Why Governments Love to Buy the Bugs in Your Favorite Apps🎙Darknet Diaries Ep. 98: Zero Day Brokers

If a hacker finds a bug at Microsoft or Google, they could report it to the company, get it patched up, and get a nice reward. OR, they could sell it to a government for WAY more money. That government would keep it secret, and might use it to spy on other countries, or its own people.
New York Times cybersecurity reporter Nicole Perlroth takes us into the scariest marketplaces for Zero Day exploits, and explains why it's big business for young hackers.
Visit darknetdiaries.com/episode/98/ for a list of sources, full transcripts, and to listen to all episodes.

[@angelmessenger8240]

It's a good day when Jack uploads. Interesting and educational. Many thanks.

[@succulent-chinnese-meal]

🎉

[@elroibelete2521]

God have mercy these crypto bots are so cringe

[@thelikebutton4405]

Cringe is a verb, not an adjective.

[@_chappie_]

​@@thelikebutton4405??? OPs sentence is perfectly fine.

[@grayk02]

@@_chappie_you’re both correct. The rules of grammar say you shouldn’t use a verb to describe a noun. But English is a living language, the rules are more of a guide, if cringe persists in being used in this way then that’s fine too.

[@thelikebutton4405]

​@@grayk02I'm just trying to stir shit 😂

[@ghostmantagshome-er6pb]

@elroibelete2521= BOT CHANNEL

[@V1N_574]

I don't work in any sorts of security but damn I can't stop listening to this episodes. This is awesome stuff!!!

[@data_eng_tuts]

Same

[@WayTooMuchPressure]

I skip to the end to be 40 min ahead of the OGs, then watch it all again. One of my favorite casts

[@ICircuit64]

Another great episode. It ties in very well with the Equation group and other NSA episodes. I would love to hear more about how these deals are made.

[@ZaneStachowski]

Was gonna go to sleep. Guess not now!

[@JesseMeijer]

Another great episode, thanks! The distinction between 0-day vulnerability and exploit could've been explained a little clearer though. A 0-day exploit is not is a vulnerability. A 0-day vulnerability is a weakness in software which has not been found by its vendor, the 0-day exploit is the code (or means) that abuse this vulnerability.

[@KissMyConverseFool]

i think it's fair to describe, as a commercial object, a piece of 0day as involving both a vuln and an exploit. no one is going to pay for a vuln with no poc. but this a good technical point for people in the industry to remember when speaking to each other.

[@hellsbells5389]

I think when they were talking about chip implants (or whatever started that theory lol) I have a thought..what if they meant cell phone chips? We are chipped without having one inserted into us

[@prrfrrpurochicas]

😂 yes, that's been a thing since the 2000s and when the internet expanded

[@originalbinaryhustler3876]

in china they have them in their wrists in certain cities

[@Usnveteranstacker]

One of my favorite channels foshooooo!!!! I hope I get interviewed one day by him, that means I did something crazy lol

[@user-er1gl4gy2j]

this comment is iconic lol.

[@DataChiller]

"This Is How They Tell Me the World Ends" is a must-read book for the audience of Jack! Great interview, man!

[@MikeHarris1984]

Amazing talk! Wow. Love your episodes!!! Such a great look under the covers. Your channel is the most under rated podcast!!!

[@factgrab]

incredible interview! you're inspiring me to get into cybersecurity my guy

[@cynical1232]

Greetings from Scotland!!! I am not sure how I found your channel. I don't work in IT or infosec, so i dont have any kind of link to it. I must say, your delivery of subject matter and story is fantastic. Thanks for keeping me entertained while I work from home every day 😊

[@sykoteddy]

Personally I am interested in pretty much anything that is "out of this world" or a vert different kind of life. So this category is one of the most thrilling since we are all surrounded by the tech it concerns. :)

[@zzippo81]

You're one of us now. Welcome to the fold! All seriousness, being more aware of the threats out there is something people of all professions can benefit from. You don't have to be a banker or law enforcement to benefit from knowing how thieves and scammers operate.

[@SH4TL32]

Ouuuuu a new show ! This one should be interesting. Thank you for the great content

[@Incorruptus1]

Thanks for the paranoia shot. When any white cap could arrange some extra cans of soup for me, it 'll be much appreciated. I'm broke. No joke.

[@Rafael-oq9vu]

Seems like jack is running out of people to invite

[@TheNovaManagement]

One of the best interview. Thanks for sharing

[@iEatCheese33]

Thank you for all your work.

[@melia707]

love the upload schedule keeping going :] any plans for new bonus eps at all btw?

[@Jerry-Jardorc69]

Always a banger! (I just started watching)

[@deltonlifeisgood]

Reading between the lines... she sounded like companies sell faulty products to the public and then go sell those faults to the government so they have access to those backdoors to have access the information traffic amongst the public, by not outbetting them on those sells. Profiting on both ends at the end of the day.

[@TheBenSanders]

oh wow! I'm early for a Darknet Diaries!!

[@snowden-IT]

Thanks for your work❤❤❤❤❤

[@littlemonztergaming8665]

Absolutely amazing quote, "The tradeoff that the US was willing to make in the name of national security, but would have left Americans more vulnerable." 46:30

[@stefancristian6128]

Hey Jack, don't know if you're gonna see this but one very good guest would be @0day himself, Ryan Montgomery ! Love the show, keep them coming !

[@noanyobiseniss7462]

You forgot to mention the Script Kiddies youve interviewed.

[@FeloniousSavage]

Alway uploads at the best time

[@The231447LucidDevTeam]

When they broke in, they could have cloned your hard drive or something. It's very easy to clone partitions like that. Just a thought probably not what happened

[@fordprefect7316]

Some jewel theif got the wrong room.

[@TheUnseenreaper]

When jacks like "come on lets check it out" o yea im in 👌👌

[@sugarskulllyfe5890]

they made a youtube video about her trip to argentina... used to be on youtube years ago i cant find it anymore...

[@nelsonniedzielski]

Love me some Jack Rhysider! Thanks for your work

[@jimkirk360]

Made my day with a new upload

[@CyberFraudDawg]

Great episode!

[@0therun1t21]

Whoohooo! My day is complete and my bedtime is happy when I get to listen to these super interesting videos and cuddle with my cat. Thank you! In 2012 I can understand why we could let ourselves think the CCP might respect the agreement, I know I was hopeful about China back then. The CCP isn't known for abiding by it's own laws though. 21:55 awesome background music, is it Breakmaater Cylinder??

[@AnP865]

Literally chilling with cat right now listening to this

[@victornderu143]

My privacy is a joke 🤣🤣. It's sad most people can't do anything about that!

[@jjann54321]

That's only because most people are addicted to online activities to include putting their whole lives on social media and then complaining about the lack of online privacy. Also, most people like the *idea* of security as long as they don't have to use/remember a complex password or enable MFA. If someone clicks on a spam email (the root cause of 90% of all breaches) and they decided that having at least an anti virus was "too much" well... Remember, if you think something is "free" that's just means you are the product.

[@technophobian2962]

​@@jjann54321Plenty of open source software is free, and you can look at the source code yourself and verify that it's not doing anything shady. There's also plenty of paid software that still sells your data to third parties.

[@basedaf5580]

awesome episode

[@AstroAri504]

Didn't a huge tech company buy the original silk road?

[@Jkudjo]

One of the best!!

[@theminer49erz]

I couldn't agree more with the bit about our "leaders" being too old(in general) to understand. In fact I think there is a gap between them of those who understand the internet. Mainly the cohort called "Xzennials". We lived through the deployment at an age where we could engage and saw the barebones of it, knowing it was anything but secure and that most of it is BS. However those older didn't really adopt it until later along with those younger than us when it was already designed to look legit/secure and marketed accordingly. We are in out 40s now, so hopefully these people that are in office an have been for like 50 years will leave soon...or at least die off from old age which seems to be the only way they will leave unfortunately...side note, its been about 50 years since they had to worry about a wage too and that was when $7k/year was considered a good wage and a brand new FANCY car was roughly ¼ of that. Now $55k/year is what is considered a "living wage" although it requires mountains of debt to be so and a new car is more than half of that and a fancy care is like 150%. Considering they are supposed to be representatives of the people, it seems they have almost no experiences in common with them that would allow them to come anywhere close to representing the people. Time to go folks! They are prob the last generation that will be able to retire and not only are they not taking advantage of it, they are adding to the inability of others to do the same by not doing so and making room for others to move up into positions where they could maybe not work until they die if they wanted. I know a single .45 round will most likely be my retirement....just like a replicant.

[@jjann54321]

I always laugh when I hear/read the term "Xzennials." They are too embarrassed (or refuse to identify as) to be a Millennial but they are too young to be Gen-X. Micro-generations... lol

[@SergiReyner]

See, you can pull excellent closing jokes too 😆👍

[@docAllen]

Market capitalization of New York Times (NYT) Market cap: $6.90 Billion As of November 2023 New York Times has a market cap of $6.90 Billion. This makes New York Times the world's 1954th most valuable company

[@listenerererz]

This story was already covered previosly.

[@cassandrasinclair8722]

Hey, the link is not in the description

[@M.R.T.V.Videos]

I find "glitches" all the time in my phone . I get confirmations from random people id dont know all the time that they in my phone 😂

[@reforged1649]

Man hearing this story is awesome and specifically the Moscow Embassy. I wonder if my Uncle did anything during that. He served under a Special Ranger squad during Regan's presidency.

[@ZPS51491]

Did your uncle work for Nintendo too?

[@reforged1649]

@@ZPS51491 No. He served in the Military and was part of Army Rangers during Regan's presidency

[@jjann54321]

"Anything" is pretty vague. If you mean if he was involved in Operation Just Cause that is the most likely but that would depend on what Ranger Battalion (I've never heard of Special Ranger Squads) he was attached to. If you're wondering if he was bugging gear or debugging/analyzing the US Embassy in Moscow with the NSA/CIA, likely not. Also, the Marines are assigned Embassy Duty but they are usually limited to physical security only. There was a lot going on in Iran in the 1980's that he may have been involved with but not much is public information.

[@reforged1649]

@@jjann54321 Only thing he really told me he served under President Regan has a special Division called Regan Rangers. He was 1 out of 40 men. Only Combat Medic as well. So my information is very limited since he passed away 2 years ago.

[@jchastain789]

This was dope af

[@THEMAX00000]

I don’t think it would be that big a deal. If they got taken out, they embarrass themselves every day of the week.

[@Gurmad98]

My KZbin account is been blocked. I’m looking at you one week. I don’t know your KZbin name but I’ll find you today. Keep going.

[@xephael3485]

FULL DISCLOSURE MAILING LIST... used to be awesome

[@Nimitz_oceo]

I read Nicole's book, i remember quite well... the F***g salmon discussion. However many people claimed that she exaggerated and was almost praising the guys in maryland even though they are not that good. I kind of agree

[@local-admin]

Wait what time is it? 0day o clock? Sounds good!

[@local-admin]

I forgot to say. Falling asleep to this >>>>?

[@JimJi]

Should have learned! Midnight drops 🎉🎉❤

[@mason35715]

Lol @ Google "Your Privacy "

[@brandonkellner4053]

15 comments and I can't see any of them, cool youtube

[@originalbinaryhustler3876]

big up, from UK

[@israel963]

0:06 👋

[@jet.pvckVR]

just crawled in bed perfect timing ily

[@chrisaustin6255]

Hotels are not as safe as we think

[@thedarkdragon1437]

good idea, I'll do that too

[@DataJuggler]

41:50 Microsoft gets paid to do this for governments also.

[@0xfrijolito]

32:00 Literal the first key logger

[@jeremyjeaurond]

The exploit catalog is definitely an .xls file 😅

[@AJSax0n]

People who talk with upwards inflections shouldn't bother me as much as it does.

[@SALTINBANK]

read the books two years ago : good one

[@terbospeed]

"It's almost like you weren't cool if you hadn't been hacked by China" Day 500 of looking at my lonely open ssh server with a default password .. sigh.

[@RoelCandaeleARTISTSPAGE]

😘💓🧐 stay safe !!!

[@DataJuggler]

0:30 Just because they say it is legal, doesn't make it legal. The great Edward showed us that.

[@youtbnyaindra]

The joke hits me to the guts! Your Privacy was the joke..

[@fauxhound5061]

She was hacked.. Like totally! OMG

[@MBSalone]

🔥🔥🔥🔥🔥

[@swingfire7789]

NEW PFP!!

[@jasper-3338]

Its very hard to follow her story, in the beginning 8 min, it might be her articulation , other as that the story is as always very interesting. :)

[@mrlucidboy]

Its the vocal fry?

[@SomethingsoniQ]

Yes the fake voice...... You van tell she's a piece of work

[@xephael3485]

14:58 if they planted something give it to expert to look into... No trashcan fool

[@stephen2224]

I am a cat. Meow meow meow.

[@dunar1005]

6:18 why would Chinese Hackers use a Local IP?

[@bnk28zfp]

privacy is joke 😅

[@AX-sq5vm]

May be thay want to think u they are looking for something small

[@dunar1005]

2:30 is she the voice from that song “ Becky look at her butt”? She sounds the same. 🤔

[@SocialistDog]

You should do an interview with weeb

[@manamsetty2664]

😂 bot on your channel comments section

[@YoungLionC]

She sounds like GiGi, Andrew Bustamante's wife from Everyday Spy

[@docAllen]

iOS Full Chain Zero Click $ 2,000,000

[@oregonvibez]

Why does it sound like hes interviewing a paid Fiverr voice actress whos just now reading her script for the first time 💀🙃

[@erbalumkan369]

Something wrong with her throat?

[@mkson1]

First one

[@cameronrich2536]

Yea her voice even has a narc tone to it

[@cameronrich2536]

@@found13 her voice mostly. Oh and how it sounds. Canureadbro

[@virii.win32]

​@@cameronrich2536 It's just cuz of the vocal fry and what you associate with it. Please be respectful, that's just what her voice sounds like.

[@5hawnK3lly]

she sounds hawt

[@trentdavies4976]

Victim but doesn’t know. Lol

[@michaelbasher]

Maybe the west isn't worthy to lead..

[@kyleshuler2929]

[This comment contained many errors. The CCP has corrected this mistake.]

[@claucmgpcstuf5103]

Wel tha defenelti mace's cent neaw .. wit tha infaltin 170%. If thy have a vinil convention gen. Theat evione is wching etc ... Tha cod be tha problem with tha inlfalion ... Or they just printint money with no baking at all in nothing for decez lake with a no nomber lol . One of the to

[@augustusomega4708]

hehe...the biggest cyber hacker country surprised it gets a spoonful of its own medicine, you clutch your pearls so eloquently Ummerika

[@densidste9137]

female... with a lisp ... next

[@StatusFX3]

This message is approved by: [REDACTED]

[@Dudeguymansir]

Your impaired audio quality in this episode makes me wonder how easy it would be to AI voice generate a Darknet Diaries episode. …maybe to AI voice generate EVERY Darknet Diaries episode… 😉🫨