Revenge: He Could Wipe 2,947 Devices With One Risky Click🎙Darknet Diaries Ep. 113: Adam

[@xCheddarB0b42x]

Multiple process failures allowed the Insider Threat to do extreme damage: 1. Improper (no) offboarding process 2. Poor Elevated Privilege management process: Principle of Least Access 3. credentials stored in plaintext on a device 4. weak, formulaic password generation process allowed successful guesses and interpolation 5. No 3-2-1 backup process, no off-site, disconnected backups 6. probably no disaster recovery nor continuity of business process either, the recovery was an unrehearsed surprise The Academy's systems survived until they met their first disgruntled junior employee. Total reliance on the good faith of people. Great episode as per usual. Thanks for spoiling us. I hope Adam is doing well; he's had a hard go of things.

[@Realworlddummy]

Adam did them a favor

[@tahliamobile]

Hey Jack, You might not ever read this, however, I just want to thank you for your compassion and understanding when interviewing people. There are so many judgements and paths that could be followed, but you chose the path of interest and learning, and lead us on that path too... As an Australian, I can confirm it is a difficult place to grow up with limited school opportunities... Your handling of this journey is deeply compassionate. So many don't make it through. Thank you.

[@BG101UK]

I agree totally with this. It is really hard to be truly objective and non-judgmental in cases like this; especially where innocent people have been affected by losing their personal data, memories etc.. It's bad enough when this happens due to a hard disk crash where one doesn't have an up-to-date backup (and preferably one or two off-site as well). .. that command Brodie Robertson uses in his outros also springs to mind.

[@kingofcapp]

That's well said. I hope he does read this

[@byroncanty8986]

Just want to mention as an Australian there is GREAT education available in Australia we have some of the best education in the world however, we do also have a prevalent bullying issue in most schools. Not all schools but I would say overall it's definitely a wide spread issue.

[@Brakvash]

This felt like Adam is a sociopath and is trying to justify it being normal to do this simply out of spite.

[@trevorjohnson2168]

Lots of these episodes are like that

[@xCheddarB0b42x]

All the same, the society that I want to live in affords folks like Adam every off-ramp and ladder of redemption up out of "the life," where all they have to do is grab it and hold on.

[@kaytieanddreambreen4554]

I was just binge listening to old Darknet diaries episodes and open KZbin to see "1 minute ago" on a NEW episode? Hyped! Thanks, Jack Edit- ik it's not a new episode. Still excited

[@turtle7043]

real

[@jasonszymarek8406]

There are actually 141 current episodes

[@jasonszymarek8406]

This is 113#

[@MAX-nv6yj]

Yah thats amazing xd

[@MrPimpmygun]

This isn't a new episode dude

[@gstynchula]

Bro! So happy! I’m working 3rd shift, you just made my day! Thanks for your great content!

[@notfinancial_advice]

the irony: he wasn't the one making any trouble but he was the one sent to the behaving school

[@innovationsanonymous8841]

Ime this justifies everything

[@mrfnk]

the moral of the story is to wait for the police report before you hire someone

[@quark8571]

Hahaha true

[@chrimony]

What on Earth was he thinking when he went on another rampage after just being let out of custody for his first rampage? Not that I had much to begin with, but I had zero sympathy for him after that.

[@Best101Bits]

Another illustration that not all who work in IT have basic cyber security knowledge.

[@MikeHarris1984]

A lot of companies have gone bankrupt when their systems were wiped like that ... That likely cost them Millions of dollars overall .... Holy hell you destroyed that.

[@abscess7476]

Jack .. best show on the web. I always get excited when a new video shows up. Thank you and your team. Keep up the great content.

[@Curious-Minds]

Moral of the story, don't be like Adam.

[@dolmio_sauce]

and from a employers perspective, moral of the story is not to employ those with a criminal record lol

[@ZarHakkar]

How about *Moral of the story:* don't treat others in bad faith or you might just get clapped back

[@gto11520]

Moral story use seed box and anonymity vpn in public wifi.

[@reddove17]

Moral of the story: hide your ip address

[@NicholasAmCuben]

Person gets fired for having a criminal record. Person proceeds to do criminal things. Looks like the company made the right call.

[@benroberts127]

Pretty sure the right call would have been to let him down before hiring him and letting him in

[@PlasteredDragon]

@@benroberts127 yeah, "they fired me kinda dickishly after a month", is not a valid reason for destroying thousands of devices and an entire network. Pretty sure of the 3000 odd devices he wiped, less than 5 belonged to people who decided to fire him. Most of them were people just like him. Dude's a criminal, firing him was definitely the right call, and he deserves to be in prison.

[@NicholasAmCuben]

@@PlasteredDragon Oh, they fired me for having a criminal record? I'll show them by expanding my criminal record.

[@brokenalgorithm]

​@@NicholasAmCuben😂😂

[@TT-ez3hr]

I remember getting in the cookie jar when I was about 4 years old and having too many. 😊 It is a good memory I never have forgotten

[@EPSec]

Thanks Jack as always. We got your back.

[@RedKnight95]

i wake up Thursday mornings just to listen to you jack like always , love from Ethiopia

[@mrlucasftw42]

Moral of the story - don't piss off IT.

[@Grasimee]

I have my junior info sec analyst interview in a few hours. Will update this comment after.

[@100daysofmeh]

Good luck stranger.

[@Grasimee]

@@100daysofmeh thank you stranger

[@diamondsprince]

​@@Grasimeehow'd it go brody

[@Grasimee]

@@diamondsprince it went good! Just waiting to hear back

[@EnderPlays]

let us know how it goes@@Grasimee

[@SeanGyte-g9h]

Literally just scrolling through realising Ive watched every video, then this pops up. Have learnt a lot Jack, thank.

[@nikiawright5830]

Thanks Jack for sharing these amazing stories!!

[@craigslist6988]

this guy sounds so nice but his story exposes that he legitimately has some kind of psychological disorder, narcissism maybe. He brushes the attacks off as panicked but it sounds like more an impulsive rage. Should follow up and see what he's up to now that he's out?

[@monsterhunter445]

He admits he was in a gang. Possibly anti social

[@Adamvp1ltd]

I’m out. I’ve approached jack no response yet to see if he wants to follow up. I used my time wisely inside. In cyber security now. Part time.

[@NiklasVWWV]

​@@Adamvp1ltd interesting! Were you honest about your past convictions and still got the new job or did you hide it?

[@Adamvp1ltd]

Everything was declared to them and I had to undergo an enhanced DBS to confirm I wasn't hiding anything.@@NiklasVWWV

[@Adamvp1ltd]

yep, and have my own business now. Jack pinned my update as a comment@@NiklasVWWV

[@randoir1863]

The moral of the story is that IF you decide to be a dick to your former employers, plan accordingly so you don't get caught . Adam got what he deserved because he couldn't be bothered to cover his tracks properly and has now proven to future employers that he's an IT liability to hire . So congratulations, Adam, you are now a convicted cyber criminal with no way forward as an IT hire .

[@Dyanosis]

21 months of jail time is hardly "getting what he deserved". He deserves worse.

[@douro20]

There are certainly more things IT related that could get you into trouble in the UK than here in the US, considering the very broad wording of the Computer Misuse Act.

[@aouyiu]

I'm not sure about that, because our US leader in the 80s did something similar and really put the hammer done on computer crimes, expanding what's considered malice. That's why sening too many packets to your neighbor could get you up to 10 years. I guess the UK isn't too far behind but the rest of Europe is far more lenient.

[@DigitalNomadOnFIRE]

There's no requirement to ever 'change passwords'. There is a requirement to lock this guy out as soon as he's left and not share passwords.

[@benroberts127]

I'm so happy there's a new episode to listen to this morning, this just made my workday way better

[@bobito3861]

great story as usual, thanks jack

[@jjann54321]

Great episode Jack! Makes me wonder how often this happens that doesn't cause such a disruption as to make it on the news or a podcast. I can't even imagine how many "skiddies" get in over their head's after watching "too many" Hammond, Bombal, Chuck, Mentor, Hak videos and try to *test and explore* with their newly discovered skills and quickly get in too deep.

[@Laszlo34]

HI Jack! Thanks for the awesome stories!

[@JohnSmith-bv1jg]

Apparently he was arrested for fraud back in his home country, twice. Its hard to say whats accurate here, the news articles or he himself 🤔 His story is pretty easy to find, he got a 21 month sentence, half of which hed be out on license which is essentially probation/parole.

[@Colyers]

It's kind of nuts because psychologically his whole life was impacted by being bullied as a youth.

[@chadgamer6942]

No its just an excuse man getting bullied 10 years ago doesnt justify these actions. Bad people just want to feel better about themselves.

[@wooobenny]

@@chadgamer6942 it doesnt justify obv, but it gives clues as to why their brains work a certain way and thus make decisions that they do. Still should be treated as many times its fixable, but no its not 'just an excuse'

[@Dyanosis]

Being bullied as a youth doesn't make one a sociopath who fails to feel any sort of remorse for what they did. Especially when they make a massive mistake and then proceed to do it again. AND LIE ABOUT IT.

[@anonazerty165]

video starts at 2:00 as always

[@michaelW6]

Wait this came out just now? But was recorded in 2021?

[@brokenalgorithm]

his gang story was 🧢 say good bye to any job with computers/access to anything of importance

[@Chukijay]

This Adam guy is a real turkey.

[@_Ninety9ine]

Not a nice person imho

[@johnking3724]

perfect example of why you shouldn't hire criminals.

[@MikeHarris1984]

With the sudden realization that he got in, and didn't cover tracks, I wonder if he could have come forward and say I do security testing and was able to traverse the network easily and here are a set of findings and recommendations. Yes he did it without being asked, and they could call the police and go after him, however, I think they would be more grateful, and if he did get caught, he would be worse off. Now to un pause and see what happened

[@Chukijay]

That’s what a non-mentally-deranged person would do. That’s not what we’re dealing with here, unfortunately.

[@mattnsac]

You cant do that unsolicited. Just typing in the password as an unauthorized user is just as bad an offense as wiping it out short of the monetary penalties for paying for a full rebuild of the network.

[@223brewske]

oh boy at first glance i read it as: "is just as bad an offense as {Whipping It Out}" and thought "i'm not so sure" until i realized my dirty mind's mistake. @@mattnsac

[@MikeHarris1984]

@@mattnsac yeah if you just log in and stop, or turn off and hope no one finds it, yeah. I know attempting to login is just as serious as breaking in, but a smaller college like this, they may just go, okay thank you and change passwords and change security. A fortune 500 company, that's a different story. But going further and start wiping out computers and changing passwords and destroying the network, now nothing will save you from that. Your screwed. That's an un-crossable line now.

[@MikeHarris1984]

Yes!!!! Let's go!!!! Wake up to a long cleetus sick week vid, whistling diesel and now darknet!! Today is gunna be a good day!

[@xCheddarB0b42x]

I ignore Cleetus for about a minute and he goes and gets his Sikorsky Black Hawk type rating. LOL

[@troyrahnedir]

That dopameme gag was brutal.

[@mx338]

This really is a missed opportunity for a NordVPN sponsorship.

[@kongle8737]

nordvpn would just be one more step before isp

[@aboringdyst0pia]

Nordvpn would give them all your data if you are involved in criminal activity😂 VPN providers aren't safe at all

[@xCheddarB0b42x]

@@aboringdyst0pia go watch the Bombal-Yen interview.

[@Dyanosis]

@@aboringdyst0pia VPN providers are safe, it's the criminal activity and fact that they, too, adhere to the law and will provide details if subpeona'd.

[@Eivind-k5c]

15:00 I've had the domain admin login for all the schools in my town sence 6th grade, It didn't really seem like a big deal and all the IT people knew it as well some teachers. Is this normal or did my town just have super poor security?

[@patrick764]

Super poor security.

[@Eivind-k5c]

@@patrick764Yeah, guess the IT guy just got tired of typing in my password everytime i needed to install something

[@rumplstiltztinkerstein]

This a public service announcement reminding everyone to use Tor. It is better to be safe than sorry.

[@colinofay7237]

24:00 Ok I understand that technically this is privilege escalation, but it isnt truly the meaning of privilege escalation. Usually a hack would be called this when an exploit or something similar is used from one user to a ussr wirh higher privileges, not just resetting a user with higher privileges. Disappointing to here you describe this as privilege escalation. I know the average viewer doesnt realize this, but I'd still recommend you accurately describe things.

[@DiegoGuerrero-zy5ne]

This person is a narcissist

[@bishophunter6955]

Update no reason and new Darknet Diaries episode! What a good night it is turning out to be! Thanks Jack

[@DanielG-hr9ue]

Another great episode !

[@ZarHakkar]

That cookie story though... Jack is truly a criminal mastermind just like the rest of his guests.

[@popos1017]

He literally said that he spent the money and the director said he could pay it back That’s stealing!!!

[@livelucky74]

Wiping a bunch of random citizens phones is a serious piece of shit move. Wow.

[@teniechac9556]

Never been this early for a new drop. 😊

[@Bullminator]

If i knew the passwords, i would just sell them to some1 else on internet on black market. Then wipe any info of talking to that person. Since you dont log in into a network, your IP will not be shown there.

[@athenacapablanca3118]

The most devious click

[@stevengill1736]

Thanks Captain Jack, another interesting story....cheers.

[@kazeemsanni2857]

Its actions like this that make it hard for peopke to give second chance to folks with past lives that were not palatable, even when they say they have changed.

[@MAX-nv6yj]

I love your videos thank u so much jack

[@kaytieanddreambreen4554]

I know what I'm listening to on today's run

[@KillTheFear]

Would love an update on this one.

[@jjarvis7345]

Woohoooo .. he found another gr8 story!

[@LastChance-u9j]

Hey Jack I am trying to reach out to you personally now...

[@jasonszymarek8406]

I've listened to every episode at least x4 - x30 each,.....shit sum of them x100.. i lisyen listen to him when i sleep every night if i could... Should have his own xfm radio show!!

[@Dyanosis]

I think you need to find a new hobby if you're listening to anything, that isn't music, that often.

[@jasonszymarek8406]

That is one of my hobbies showing Darknet diaries to any one that will watch them so I'm a sharing the knowledge of jack. And hopefully getting him a few more listeners

[@GribGrib-z1f]

Great channel and story like always,whoops marketing, apologise for that, all ❤ 😬

[@p_null]

Is this a reupload, feel like I've heard this episode before.

[@johndoyle1747]

What command did he run? asking for a friend!

[@dgrando202]

Couple of these stories always end bad because a guy got depressed with a break up.

[@StargazingCeres]

The school should have done a criminal background check sooner, but not allowing him to work there was the right thing. They have a duty to protect their students, and an assault/robbery on your record is a red flag they shouldn't overlook, no matter if you've learned from it.

[@Dyanosis]

Only 21 months for literally destroying virtual property and basically removing an academy? Fuck our systems suck. And yeah, I'd gladly hire someone who was good at their job, but some nut job like this guy who might fly off the handle because someone slights him in any way. Especially when he lies the 2nd time he destroys a network. Personally, for someone like this guy, there is not enough rehab in the world to bring him back to a good morale stance. I think this would be more of a "do not pass go, do not collect $200, do not ever play this game again"... Aka the death sentence. No need to waste time putting him in jail.

[@nocturnalsingularity3138]

Omg haha the cookie thing 😂 i did that exsact thing with a chocolate pie. Except I ate all Except one slice and i cane up with a genius idea. I put the pan on the floor and ran off, as the dog scarfed down that remaining slice and my mom walked in just in time to see her eating it haha totally got away with it

[@mr.shenanigans597]

How far back do you have these episodes stacked up? This guy was supposed to get out last year. Maybe you never got a follow up and are pressed for content due to research? Either way I am glad to have the episode and even happier you are trying to start a digital privacy movement.

[@redeux]

Yeah i got confused because it was a recent upload but the end it sounds like it was recorded before he was supposed to be released in 2023

[@heroslippy6666]

I am guessing Jack intentionally held onto this one to maybe get us an update, and that he could never get into contact. Otherwise I feel like a lot of youtubers may keep a couple vids on hold. Saving some content for a rainy day.

[@Adamvp1ltd]

Update was provided to jack, today I’ve offered him a catch up on this and maybe another Ep about it. Waiting his response. I work in Cyber Sec now part time but most of what I done inside was helping offenders/IT.

[@Dyanosis]

​@@Adamvp1ltd Proof that you helped people and that you actually work in Cyber Sec part time? And what do you do in your free time? Also why only part time?

[@leolldankology]

35:11 and you will know my name as The Lord....

[@OneManCanStopTheMotorOfWorld]

yeahhh boizzz lets gooooo!

[@SimonZerafa]

@DarknetDiaries Any word on if Adam has been released and how he is doing? 🤔

[@markvickroy6725]

Wait this was posted one day ago and it's 2024 so is the guy out of jail or what

[@Adamvp1ltd]

Jack pinned my update as a comment

[@qwertypiee]

thank you

[@user-wp7yr6lw6t]

Jack is bacc!

[@kingofcapp]

Okay I'm confused. I understood Jack's story about going all in on the cookie theft when he was a child. I thought Adam was covering his tracks by wiping everything. But there were firewall logs? So was it in for a penny in for a pound? They're going to catch me so I might as well do as much damage as possible? I'm tech challenged so be gentle

[@Adamvp1ltd]

essentially my thoughts at the time, yes. Jack pinned my update as a comment

[@Dyanosis]

He wiped his tracks on the computers, but you can't wipe the firewall logs if those are stored separately, which it sounds like they were. Or he was too naive, still, to know to look for them.

[@kingofcapp]

@@Adamvp1ltd ok thanks so much for clarifying.

[@gloomjesussecretaccount]

Change all the pw’s and lock everyone out of the cloud portal and internal school network. Then hold it for ransom

[@heroslippy6666]

I guess Jack was never able to get an update on what happened to this person.

[@Adamvp1ltd]

He did , directly from me.

[@OliG-ys7ii]

It would only fully wipe the device if it was fully managed. These would be user enrolled so only wipe company data. This is something I use every day. You can remove the passcode on an iPhone though which is interesting.

[@michaelW6]

Wouldn’t routing through the onion net protect him? Why didn’t he do that?

[@diamondsprince]

the story makes it seem like he didn't set out or plan to do what he did, he was just poking around and got in too deep before he realized what he done

[@diamondsprince]

ahh nevermind just heard the rest and he did it again, what a dumbass

[@MrMgrPL]

Jack why are You reposting old episodes as new one?

[@fidelio9301]

For KZbin obviously

[@melantheoszimurri9981]

Was that a juvenile criminal record he got fired for?

[@genuflext]

adam is a noob. didnt even use a vpn

[@ReallyFrickinEasy]

I think we can all relate to that intro story

[@VintageSecure]

Uh what i still dont understand is why he was on his local ip address especially when he was working in the it field.

[@woritsez]

mistakes were made, but the Fates are like that.

[@deejooo8213]

Of course we use 1 local password.. You can't keep changing it... There is thousands of computers on a network and all it takes is one network adapter fault and you can't actually log in via domain admin account so you need the local admin... If it had a custom password we would have to maintain a spreadsheet with those and that is a vulnerability in its self

[@JerimiahRasmussen-vh7vx]

You sound like my brother I feel like I heard that story before h7h😊

[@livelucky74]

If my kid did that I would probably forget too

[@abigalanderson7494]

I guessing your silence can be used against you in the uk

[@melancholy9303]

>He’s due to be released sometime in 2023 Then where's the update?! It's 2024 now.

[@Adamvp1ltd]

Jack pinned my update as a comment

[@Nevict]

I wonder how he is now.

[@Adamvp1ltd]

Jack pinned my update as a comment

[@chaoslab]

Dopameme, OOF!

[@n.lightnin8298]

Am I tripping or have I heard this before 🤔 this must be new to KZbin not Apple podcast rt???

[@basedaf5580]

shout out Runescape best mmorpg that will ever exist

[@buzz-es]

Dopa-meme, lol.

[@colinofay7237]

Testing a post?

[@terraflops]

i really feel for this Adam as he kept getting screwed over by people. The academy did not know basics of cyber security.

[@shodland6278]

Anyone else catch the Pulp Fiction reference?

[@galeparker1067]

Old episode.......🤔😩✌️

[@mark8532]

As a man I've noticed we as male develop three types of mindset after a heart wrenching break up. 1) the felon: Add up a bunch of domestic violence charges, becomes a stalker, finds out places she is going to be, then he shows up like he had no idea she was going to be there. 2) the good guy: cries all day for months. Tell everyone he meets about how heartbroken he is. Eventually he moves on with his boring life until he meets someone else, and continues this cycle. 3)the gladiator: he gets into the gym, puts his life in the best position possible, masters new things, and will do anything to achieve extraordinary success...no matter the price. I became number 3 after my first breakup, with my ex of 10 yrs. Today I'm happy I went Thur that. Today I'm a successful beast 💪🏾!!!

[@JohnnyBimbozy]

We need more gladiators in such a world we live in. Keep thriving brother!

[@mark8532]

@@KASHTAPES I guess you miss the parte where he said, he was going through a bad breakup at the time he decided to log into the academy.

[@mark8532]

@@JohnnyBimbozy Yes sir!!! Become the boss we were born to be. Salute champ 🫡

[@rusi6219]

Cringe

[@fidelio9301]

Whack

[@918_xDx]

I remember being able to access and browse through the NAS for the entire school district because the password was + which simple enough because the school id was the folder name. The crazy diacovery was the education service center ID and zipcode was the admin access anything password.... for everything windows LoL edit: this was when bypassing the network filter just meant you turned off *use proxy* in the internet options