years of factory work my back is kinda busted 😸. So I'm diving head first into all this now in a very active way. Thank you so much my man

[@UToobSteak]

Right there with you, bro. I had a spinal fusion a few years ago. I need to get off my feet! I've been playing on hackthissite and picoctf to learn as much as I can. Also, I use sololearn on my phone to learn python, php, etc...

[@Stevekitty2369]

@@UToobSteak check out world of haiku. That's what I been on, I like tryhackme but seems like they hand you the answers. On haiku NO WAY you gotta earn it. Hope everything is better for ya. I knew a few guys that had that at my old factory 🏭 not exactly a nice tea party with Gordon Ramsay (I DK randomly popped in my head)

[@schizsec9886]

Going to college for a bachelor's in cyber security here in January, wish me luck. Love this series and the work you do!

[@Ylylguru]

hows it going? What school

[@BoneyRasputin]

Start looking for a job IN YOUR CITY that can use your degree/skills... me and a friend ended up working at a remote (RAT) tech support center for chump change because while my city offers the training, it has no job opportunities.

[@schizsec9886]

@@Ylylguru Sorry for the delayed response, but I am going to keep that part anonymous. It is however, going very well and so far I am maintaining an A+ average ^^

[@RaverOperatorGeeza]

@@schizsec9886 good lad, hope it goes well!

[@Ernster86]

@@schizsec9886 bro don't waste your time to end up in a miserable job. You are smart. Start a online biz on the side

[@Jennn]

This is my Most Favorite Episode Yet.

[@TheRealDanmeister]

Make more content. I listened to all of them already 4x. Love em. Not to change the subject, but I am so tired of all these companies taking credit for things they actually picked up from the military. Darpa invented the internet in 1968, which eventually morphing into the internet. I graduated high school early and not wanting to be a drunken housepainter like the rest of my family, so I joined the Navy. Was told in A school that whoever scored the best in the class got first choice of duty stations. So I studied hard and got first choice. When I saw Yokusaka, Japan, which was halfway around the world I knew it was for me. Our high school had just gotten their first computer that year. A Trs-80 which no one knew how to operate, so imagine how surprised I was when in early 1981 I stepped into combat onboard my ship and I felt like I had stepped onto the bridge with Captain Kirk. There were massive flat panel, color monitors and work stations with trac balls. Now everyone knows that Apple invented the mouse in 1989..yeah right. There is so much more I could say about the ships networking to give each ship an extended view of what was around the battle group. sometimes extending our radar view as much as 600 miles a in any direction; depending where your picket ships were stationed. I got my first navy achievement medal in 1986 for creating the first network on a small Navy ship by networking 7 Apple IIE's together. This was done with the help of Darpa. So if you think some big company came up with some new great invention or idea, better think again. The military mst likely had tested it and turned it over already.

[@peacepoet1947]

Maddie is taking no side other than keeping your data safe. She is in dangerous territory being exposed.

[@davidkaye8712]

She thinks she is the smartest person in the room, she is using this opportunity like the one she stumbled on at the conference. What she does not realise is that she has exposed her methods more than she realises, and thought she had limited that "exposed" knowledge. That is the pitfall of being "the smartest person in the room" arrogance and ego.

[@carnivorebear6582]

If security researchers didn't share their methods, the rest of the security industry wouldn't improve along either them.

[@TonyDaExpert]

It’s funny seeing people talk about assembly in most of my classes we transitioned to assembly after designing digital hardware so the assembly was the easy part for the class in comparison lol we actually got to make our own assembly instructions in hardware to an architecture, also we had to convert machine code to assembly and vice versa by hand

[@BigTurtleMane]

Extremely fascinating! I would love to hear more about this. May I contact u?

[@MisterEightyFour]

No disassemble NO DISASSEMBLE - Man I’m old

[@JackRhysider]

Johnny 5 is alive!

[@MisterEightyFour]

@@JackRhysider ❤️

[@BigTurtleMane]

Few will catch that reference

[@LabGecko]

If it makes you feel any better, my first code was lost when I turned my computer off. I saved up for a *tape drive* (aka cassette tape) to store it on.

[@clortex]

I love your content Jack! Keep up the good work. Almost 100k subscribers!

[@PhattMEXITcanG-aimer]

Last comment about the tower you looked up at ... Could have been installed by me...

[@therealsmokinpotato]

Your videos keep me going at work with KZbin with screen off been listening to everything you have up but with 11 hr nights im catching up listening to every upload

[@w花b]

Premium user moment

[@therealsmokinpotato]

@@w花b nah Vanced launcher fuck Google

[@jakob4112]

they’re on spotify too !

[@nicksshitbro]

Start spending that time learning a more marketable skill. Former security guard here that regrets spending my 12 hour shifts playing stupid computer games.

[@QuanrumPresence]

I love assembly!! My first language and I still love it

[@smartduck904]

That's a great way to spend 18 million and jump start software testing

[@rationalbushcraft]

I have a theory. Software producers are responsible for making these zero days possible. They attempt to make software so feature rich that they leave holes that can be exploited. Most of the time zero day exploits target some little known and rarely used feature. So there are exceptions but most of the time it is something most users don’t even know it can do let alone use the feature. If each feature was off by default and had to be turned on to use or just not there it would be better. How many times has a feature been dropped because it was exploited and we went on without any problems? Really good design is simple not complex. With complexity comes easier to exploit code.

[@aaron6841]

That's true some of the most secure operating systems like open bsd have very small tight source code.

[@abelbabel8484]

So you want to add another layer of complexity by adding a system to switch features on and off (cause that'll take more code on top of the feature code) to combat complexity? Also wouldn't that just shift to/allow additional attacks from the angle of "How can I turn these features on remotely"?

[@craigslist6988]

It's hard to believe that google really cares about eliminating exploits when they're steering android OS so hard into security through obscurity rather than letting hobbyists mess around with bootloaders, root, roms etc. and then resolving exploits found. Instead they are moving toward giving only themselves and phone manufacturers the ability to really get at the driver level. She sounds very honest, but google could still be using her techniques.

[@protocetid]

she worries about people’s privacy yet she works for Google lol

[@LabGecko]

Google needs many many more people with ethics like Maddie (and the many AI researchers they've fired)

[@protocetid]

@user-zm7qz5fq2d Like a vegetarian working at a butcher shop heh.

[@jrozco9225]

Your videos have inspired me to relook at coding and set me on a path to make 10’s of thousands through basic automation so thank you!

[@kevinalexander4959]

Yes you can break down any program into assembly but that person that is trying to reverse in assembly will be trained on certain architectures. For one, i'm trained with ARM cause I do a lot of reversing on mobile devices but when I look at assembly from a different architecture, wowza -- some stuff pops out but you have to still learn the new assembly language, how it moves through that type of stack, etc etc. I like assembly too but am no pro like Maddie

[@kennedyndiritu5412]

Hey Alexander

[@LaurentiusTriarius]

Since no one noticed the fact she's a Russian spy yet I bet she's really pretty.

[@virtuousvirgo214]

I love the content in podcast format and the KZbin format is great! It would be cool if we can get little visuals for some of these locations or visuals to go along with certain explanations to give us a bit more info and make the KZbin format a bit more rewarding.

[@Ndqar]

I agree with her about assembly language. I taught myself 6809. Loved it.

[@TheTrainstation]

Thanks Maddie!

[@bitoff9125]

The best podcast on the internet

[@punkeasy]

Im sold on your content! Awesome channel dude. We were the first on our street back in the day to get a computer, a commodore 64. Boy were we popular kids then. It was, I suppose back then comparable to my Dad telling me and my brother how his family were the first to get a telephone (old Bakelite land line thing) I remember his stories about how all the neighbors would line up to use it. and just for good measure; "I wore an onion on my belt, which was the style at the time..." 😄 Anyway. Moral of the story, I still don't know what a software engineer is or does! But thanks for the education.

[@EmmanuelDeligeorges]

This chick is on a list for sure

[@smartduck904]

18 million started a 45 billion dollar software testing industry

[@abitofyourbrain]

You roque 👑check animations esp. The "call to"- good luck ♥️ Oh and the botnet you discussed first is a Huge base for pegaCis - also, check out the Einstein bot carefully- one love Hmm. My edit about nsa didn't go thru. Weird. Dunno why or who it mattered to. Ne.Weigh.... Maddie....and those like her...keep it up please. Mad respect.

[@glitchout0137]

I can't find your episode on NSO group. I found unit 8200, but not ep 100

[@MrDaveUsesWords]

The video posted 37 seconds ago and I am the 100th person to watch it? Did everyone set an alarm for this except for me?

[@nopeimnothere4119]

Usually

[@LiamsMusic78]

17:10 Look up this later, it should be an interesting watch of a black hat conference with Maddie

[@saltydevildog120]

Love your content bro! Crazy good stuff!!!

[@muzi7335]

Best podcast.

[@JK-gm6kk]

Who remembers Stroker and Hoop, that starsky and hutch animated parody show on adult swim. Jack totally sounds like Hoop

[@bluekarnage1985]

Computers on every desk in the 50s? Jet fuel on a rocket?

[@morisn]

7:30 - I learned microprocessor programming in highschool and then Assembler ( I now realize it was called assembly but perhaps we were in a Spanish speaking country they called it Assembler? I don't know. It was too long ago😂) and then Basic in college. You are Lucky I was told, you get to enter code in a computer. We had to use switches and punch cards to build computer programs. Proby, you can guess how old I am. Was I so lucky?

[@nicksshitbro]

Man.... is she single? I know its cliche but damn. And she went to Hopkins. My baltimorean heart ❤

[@ChickenMan666]

Assembly was my shit in 2011 lol

[@fredflintstoner596]

GOVERNMENTS ARE TRUSTWORTHY THEY WOULD NEVER DO THAT SORT OF THING !

[@javidking63]

your stories are like fine wine. you should not drink it all an once. you have to sip it sometimes.

[@andrewdunbar828]

Funny I thought assembly wasn't too extreme when coming from BASIC or when moving from assembly to C. Then again I didn't have an assembler back in those days so programmed machine code via BASIC and pencil & paper. I find Haskell and Lisp more unreadable. I also suck at SQL and CSS, but probably for other reasons.

[@fredflintstoner596]

Mrs Richards: "I paid for a room with a view!" Basil: (pointing to the lovely view) "That is Torquay, Madam." Mrs Richards: "It's not good enough!" Basil: "May I ask what you were expecting to see out of a Torquay hotel bedroom window? Sydney Opera House, perhaps? the Hanging Gardens of Babylon? Herds of wildebeest sweeping majestically past?..." Mrs Richards: "Don't be silly! I expect to be able to see the sea!" Basil: "You can see the sea, it's over there between the land and the sky." Mrs Richards: "I'm not satisfied. But I shall stay. But I expect a reduction." Basil: "Why?! Because Krakatoa's not erupting at the moment?"

[@Gh0st_0723]

Lmao im surprised the NS0 didn't claim antisemitism 😂

[@sejamstihm]

Generally, the bad guys always outpace the good guys until God intervenes. The Red Sea, Jericho, Sodom and Gamorra, WWII. Jesus will smash them soon. "High Tech!"

[@1rangerjake]

Yo, does anyone know what song is at 41:00?

[@TT-ez3hr]

I enjoyed assembly. It was so much faster

[@KingFluffs]

For some reason, I mistook her for the author of that Stuxnet book. lol

[@emuwarlord2965]

there's no way that vulnerabilities aren't being made on purpose by big tec companies to be exploited by select groups. it would be super efficient and would give so much power over being able to exploit the most devices and software as possible, as easily as possible, to target specific nations or groups that use specific products, without having to assume responsibility when attacking those groups. too many countries are permisive on this kind of abuse so it wouldnt be surprising if they're weaponizing exploits themselves by creating them wherever they can.

[@szaszm_]

As a software developer, I would never sign off on code with an obvious vulnerability, even if instructed by my boss or his boss. Thankfully for shady groups, software is complex enough that they don't need to bribe anyone to write vulnerable software, they can just find the existing mistakes that we make.

[@fefferryerr1818]

I could tell right away she's from california, the way she ends statements like she's asking a question.

[@Gengingen]

0 days need to be anticipated, detected & fixed & whether NSA or NSO or any other party “good” or “bad” gets impacted should not matter one bit. Would a way out be to engineer “verifiable” software - if there ever could be such a thing - where the primary design goal is for every layer to be devoid of 0 day exploits? The basic problem is how technology develops: capabilities & convenience first & security an afterthought. I think this needs to be flipped & bloatware needs to be deemed unlawful which I am sure Microsoft will adopt ASAP, I am kidding of course.

[@mastodonknotts]

I refuse to believe the 19 apps HP installed when setting up my printer are unsafe.

[@fillipo1972]

The first thought that occurred a short way in... Wow a geeky girl into geeky computer stuff. If girls like that existed in my city (or country) my teens might have been a beauriful time. They weren't

[@jamescollier3]

"no tech NSA collaboration".... that didn't age well

[@eyephpmyadmin6988]

Love it

[@SelfhostedPro]

I’m sure you make enough to afford an editor to animate these videos, or make them more than a static image. Please consider it as I would watch here more often.

[@Al-Musalmiin]

what if youre playing an old pc game you enjoy? whats the recommended action to take?

[@protocetid]

don’t download them from seedy websites

[@RdX.369]

@@protocetid what do you mean seedy?

[@micheleele7299]

@26:28

[@travelinman70]

the softwear "engineer' was created and still spacecraft are blowing up and crashing to mars, due to software errors......

[@zh9664]

great video 😊

[@jamescollier3]

lol. no one is "attacking" "journalist" LOL!!! and if you call BS, they are not doing it with 0 day lol

[@deadlyshotta2893]

Hi

[@pXnEmerica]

Oh! Well, this is not a mundane detail Michael.

[@densidste9137]

purely been hearing ladies voices in my naps bet thats the only way female interviews get views

[@1bsubsnouploads823]

Heeeuhhhhuhhhh heeeuuhhhhh heeeuh

[@szaszm_]

Stealing money and IP is no hacktivism (38:25)

[@Stopinvadingmyhardware]

no

[@Landaren]

She thinks journalists actually report the truth Very funny

[@sellosejake]

For the algorithm

[@FeloniousSavage]

Awe yeah! It's ya boy Jack Rhysider back at it again, steadily dropping that quality content....

[@JimmyLucas-ev1hp]

She has very poor English lol, but she's very smart! Nice episode again

[@thattoxicmf999]

Soon as he tried saying nasa did this, video was over and thumbs downed. I hope you know no one believes nasa is going to space but making films. Mfs need an Oscar

[@nihalsalunke3504]

Hello @jack big fan how are you

[@JackRhysider]

super

[@djombock]

Hi jack!

[@lylechipperson3407]

Isn't this the girl responsible for google being hacked a few months back? The one who had "I'm the main character" syndrome? I gotta give it to her, holding a conference giving away all of her techniques for a few extra thousand in the bank is hilarious. She managed to singlehandedly ruin like 15 years of hard work the US military guys were doing.

[@lylechipperson3407]

unless you are a from the middle east and part of a terrorist group, no they weren't spying on YOU.@user-zm7qz5fq2d

[@mastodonknotts]

Any info on that hack? Was it chrome exploit?

[@valsharess-yt]

As discussed on Discord, the Jack Rhysider Exposed video will be released next week. We warned you, Jack.

[@samlaki4051]

ayy which server you ppl hang out on?

[@adrianrabe2099]

Lol

[@LabGecko]

It's been over a week. Where is ...whatever this is?

[@lardostyle]

Cool lady

[@kwinter2541]

OBSCURA 👁