[00:02.840 --> 00:08.460]  My name is Rudy and I run a little ISP in San Francisco called Monkeybrains.
[00:08.640 --> 00:10.980]  And I've been running that since 1998.
[00:12.000 --> 00:17.620]  And I provide dial-up and web hosting and co-location to people out there in San Francisco.
[00:18.580 --> 00:31.480]  And last October, the FBI announced that they're releasing a new plug-in to their carnivore project called Magic Lantern.
[00:31.480 --> 00:34.540]  That's basically a keystroke logging program.
[00:35.280 --> 00:41.500]  And a week after that announcement, a virus came out on the web called the Bad Trans.
[00:41.880 --> 00:45.400]  It's actually a Bad Trans version 2.
[00:45.520 --> 00:48.300]  There's an earlier one, a version earlier in the year.
[00:48.420 --> 00:57.940]  But this new worm version came out and it started to collect data, keystroke logging data from people.
[00:57.940 --> 01:06.180]  And it would collect the data and then periodically mail that information back as an email to one of 20 different addresses.
[01:06.620 --> 01:11.300]  And one of those addresses happened to be on one of the domains that I hosted.
[01:11.300 --> 01:16.300]  It was a free forwarding service that I had, sort of an emailer, remailer thing.
[01:17.620 --> 01:19.700]  And it sucked my prick.
[01:19.820 --> 01:21.080]  I just got fired.com.
[01:23.020 --> 01:26.500]  And I started to get a bunch of email coming in.
[01:26.540 --> 01:28.840]  It was slowing my mail server down.
[01:28.960 --> 01:30.780]  I used Pine, so it was kind of a drag.
[01:30.780 --> 01:32.200]  I couldn't figure it out.
[01:32.200 --> 01:33.380]  I'm like, what the hell is wrong?
[01:33.660 --> 01:37.100]  And I started to look in the mail log and all this shit was coming in.
[01:38.740 --> 01:41.820]  And I'm like, I thought it was a spammer at first.
[01:41.900 --> 01:46.700]  So I just shut off the remail thing and started to store all the data in the mail to the school file.
[01:47.420 --> 01:48.580]  And all the emails.
[01:49.300 --> 01:50.740]  And then I looked at it.
[01:50.780 --> 01:51.400]  I opened it up.
[01:51.480 --> 01:52.120]  I started to look around.
[01:52.120 --> 01:56.080]  And I'm like, wow, this isn't spam replies of irate internet users.
[01:56.280 --> 01:58.000]  It's keystroke logging data.
[01:58.180 --> 02:00.340]  I've never seen such a massive quantity of it.
[02:00.640 --> 02:02.920]  And I've installed it on friends' computers for fun.
[02:03.060 --> 02:06.140]  But that's a different story.
[02:07.300 --> 02:11.800]  So I got all this data and I just started to collect it.
[02:11.920 --> 02:16.940]  And I stayed up real late, wrote a little script to parse it and split it up into different categories.
[02:16.940 --> 02:26.020]  There's the passwords for websites, passwords for remote network access, passwords for FTP sites that people use.
[02:26.140 --> 02:29.800]  They use, like, some Microsoft Web Post product.
[02:30.840 --> 02:35.040]  The bad transpires, just to go back to that real quick, just affects Windows users.
[02:36.540 --> 02:37.220]  Surprise.
[02:38.900 --> 02:47.740]  So I had all this data and I wrote a script to parse it and I put it all into a MySQL database so I could have my own mini carnivore.
[02:47.900 --> 02:51.780]  And so I could look through the data and see what people were thinking about in the world.
[02:53.800 --> 02:55.340]  It was fun doing that.
[02:55.360 --> 02:56.520]  I did that for a couple of days.
[02:56.740 --> 02:58.380]  And then the FBI called up.
[03:00.200 --> 03:03.860]  And they're like, hey, you guys, you got some data over there at Monkeybrain?
[03:05.940 --> 03:11.120]  And I told them, yeah, I have some data.
[03:12.060 --> 03:12.940]  You know, what do you want?
[03:13.020 --> 03:21.940]  They wanted all the files and they wanted the logs from the person signing up for the free remailer.
[03:21.940 --> 03:24.500]  I just got fired.com.
[03:24.520 --> 03:28.580]  You can go to a website and put in your alias you want, like Joe.
[03:28.860 --> 03:35.700]  And then your Joe at I just got fired.com will go to your Soylent at Rotten.com or wherever your real email address is.
[03:41.940 --> 03:46.380]  And so I started to think about privacy issues.
[03:46.500 --> 03:48.720]  Like, wow, there's this data and I'm looking at it.
[03:48.940 --> 03:51.180]  And it's sort of my data so I can look at it.
[03:51.240 --> 03:52.880]  But I don't think the government should look at it.
[03:54.880 --> 03:55.920]  You know, I earned it.
[03:56.120 --> 03:57.240]  They haven't been earning it.
[03:58.900 --> 04:10.000]  But I decided that giving them the IP that was used to create the email alias was something that they should have that.
[04:10.240 --> 04:27.480]  And some logs on just that IP and some of the initial emails that came into Monkeybrain so that they could get an idea of what information I had and so that they could maybe catch the person who wrote the worm.
[04:28.440 --> 04:31.720]  That FBI can easily get a court order to do that type of thing.
[04:31.960 --> 04:36.120]  The rest of the data, the other, I had a couple of gigs worth of data sitting on my hard disk.
[04:36.500 --> 04:41.320]  I had to turn off the data collection because it was starting to be too much for me.
[04:42.560 --> 04:45.800]  So I collected it for, I don't know, a couple of weeks, maybe three weeks.
[04:45.800 --> 04:58.660]  And I got about a third of a million pieces of email from people around the world, from China, Russia, the US, places in Europe.
[04:58.660 --> 04:59.880]  There's no real pattern.
[04:59.920 --> 05:00.680]  It is worldwide.
[05:01.040 --> 05:04.720]  It wasn't like this worm had targeted one country or anything like that.
[05:07.340 --> 05:09.740]  So I decided I didn't want to give them that data.
[05:09.900 --> 05:15.520]  I talked to a criminal lawyer that has helped out 2600 before.
[05:15.900 --> 05:18.760]  And a friend, Mackie, turned me on to her.
[05:19.580 --> 05:21.180]  Jennifer, I forget her last name.
[05:21.960 --> 05:22.600]  Thank you.
[05:23.940 --> 05:26.680]  But she told me what I could and couldn't do.
[05:26.780 --> 05:30.380]  I couldn't just publish all the data that I was getting.
[05:30.380 --> 05:35.280]  I couldn't make that cool MySQL database I had set up available to the whole world.
[05:35.460 --> 05:40.840]  I could make portions of it available, but not all of it because there are already laws out there.
[05:40.960 --> 05:43.960]  So I got involved in all this law stuff that I never really thought about.
[05:44.160 --> 05:45.260]  And that was kind of fun.
[05:45.380 --> 05:47.900]  I hadn't really thought about privacy that much before.
[05:48.160 --> 05:51.080]  I had always just assumed that everything could be read by anyone.
[05:51.240 --> 05:52.720]  This just sort of confirmed that.
[05:56.580 --> 05:59.080]  So I set up a web interface.
[06:00.120 --> 06:02.260]  I think there's an internet connection here.
[06:02.280 --> 06:04.400]  So I'm not going to really be able to show that to you.
[06:04.980 --> 06:06.460]  Let's see, where am I on this list?
[06:07.320 --> 06:10.740]  Oh, so I made the badtrans.monkeybrains.net site.
[06:10.860 --> 06:12.480]  And I made that live.
[06:12.560 --> 06:15.060]  And people started to check that out.
[06:15.220 --> 06:17.660]  And I got a lot of publicity from rotten.com.
[06:17.780 --> 06:19.200]  I published a story on it.
[06:19.920 --> 06:28.560]  And Tom and Mackey and I worked together on writing a description of what I'd been doing with the badtrans data that I'd been collecting.
[06:31.220 --> 06:32.380]  And let's see.
[06:36.560 --> 06:38.860]  It was really fun looking through the database.
[06:39.220 --> 06:41.880]  I'm sorry I couldn't make all the messages available to you all.
[06:42.140 --> 06:44.140]  I don't know if anyone's... has anyone looked at that site?
[06:45.080 --> 06:45.980]  A couple people?
[06:46.280 --> 06:46.960]  I don't know.
[06:47.480 --> 06:48.320]  Oh, that's cool.
[06:48.320 --> 06:50.420]  So some people are aware of this thing.
[06:53.260 --> 06:59.940]  I looked through the messages and just saw that some people, you know, were like looking for other jobs while they're at one job.
[07:00.100 --> 07:01.880]  Other people were trying to make up with girlfriends.
[07:02.040 --> 07:03.360]  Some people were getting new girlfriends.
[07:03.660 --> 07:05.240]  Some people were getting boyfriends.
[07:05.360 --> 07:07.060]  And other people were getting two or three boyfriends.
[07:07.540 --> 07:13.160]  And it's just this real standard patterns that I started to see.
[07:13.160 --> 07:15.020]  Maybe it's just because I searched for one term.
[07:15.160 --> 07:17.340]  A lot of things came up and I'm like, wow, that's really normal.
[07:17.720 --> 07:18.560]  And it is fun.
[07:18.680 --> 07:21.380]  I'd let my roommates come to my room and they'd search for a word.
[07:21.540 --> 07:23.700]  Like one roommate thought about it for a second.
[07:23.820 --> 07:24.560]  He said, panties.
[07:24.560 --> 07:26.900]  And then all this chat porn stuff came up.
[07:27.000 --> 07:33.780]  It would log stuff from chat windows, from Microsoft Word documents that you never intended to send over the internet.
[07:34.080 --> 07:39.180]  It would record everything that you deleted, backspaced over and then type something new.
[07:39.340 --> 07:43.080]  If you misspelled something, that's how a keystroke logger works in case people aren't familiar with one.
[07:48.160 --> 07:51.620]  And another guy came in who was a little bit more politically minded.
[07:51.660 --> 07:53.620]  And I'm like, what word do you want to look up?
[07:53.720 --> 07:55.300]  And he said, I've never thought about it.
[07:55.320 --> 07:57.140]  He thought about it longer than my roommate.
[07:57.300 --> 07:58.480]  And he's like, uh, anarchy.
[07:58.660 --> 08:00.020]  And then we searched for that.
[08:00.020 --> 08:07.060]  And there's this story about how some teacher was scared about this anarchy program that was being set up in some high school in the Midwest.
[08:07.560 --> 08:09.480]  This is good Big Brother material here.
[08:09.640 --> 08:11.540]  You know, you get to see what people are thinking about.
[08:11.540 --> 08:12.820]  You can search for other words.
[08:12.960 --> 08:16.400]  I don't know, Taliban or credit card number or password.
[08:16.800 --> 08:18.420]  You can get all kinds of stuff out of it.
[08:19.900 --> 08:21.240]  So, that site was up.
[08:21.320 --> 08:22.160]  And there's one section.
[08:23.160 --> 08:24.920]  There's three things you could search.
[08:25.020 --> 08:26.440]  You could search for your email address.
[08:26.560 --> 08:30.900]  And if you were infected, it would send you an email saying, yes, you are infected.
[08:31.060 --> 08:33.020]  If you weren't infected, it wouldn't send you one at all.
[08:33.700 --> 08:36.180]  At first, I had the results published on the site.
[08:36.300 --> 08:39.920]  Like, you could put in, you know, my friend at some other ISP.com.
[08:39.920 --> 08:41.240]  And it would say yes or no.
[08:41.460 --> 08:50.340]  But it turned out that the FBI suggested to me that that was a bad idea to publish that information because it's revealing what's in the database by giving a positive or a negative.
[08:50.540 --> 08:53.320]  So, I changed it around to, okay, it just returns.
[08:53.320 --> 08:54.800]  If you're infected, you'll get an email.
[08:54.920 --> 08:55.860]  If you're not, you won't.
[08:55.980 --> 09:00.440]  So, supposedly, if you put in your own email address, only you can receive that email.
[09:00.440 --> 09:05.340]  And if you put in your friend's email, then why, you can't, you don't know if they're infected or not.
[09:05.560 --> 09:06.840]  So, that's the first part of the database.
[09:07.040 --> 09:08.400]  The second part was the passwords.
[09:08.740 --> 09:15.640]  You could put in any search string you wanted, like, I don't know, like, Microsoft.
[09:15.780 --> 09:20.920]  And get anything that had to do, like, with the Microsoft.com site, if there's passwords for that, perhaps.
[09:21.040 --> 09:26.580]  Or you could put in .gov, and you could find out all kinds of cool passwords for government websites.
[09:26.580 --> 09:30.700]  You could put in .gov, and you could get all the free .gov website passwords you wanted.
[09:31.020 --> 09:36.040]  You could do .gov, and you could find different sites that you could have .gov access to suddenly.
[09:36.820 --> 09:41.740]  So, this became, this became a little bit of a stir in the security community.
[09:45.870 --> 09:54.730]  Security Focus got an email from, actually, I think, first what happened is this company, Paraprotect.
[09:54.990 --> 09:56.470]  Is anyone familiar with that company?
[09:58.230 --> 10:02.710]  They, they provide security for a lot of big companies in the U.S.
[10:02.810 --> 10:12.430]  Like, Nasdaq Online, Ford, Motorola, I don't know, just to name a few big companies.
[10:12.570 --> 10:15.390]  And some smaller ones, too, and some military ones, and stuff like that.
[10:15.610 --> 10:19.750]  Yeah, like, a couple of military websites.
[10:20.710 --> 10:31.430]  They send an email to all their clients saying, oh, there's this tool on the web where you can go, and you can put in your search stream.
[10:31.430 --> 10:39.690]  And it will return, it will return all the different resources that it has passwords for, that I have passwords for.
[10:39.910 --> 10:50.390]  And it would, it would just show the resource, like, http.www.ford.com slash members, and then it would say username and password.
[10:50.390 --> 10:54.410]  I, like, hit all the usernames and passwords, so it just gave the string username and password.
[10:55.570 --> 10:59.490]  I have my own personal version where I can search and find out what people's real passwords are.
[10:59.690 --> 11:02.090]  It's kind of fun to see those patterns, too.
[11:02.290 --> 11:04.150]  Again, people pick really simple things.
[11:04.290 --> 11:06.230]  It's no surprise to any of you here, I'm sure.
[11:06.710 --> 11:11.190]  But, um, so, a company could go, like, forward.
[11:11.350 --> 11:17.650]  They would put in their, their company name, and they'd get back 48 hits.
[11:17.810 --> 11:20.370]  And they'd be unique resources, like, different URLs.
[11:20.970 --> 11:34.990]  Like, a lot of sites have, like, unique, uh, you know, when you go to a website, a little window pops up that says, put in your password, and it says, this is for members only, or this is for forward customers, or this is for, you know, a Dow chemical product,
[11:35.130 --> 11:37.350]  uh, partners, or something like that.
[11:37.610 --> 11:41.090]  And so, they could see all the passwords that I, the number of passwords I had.
[11:41.290 --> 11:43.150]  And they, they would email me a request.
[11:43.270 --> 11:45.250]  I made a, made up some rules.
[11:45.470 --> 11:50.150]  I run an ISP, and I get really pissed when people don't have an abuse at your domain.com.
[11:50.490 --> 11:54.090]  So, the only person I would send the results to would be the abuse address.
[11:54.670 --> 11:55.530]  For two reasons.
[11:55.710 --> 11:57.750]  One, I, I want everyone to have an abuse address.
[11:57.750 --> 12:02.890]  And number two, it's the only way that I could ensure that the data wouldn't fall into the wrong hands.
[12:03.010 --> 12:14.630]  Because I gave, if I gave a list of, uh, username and passwords to say, um, Joe Smith at, um, yahoo.com, to claim, who claimed to be the sysadmin for yahoo.com, I'd probably get in trouble.
[12:15.070 --> 12:17.430]  So, I had to mail it somewhere reliable.
[12:17.670 --> 12:22.450]  So, I sent it to the abuse address, and, um, uh, that went fine.
[12:22.630 --> 12:28.070]  And after about 30 of these requests, I realized, wow, there's a bunch of these coming in, and it's taking up my time.
[12:28.230 --> 12:28.990]  I was doing it for free.
[12:29.150 --> 12:31.090]  So, I instituted a $10 fee.
[12:31.350 --> 12:33.870]  Which is trivial to a large company.
[12:34.070 --> 12:35.910]  But I, I made them pay with PayPal.
[12:36.570 --> 12:37.790]  So, that gets interesting.
[12:38.710 --> 12:45.090]  There's, there's one, uh, there's one company that, uh, people were calling me up from all over.
[12:45.350 --> 12:46.870]  It's, it's entertaining to say the least.
[12:47.190 --> 12:51.310]  But, uh, this one guy called, and he's like, you know, we're, we're in a Fortune 500 company.
[12:51.430 --> 12:52.510]  Do you know what that means to you?
[12:52.610 --> 12:53.770]  And I'm like, nothing.
[12:55.390 --> 12:56.570]  I work for myself.
[12:57.650 --> 13:02.030]  Uh, so, uh, I think that was a Hartford or something, Hanford.
[13:02.190 --> 13:02.470]  I don't know.
[13:02.550 --> 13:03.570]  They do something with finances.
[13:03.830 --> 13:05.570]  I really don't keep up on those companies.
[13:06.270 --> 13:12.510]  Um, but, uh, that security guy got really upset that I wouldn't just give him the information.
[13:12.510 --> 13:18.390]  So, I'm like, you have to set up a PayPal account and you have to send $10 to billing at monkeybrains.net.
[13:21.010 --> 13:23.990]  And, you know, I, I did that for a couple of reasons.
[13:24.210 --> 13:25.290]  One, just to fuck with him.
[13:25.630 --> 13:35.910]  And, uh, number two, I would like to see a system where big companies are more willing to give individuals small chunks of money.
[13:35.910 --> 13:43.670]  There's, people talk about microtransactions all the time and how these big companies want to gather little pieces of money from all the people.
[13:43.830 --> 13:47.110]  What about the big companies giving little pieces of money to all the people?
[13:47.230 --> 13:47.910]  Kind of the reverse.
[13:48.910 --> 13:57.270]  So, I was thinking that would kind of be cool if, uh, more people sort of, uh, I don't know, you could call it blackmail if you wanted to.
[13:57.590 --> 13:58.610]  Blackmail big companies.
[13:58.770 --> 14:04.770]  But, if you do it for a small enough fee, like $10, they're not going to waste their time suing you or getting put, entering your legal department.
[14:05.110 --> 14:07.930]  I think a lot of the admins just paid out of their own pocket.
[14:08.070 --> 14:09.510]  But, it made them think about it.
[14:09.730 --> 14:13.050]  So, that, that was, you know, that was rewarding for me.
[14:13.150 --> 14:16.170]  I had other people thinking about something that I had thought about.
[14:16.170 --> 14:18.250]  So, that felt good.
[14:21.490 --> 14:24.450]  And, so, I did the abuse and they had to do PayPal.
[14:25.250 --> 14:27.910]  And, I did a couple of trades with some people.
[14:28.230 --> 14:31.590]  Like, I have a DSL connection with speakeasy.net.
[14:31.730 --> 14:34.990]  And, they're great if you, if you want DSL, I recommend them.
[14:35.190 --> 14:36.590]  Because, they're a smaller company.
[14:36.730 --> 14:39.490]  They're smaller than PacBell or Verizon or whatever.
[14:40.050 --> 14:42.910]  So, they're the little, we try harder company.
[14:45.030 --> 14:49.310]  So, their admin gave me a free month in exchange for the passwords.
[14:49.450 --> 14:50.270]  I'm like, that's a good deal.
[14:50.570 --> 14:53.170]  And then, Playboy sent me two issues of Playboy.
[14:54.450 --> 14:56.650]  Alright, I'll bend the rules a little.
[14:57.970 --> 15:07.230]  Well, it was kind of a good deal because I had another website, which I'll go ahead and plug right now, called thefirsttwins.com, which focuses on the activities of Jenna and Barbara Bush.
[15:08.090 --> 15:14.970]  And, they'd written up, this guy, Mark Fraunfelder, writes articles for Playboy every now and then.
[15:15.190 --> 15:17.130]  He was just in an Apple commercial, by the way.
[15:17.470 --> 15:18.970]  I don't know if you guys follow that guy.
[15:19.170 --> 15:21.530]  He used to be an editor at Wired.
[15:22.110 --> 15:22.730]  But, anyhow.
[15:22.950 --> 15:26.690]  He had written a story about thefirsttwins.com, and I didn't know that.
[15:26.810 --> 15:30.030]  So, they had the Playboys that I usually don't purchase.
[15:30.030 --> 15:35.290]  So, they gave me two copies of those, and I got really excited about that, seeing the first Twins write-up, that is.
[15:38.490 --> 15:39.030]  Let's see.
[15:39.710 --> 15:40.110]  So, yeah.
[15:41.050 --> 15:42.770]  Paraprotect blessed the site, in a way.
[15:42.990 --> 15:44.110]  They're like, check this out.
[15:44.210 --> 15:47.830]  And then, I changed it from being free to $10 when no one was looking.
[15:48.050 --> 15:52.450]  And then, security focused, someone wrote to them, like, this looks like blackmail or something like that.
[15:52.750 --> 16:00.010]  They wrote some stuff, and I replied to the thread, and they didn't, I don't think they put my message up in their thread.
[16:00.030 --> 16:02.810]  It's like, what's it called, moderated?
[16:03.270 --> 16:03.890]  I don't know.
[16:03.990 --> 16:05.290]  They didn't like my response.
[16:06.390 --> 16:06.910]  So, yeah.
[16:07.010 --> 16:07.750]  And then, I went commercial.
[16:08.410 --> 16:10.710]  And then, something else interesting happened.
[16:10.770 --> 16:14.050]  A bunch of really interesting things happened from this bad trans project.
[16:14.190 --> 16:14.930]  I got Playboys.
[16:15.110 --> 16:16.850]  I got to screw with big companies.
[16:17.110 --> 16:19.670]  And then, PayPal decided to freeze my account.
[16:21.850 --> 16:22.550]  Go figure.
[16:23.530 --> 16:27.010]  I think, in the end, I made maybe $400 bucks or something.
[16:27.210 --> 16:27.730]  I don't know.
[16:27.730 --> 16:33.590]  Something pretty trivial, considering the amount of time and bandwidth that I put into the project.
[16:33.850 --> 16:35.290]  You know, it didn't cover my cost.
[16:35.410 --> 16:36.290]  That wasn't the goal.
[16:38.410 --> 16:45.210]  But PayPal froze my account because someone decided, hey, I have keystroke logging data, too.
[16:45.470 --> 16:46.830]  I think this is what someone was thinking.
[16:46.910 --> 16:47.830]  I don't know who it was.
[16:48.190 --> 16:50.570]  You can come up to me later if it was you and tell me.
[16:50.570 --> 16:51.850]  I would get a good laugh out of it.
[16:54.370 --> 16:58.930]  Someone had a bunch of passwords for PayPal accounts that they had been holding onto.
[16:59.290 --> 17:03.230]  And they transferred money illegally into my PayPal account.
[17:03.370 --> 17:06.590]  And instead of doing the $10 amount, they were moving like $100 chunks.
[17:06.970 --> 17:09.170]  And so I got a whole bunch of money for a while there.
[17:09.310 --> 17:10.670]  And I was...
[17:10.670 --> 17:11.990]  It happened real fast.
[17:12.150 --> 17:15.810]  I'm like, should I take it all out and just pretend like, you know, I never had it?
[17:16.050 --> 17:16.550]  That's too quick.
[17:16.810 --> 17:18.490]  I get transferred to my bank account.
[17:18.610 --> 17:19.550]  It takes like 24 hours.
[17:19.650 --> 17:20.970]  That's before anyone's going to figure it out.
[17:21.130 --> 17:23.070]  It took them like two weeks to freeze my account.
[17:23.070 --> 17:26.710]  So I had this nice fat balance in my PayPal account.
[17:26.890 --> 17:28.610]  And I really wanted to take the money out.
[17:28.690 --> 17:32.770]  But I decided that money's not worth going to jail for.
[17:34.210 --> 17:35.710]  So I didn't do it.
[17:35.870 --> 17:36.950]  I left the money in there.
[17:37.430 --> 17:38.570]  PayPal froze my account.
[17:38.710 --> 17:40.650]  I couldn't accept any money from other people.
[17:40.990 --> 17:43.430]  I lost, you know, tens of $10.
[17:43.990 --> 17:44.850]  So at least $100.
[17:45.890 --> 17:46.370]  TENS!
[17:48.270 --> 17:49.250]  It was upsetting.
[17:49.250 --> 17:59.530]  But a couple of the PayPal people emailed me like, hey, some money came out of my account and went into yours.
[17:59.530 --> 17:59.970]  Why?
[18:01.510 --> 18:02.230]  I don't know.
[18:02.310 --> 18:04.770]  I think there's someone out there that has your password.
[18:04.910 --> 18:05.570]  You should change it.
[18:07.710 --> 18:10.130]  And I refunded one person manually.
[18:10.290 --> 18:15.250]  And then I realized, if I keep doing this, they're going to get my refund.
[18:15.250 --> 18:17.570]  And then the whole system is going to get screwed up.
[18:17.570 --> 18:19.970]  And they're going to ask for a refund again from PayPal.
[18:20.210 --> 18:21.670]  And they're going to get double refunded.
[18:21.690 --> 18:23.270]  So I just said, you have to email PayPal.
[18:23.590 --> 18:27.650]  And PayPal is really, really slow to accept emails.
[18:27.790 --> 18:28.730]  I don't think they accept emails.
[18:28.830 --> 18:30.550]  You have to do this web-based interface thing.
[18:30.910 --> 18:33.830]  And no one will really respond to you personally.
[18:33.850 --> 18:35.550]  It's always from a generic account.
[18:35.690 --> 18:37.070]  I hate that when dealing with it.
[18:37.230 --> 18:42.230]  When you deal with a large company, no one takes on an issue on a personal level.
[18:44.110 --> 18:46.270]  Not only PayPal, but a lot of companies suck.
[18:47.030 --> 18:53.070]  When a problem comes in, that task should be devoted to someone with a name, like Tom.
[18:53.630 --> 18:56.270]  And then Tom should say, alright, I run rotten.com.
[18:56.390 --> 18:58.190]  I take care of one fourth of the complaints.
[18:58.290 --> 19:04.170]  I'm going to deal with this person that doesn't like the chainsawed off arm in that photo I got from South America.
[19:04.470 --> 19:05.770]  They have big chainsaws down there.
[19:06.050 --> 19:06.690]  Lots of tree cutting.
[19:08.730 --> 19:10.270]  So, Tom should deal with it.
[19:10.330 --> 19:13.570]  When the person writes back, there should be a little system set up where he gets all of them.
[19:13.670 --> 19:17.550]  And then when he's done with that, the next message goes to someone else, like Guedes.
[19:17.690 --> 19:22.030]  And then Guedes deals with the, you know, whatever the next problem is.
[19:22.350 --> 19:26.570]  The child swallowed by the snake in Central America somewhere.
[19:27.410 --> 19:28.610]  That was a good camping trip.
[19:36.250 --> 19:42.390]  And then I told the FBI that I wouldn't give them the data unless, you know, they got a court order.
[19:42.770 --> 19:51.090]  Or that they somehow had the judicial branch step in and, you know, have the executive...
[19:51.090 --> 19:56.330]  I was thinking in my head, you know, executive, judicial branch, checks, balances, government, all this stuff I learned in high school.
[19:56.330 --> 19:59.290]  And just a quick aside.
[19:59.990 --> 20:01.210]  I don't know if you guys saw this.
[20:01.310 --> 20:07.610]  About two weeks ago in the New York Times, there's this chart on the Homeland Security front, how they want to reorganize it.
[20:07.670 --> 20:10.690]  And they have all these little three-letter acronyms and how they're all arranged.
[20:10.830 --> 20:11.770]  Did anyone see that?
[20:12.450 --> 20:13.410]  That was pretty cool.
[20:13.650 --> 20:17.130]  But it turns out the FBI is right below the judicial branch.
[20:17.350 --> 20:18.190]  I didn't even think of that.
[20:18.690 --> 20:20.530]  Investigation, Federal Bureau investigation.
[20:20.850 --> 20:23.490]  So, of course, the courts are going to give them whatever they want.
[20:24.750 --> 20:28.150]  So, the FBI came and gave me a visit.
[20:28.370 --> 20:32.670]  It was four guys in suits with shoes and a black SUV.
[20:33.070 --> 20:34.210]  It was so predictable.
[20:36.090 --> 20:39.710]  I pulled in with my car and they pulled in behind me and...
[20:39.710 --> 20:41.330]  I don't know if they've been following me or what.
[20:41.490 --> 20:45.290]  But they went down the block to another warehouse.
[20:45.290 --> 20:48.630]  I work in this area where there's a bunch of warehouses.
[20:49.410 --> 20:51.730]  And I have computers and a couple of different ones.
[20:51.870 --> 20:53.150]  And they went to a different one.
[20:53.310 --> 20:55.310]  And I'm like, those guys don't look like they fit in the neighborhood.
[20:55.490 --> 20:56.190]  But I was in a hurry.
[20:56.270 --> 20:58.610]  There's a server down in the data center.
[20:58.750 --> 21:01.570]  So, I was running in to grab my laptop and to go back out.
[21:04.610 --> 21:08.210]  And, you know, right when I'm going back down my stairs, my cell phone rings.
[21:08.350 --> 21:09.290]  And it's my friend, Geek Boy.
[21:09.530 --> 21:11.150]  And I'm like, oh, Geek Boy is calling me.
[21:11.510 --> 21:12.870]  Rudy, they're here.
[21:14.030 --> 21:17.890]  I look down the stairs and one of my roommates is just leaving.
[21:18.090 --> 21:19.430]  And she's like locking the door.
[21:19.550 --> 21:20.710]  And she's like, through the glass door.
[21:20.750 --> 21:21.590]  I don't know if he's here.
[21:21.630 --> 21:22.530]  And she looks up at me.
[21:22.610 --> 21:23.350]  And she's like, run!
[21:26.980 --> 21:31.460]  And I was like, well, I was expecting them to come.
[21:31.460 --> 21:33.260]  So, what's the point in running at this point?
[21:33.980 --> 21:37.040]  I knew that they were going to come.
[21:37.300 --> 21:39.640]  And I only had windows on the second floor.
[21:39.760 --> 21:40.680]  There wasn't far to run.
[21:44.340 --> 21:45.980]  So, I went down and said hi.
[21:46.140 --> 21:47.380]  And I was really scared at first.
[21:47.500 --> 21:49.240]  I was shaking for about 30 seconds.
[21:49.380 --> 21:52.130]  I was like, fuck, they're going to kill me.
[21:52.830 --> 21:54.310]  But then I calmed down.
[21:54.610 --> 21:56.910]  And then we had a little chat.
[21:57.690 --> 21:59.710]  And I went for a ride in their SUV.
[21:59.950 --> 22:01.910]  I'm not supposed to tell you what we talked about.
[22:09.370 --> 22:10.990]  We went to the data center.
[22:11.250 --> 22:12.990]  I got to work on the computer that was down.
[22:14.490 --> 22:15.390]  They helped me.
[22:18.490 --> 22:19.830]  I showed up their tech.
[22:21.890 --> 22:22.630]  There's one guy.
[22:24.110 --> 22:24.890]  There's four guys.
[22:25.110 --> 22:26.130]  There's one big burly guy.
[22:26.290 --> 22:26.890]  He's like the muscle.
[22:27.530 --> 22:30.810]  Then there's a quiet guy that didn't say anything the whole time.
[22:30.950 --> 22:31.630]  I'll get back to him.
[22:31.630 --> 22:33.530]  Then there's a guy who did all the talking.
[22:33.730 --> 22:34.470]  He's like the ring leader.
[22:34.790 --> 22:36.590]  And then there's the Asian guy.
[22:36.710 --> 22:37.290]  He was the tech.
[22:38.330 --> 22:39.810]  I don't want to stereotype here.
[22:39.910 --> 22:41.950]  But that's just the way it works out in the FBI.
[22:42.170 --> 22:43.230]  They wear black suits.
[22:43.490 --> 22:44.390]  The techies are Asian.
[22:50.530 --> 22:51.750]  It was fun.
[22:52.370 --> 22:53.830]  I got to ride around in an SUV.
[22:55.190 --> 22:58.590]  They were a little upset when we pulled up to the data center.
[22:58.770 --> 23:02.850]  Because someone apparently had keyed their SUV while they were inside.
[23:07.550 --> 23:10.110]  I have a lot of neighbors that look out for me.
[23:12.030 --> 23:13.990]  But I don't know what happened.
[23:14.170 --> 23:16.330]  I think they bumped into some construction on the way.
[23:16.410 --> 23:17.970]  There's a lot of construction in San Francisco.
[23:18.090 --> 23:19.070]  The roads are really bad.
[23:19.690 --> 23:21.450]  I don't really think it was a key.
[23:24.090 --> 23:24.750]  At all.
[23:26.770 --> 23:27.850]  Did they threaten me?
[23:28.390 --> 23:29.470]  They didn't need to.
[23:29.550 --> 23:30.170]  I was scared.
[23:34.390 --> 23:36.590]  No, I wasn't like unholy scared.
[23:36.710 --> 23:38.210]  I wasn't like pissing myself scared.
[23:38.590 --> 23:41.010]  But after 30 seconds, I calmed down.
[23:41.150 --> 23:42.490]  I said, okay, they're not going to kill me.
[23:42.590 --> 23:43.770]  They probably would have already done that.
[23:43.910 --> 23:45.590]  They're just here to talk to me.
[23:45.650 --> 23:47.130]  And it's going to be calm.
[23:47.530 --> 23:48.830]  And actually, it was fun.
[23:48.950 --> 23:58.790]  As we started to drive over to the data center, which is just three or four miles from where I live and work, we chatted about the data.
[23:58.790 --> 24:00.870]  And I told them, I don't think you guys should have this.
[24:00.990 --> 24:02.690]  And they're like, well, we think we should have it.
[24:02.810 --> 24:03.490]  I'm like, okay.
[24:04.370 --> 24:14.170]  And I told them my rationale that the data is private keystroking stuff from people all around the world and from the US.
[24:14.870 --> 24:19.670]  And it's not stuff that people intended other people to read, especially the government.
[24:22.810 --> 24:25.390]  And they're like, well, you know, it might help us catch the culprit.
[24:25.390 --> 24:33.510]  I'm like, well, I gave you the IP address that signed up for the remailer, for the remailing, for the free alias thing.
[24:34.290 --> 24:37.610]  And the email box that it was going to is going to some Yahoo account.
[24:38.470 --> 24:39.830]  Oh, this is something else real quick.
[24:39.970 --> 24:41.590]  I don't know if you could, do you guys want more tech detail?
[24:41.710 --> 24:42.110]  Do you like that?
[24:42.530 --> 24:42.790]  Yeah.
[24:42.790 --> 24:42.850]  All right.
[24:43.070 --> 24:43.630]  All right.
[24:45.170 --> 24:45.810]  Let's see.
[24:47.770 --> 24:48.210]  Okay.
[24:48.730 --> 24:49.590]  Did you give the data?
[24:49.870 --> 24:50.450]  Mm-hmm.
[24:50.590 --> 24:51.890]  Did you give them the data?
[24:52.850 --> 24:53.730]  I don't.
[24:54.050 --> 24:54.870]  No comment.
[24:56.190 --> 24:57.090]  I'll take that from yes.
[24:57.190 --> 24:57.570]  Thank you.
[24:57.690 --> 24:58.030]  All right.
[25:02.150 --> 25:06.270]  So all the email, the remailing stuff, that's in a different MySQL database.
[25:06.270 --> 25:16.510]  I set up a little script for my customers so that you can have free email addresses on your, if you host a website with me.
[25:16.630 --> 25:19.670]  I have like 100 websites or something that I host, maybe 150.
[25:19.830 --> 25:20.910]  I don't really keep track.
[25:21.030 --> 25:22.070]  I'm really bad at business.
[25:22.310 --> 25:23.050]  I'm good at the tech.
[25:25.950 --> 25:28.190]  And so I went into the database.
[25:28.430 --> 25:31.310]  I'm like, this guy, it's causing me all this trouble.
[25:31.430 --> 25:33.730]  I'm going to erase the record.
[25:33.890 --> 25:41.210]  I'm going to go into the /etc/mail file and put in an alias so that suck my prick goes to the SMP mail spool file.
[25:41.290 --> 25:43.150]  And I started to collect all this stuff and it was really cool.
[25:43.390 --> 25:44.790]  And suddenly it stopped showing up.
[25:44.890 --> 25:45.730]  I'm like, why did it stop?
[25:45.930 --> 25:46.710]  Is the worm gone?
[25:47.010 --> 25:48.450]  Did everyone do Norton update?
[25:48.650 --> 25:49.270]  I don't think so.
[25:50.750 --> 25:56.010]  So, in fact, I turned on the collection of data.
[25:56.210 --> 25:57.370]  I'm getting tired of leaning over.
[25:57.470 --> 25:57.730]  Hold on.
[25:58.210 --> 26:04.570]  I turned back on the collection of data before H2K so I could get a fresh half gig of stuff.
[26:04.710 --> 26:07.110]  Over like three days I got half a gig more of emails.
[26:07.350 --> 26:10.730]  Just so I could look through it and find new patterns to talk about.
[26:10.930 --> 26:11.930]  I like setting patterns.
[26:13.530 --> 26:16.310]  Anyhow, so I erased that email address.
[26:16.310 --> 26:24.330]  And then someone went back to the free email thing and signed up for the suck my prick alias again.
[26:24.330 --> 26:25.910]  And they made it go to a different mailbox.
[26:26.270 --> 26:28.630]  So they got me.
[26:28.750 --> 26:31.710]  And then I went in and I fixed it so that they couldn't do that again.
[26:31.950 --> 26:33.290]  I had to change my code a little.
[26:34.510 --> 26:40.370]  So I had two mailboxes where the worm data had been going to.
[26:40.430 --> 26:41.710]  And I gave those to the FBI too.
[26:41.790 --> 26:45.850]  I had no problem with helping out as much as I think I should help out.
[26:46.310 --> 26:51.330]  Like, if anyone here ever has a run with the FBI, you know, try to follow the law.
[26:51.330 --> 26:53.030]  I mean, you don't want to be in jail.
[26:54.930 --> 26:58.750]  You know, and I thought maybe the law had provisions for privacy.
[26:58.990 --> 27:00.290]  Were you threats?
[27:01.650 --> 27:02.130]  No.
[27:02.530 --> 27:03.350]  There's no threats.
[27:04.190 --> 27:04.710]  None.
[27:09.290 --> 27:10.590]  No, nothing like that.
[27:10.590 --> 27:11.050]  They're like...
[27:11.450 --> 27:14.650]  They sent me a document in the mail.
[27:14.850 --> 27:16.170]  I'm not going to tell you what it was.
[27:16.350 --> 27:17.150]  I'm not supposed to.
[27:17.390 --> 27:19.550]  And there's a little post-it on it saying...
[27:19.550 --> 27:20.410]  And it was signed...
[27:20.410 --> 27:22.450]  There's a funny joke and it was signed to Big Brother.
[27:22.730 --> 27:24.050]  Like the contact I've been talking.
[27:25.070 --> 27:25.990]  Ha, ha, ha.
[27:26.570 --> 27:30.210]  And I thought that was kind of funny, but at the same time a little scary.
[27:35.550 --> 27:40.450]  So I turned off that alias and I got that stuff back.
[27:43.430 --> 27:50.170]  Oh, the program that does the free email remailing watches the mail log.
[27:50.290 --> 27:54.370]  If there's more than N in 15 minutes, it shuts that user off.
[27:54.470 --> 27:57.470]  And if there's more than X in an hour, it shuts them off as well.
[27:57.570 --> 28:00.250]  So it sort of throttles this free service.
[28:00.250 --> 28:07.250]  I don't want people to take advantage of it for worm data collection or for spamming people because I really hate spam.
[28:08.870 --> 28:09.470]  Let's see.
[28:19.760 --> 28:23.860]  It dumps it into a file for me to see if it's a spammer or not.
[28:24.020 --> 28:25.640]  It's a standard practice of ISPs.
[28:26.360 --> 28:29.080]  That's why I was able to collect this data legally.
[28:30.340 --> 28:35.560]  If it's part of your standard operations to collect things that go awry, then you're entitled to look at it.
[28:36.000 --> 28:43.500]  If you log on to someone else, if you log on to a router and watch other people's traffic, you can't legally study that data.
[28:44.080 --> 28:51.400]  But if it comes to your computer as a natural part of your services, then you're allowed to do whatever you want with it.
[28:51.500 --> 28:52.000]  You own it.
[28:57.380 --> 28:58.540]  Oh, the quiet guy.
[28:58.740 --> 28:58.900]  Yeah.
[28:59.440 --> 29:00.320]  He was weird.
[29:02.600 --> 29:04.320]  I have two theories about the quiet guy.
[29:04.460 --> 29:05.280]  Thanks for bringing that up.
[29:06.080 --> 29:11.640]  He was either the psychologist and he was really watching my reactions and stuff.
[29:12.340 --> 29:13.440]  Is this guy nuts?
[29:13.600 --> 29:14.240]  What's up with him?
[29:14.280 --> 29:14.780]  Is he a threat?
[29:14.980 --> 29:16.000]  Or he's the trainee.
[29:16.000 --> 29:20.240]  I like thinking about this guy who didn't say anything.
[29:20.540 --> 29:21.420]  Was he a trainee?
[29:21.720 --> 29:25.160]  Or was he the guy who's making the decision whether they're going to come shoot me next week?
[29:26.600 --> 29:30.480]  That was fun, just to have that eerie fourth party along with them.
[29:32.240 --> 29:33.920]  The muscle guy was huge.
[29:34.380 --> 29:35.680]  They all had guns, I think.
[29:36.080 --> 29:36.540]  I don't know.
[29:36.800 --> 29:38.960]  I didn't really see bulges, but I wasn't looking.
[29:39.180 --> 29:41.180]  I don't look in bulges and guys.
[29:41.380 --> 29:41.860]  What can I say?
[29:48.240 --> 29:49.040]  Let's see.
[29:49.720 --> 29:51.540]  Oh, here's something else interesting.
[29:51.700 --> 29:54.200]  I searched for bad trans in the message database.
[29:54.480 --> 29:57.360]  And there's thousands of results of people emailing each other.
[29:57.480 --> 30:02.220]  I had this horrible virus, worm, Trojan horse, keylogger thing.
[30:02.460 --> 30:05.740]  And you probably got infected, but I got rid of it.
[30:05.860 --> 30:06.620]  Don't worry about it.
[30:10.140 --> 30:13.740]  And I just checked the last week and people are still typing the same thing.
[30:15.300 --> 30:17.160]  People are, by and large, similar.
[30:17.560 --> 30:18.360]  Privacy scares.
[30:21.140 --> 30:22.660]  Corporate workers can be schmucks.
[30:22.760 --> 30:25.720]  I talked about that guy who told me he was a Fortune 500 guy.
[30:25.720 --> 30:28.380]  And the FBI are not super humans.
[30:30.560 --> 30:31.420]  I don't know.
[30:32.500 --> 30:34.300]  Their techie wasn't brilliant.
[30:35.620 --> 30:42.240]  He was having a hard time getting a good connection to my server, even though it's just a wire from his laptop to my server.
[30:44.720 --> 30:46.840]  Granted, I can't get a connection here, but you know.
[30:49.040 --> 30:51.220]  He was getting really slow throughput.
[30:51.400 --> 30:53.660]  And he's like, you have it throttled by IP or something.
[30:53.720 --> 30:55.220]  I'm like, well, use IP I'm using.
[30:55.320 --> 30:56.420]  I had my laptop there, too.
[30:56.580 --> 30:57.840]  And I'm like, look how fast I'm going.
[30:58.740 --> 31:00.340]  And his computer is going real slow.
[31:00.800 --> 31:05.740]  And I copied the same database just to show that I could do it fast.
[31:08.060 --> 31:08.540]  Let's see.
[31:10.040 --> 31:13.100]  I wonder, I don't think I have too much more to say.
[31:13.300 --> 31:15.780]  Let me try to think if I have anything to wrap up before I take questions.
[31:21.400 --> 31:22.360]  Okay, anyone have questions?
[31:22.640 --> 31:25.440]  You can come up to the microphone or you can just yell it out if you're loud.
[31:25.920 --> 31:26.060]  Yes?
[31:28.720 --> 31:32.020]  The OS on the Techies laptop was some version of Linux.
[31:33.260 --> 31:34.620]  I was running FreeBSD.
[31:40.360 --> 31:42.190]  I can't hear that one, so I'll take that.
[31:42.450 --> 31:43.190]  Or just say it louder.
[31:43.320 --> 31:43.640]  What was that?
[31:43.840 --> 31:46.140]  Are you sure it was the FBI that came to see you?
[31:46.460 --> 31:48.040]  Oh, was I sure it was the FBI?
[31:48.520 --> 31:50.820]  Yeah, I did a little background checking.
[31:50.930 --> 31:53.820]  They gave me a phone number and I checked it on their website and it matched up.
[31:56.140 --> 31:57.540]  Also, that's a good question.
[31:57.540 --> 32:00.340]  You know, never trust anything anyone tells you.
[32:02.060 --> 32:03.880]  Especially if they're taking you away in a vehicle.
[32:07.780 --> 32:08.100]  Yeah.
[32:11.510 --> 32:13.370]  Oh, yeah, I'll take a web-enabled PC.
[32:14.370 --> 32:16.130]  I'll do a little demo on the database.
[32:16.610 --> 32:20.650]  I can't get to the secret message stuff though, because I made it really hard to do it from far away.
[32:20.730 --> 32:21.670]  I can only do it from home.
[32:22.130 --> 32:26.190]  If I could get this one on, I could SSH in, but I'm not going to do that from someone else's box.
[32:27.210 --> 32:28.670]  Oh, that's something else fun.
[32:29.110 --> 32:31.690]  A whole bunch of people tried to hack into my box.
[32:31.850 --> 32:32.630]  It was fun to watch.
[32:32.830 --> 32:38.830]  They were doing all these really cool SQL query manipulation in the query string.
[32:39.710 --> 32:41.770]  And in fact, there's one guy that was...
[32:41.770 --> 32:42.690]  I was watching the logs.
[32:42.850 --> 32:43.990]  He was starting to make progress.
[32:44.170 --> 32:45.290]  So I had to change my code.
[32:45.450 --> 32:46.350]  He found a hole.
[32:46.570 --> 32:48.270]  But I stopped him before he got in.
[32:51.890 --> 32:55.430]  So, real-time auditing while sitting in front of a terminal is a good thing.
[33:03.090 --> 33:04.890]  I had to go to the data center anyways.
[33:10.090 --> 33:11.810]  And I'm like, do you just want to give me a lift?
[33:11.890 --> 33:12.390]  And they're like, yeah.
[33:12.550 --> 33:13.190]  And I'm like, alright.
[33:13.670 --> 33:14.570]  I thought it would be fun.
[33:14.670 --> 33:15.810]  I mean, shit, what was I going to do?
[33:15.850 --> 33:17.310]  Drive my own car and have him follow me?
[33:17.310 --> 33:18.190]  And my car sucks.
[33:18.350 --> 33:19.490]  I have an old VW bug.
[33:19.890 --> 33:21.470]  They have plush leather seats.
[33:21.950 --> 33:24.490]  And they had a picture of me up in the front seat.
[33:24.710 --> 33:25.390]  It was kind of cool.
[33:29.590 --> 33:32.510]  The picture was from the Bay Guardian, a local...
[33:32.510 --> 33:33.770]  a weekly in San Francisco.
[33:34.950 --> 33:39.990]  There had been an article on me withholding the data from the FBI the previous week.
[33:40.650 --> 33:43.010]  And they had a copy of that article in their car.
[33:44.350 --> 33:45.150]  Yes, right there.
[34:00.310 --> 34:02.870]  Yeah, you can still see if your email is infected.
[34:03.190 --> 34:04.550]  And you can still put in...
[34:04.550 --> 34:06.610]  The question was, is the database still up?
[34:06.690 --> 34:07.370]  Can you query it?
[34:07.530 --> 34:14.250]  Yes, you can still query fractions of it, but I still can't make all of it available because I might get sued for libel, I think.
[34:14.250 --> 34:18.130]  If anyone's a really good lawyer out there and they want to defend me, I'll put it all up, whatever.
[34:18.510 --> 34:27.450]  But my understanding is that I can't put some of the data out there because there's already court cases that have happened that would get me in trouble.
[34:27.450 --> 34:35.810]  Like, I couldn't publish the usernames for those URLs that had been compromised because that's half of an access key.
[34:35.910 --> 34:37.290]  You need a username and a password.
[34:37.490 --> 34:39.230]  If you publish half, you can go to jail.
[34:39.230 --> 34:49.150]  So I didn't publish either half, but I published the publicly available resources that had been compromised.
[34:49.390 --> 34:51.550]  In other words, the URLs or whatever.
[34:52.230 --> 34:53.050]  What do you do?
[34:54.690 --> 34:58.970]  Well, you can go in there and you can see how many different sites got hacked.
[34:59.110 --> 35:03.790]  You can put in dog and see that all these dog sites had been broken into.
[35:03.990 --> 35:08.590]  You can put in, like, I wonder what kind of people get worms?
[35:08.750 --> 35:11.050]  Is it the kind of people that look at porno?
[35:11.210 --> 35:11.790]  Yeah, it is.
[35:11.930 --> 35:14.470]  So you put in porno and they'd be, like, the most results.
[35:14.770 --> 35:16.990]  And then you can put in, like, I don't know, something else.
[35:17.030 --> 35:19.570]  You can put in security focus and you wouldn't get many results.
[35:19.570 --> 35:22.570]  And then you put in .gov and you'd get more results.
[35:23.010 --> 35:24.430]  So, you know, that...
[35:24.430 --> 35:26.910]  You don't show the actual messages that are sort of hard.
[35:27.890 --> 35:29.290]  No, I can't.
[35:29.570 --> 35:31.490]  There's a sample up there.
[35:33.030 --> 35:34.730]  I want to show you, but I can't.
[35:34.910 --> 35:37.330]  Maybe if... Is that laptop working?
[35:42.250 --> 35:43.690]  Just give me that Ethernet wire.
[35:43.810 --> 35:50.150]  Let me see if I can really quickly get onto my server and change the IP that's allowed in.
[35:50.230 --> 35:51.790]  I'll just change it to any for a little while.
[35:54.030 --> 35:57.210]  My wireless card isn't working here, so I need to...
[35:58.110 --> 35:59.150]  Oh, you fixed the wireless.
[35:59.390 --> 35:59.550]  Let me see.
[35:59.870 --> 36:02.270]  Oh, I don't think I got the kernel thing loaded up, right?
[36:03.510 --> 36:05.270]  Did you get to meet the Secret Service?
[36:05.650 --> 36:06.210]  Oh, yeah.
[36:06.290 --> 36:11.450]  I got to meet the Secret Service, too, for the site on Jenna and Barbara Bush.
[36:14.110 --> 36:17.210]  People in my neighborhood are like, why do these guys keep coming by?
[36:17.890 --> 36:19.710]  That was a funny story.
[36:20.110 --> 36:23.590]  The Secret Service guy came... or two of them, apparently.
[36:23.790 --> 36:25.770]  They look more like football players, both of them.
[36:25.850 --> 36:26.510]  They don't mess around.
[36:28.590 --> 36:33.890]  So the two Secret Service guys came, and I wasn't around, and one of my neighbors was out in the street.
[36:35.530 --> 36:36.510]  Okay, cool.
[36:38.410 --> 36:38.790]  Let's...
[36:41.470 --> 36:45.670]  So the two Secret Service guys came, and they knocked, and no one was there.
[36:45.710 --> 36:48.510]  So they slept a card under the door that said, please call.
[36:48.770 --> 36:51.150]  And then they were walking out, and one of my neighbors was there.
[36:51.210 --> 36:54.630]  And they're like, is Monkeybrains located here?
[36:54.830 --> 36:56.270]  He's like, oh, are you looking for Rudy?
[36:56.430 --> 36:57.050]  And they're like, yeah.
[36:57.290 --> 36:58.010]  What's his last name?
[36:58.010 --> 36:59.330]  And he's like, uh, I don't know.
[37:01.870 --> 37:06.010]  So, it's good that I live in a neighborhood where people are just, um...
[37:08.330 --> 37:08.730]  Paranoid.
[37:09.110 --> 37:10.750]  Whatever, you know, dot, dot, dot.
[37:10.970 --> 37:11.750]  Dubious of the...
[37:12.430 --> 37:13.950]  Yeah, not trusting of much.
[37:14.990 --> 37:16.470]  There are a lot of tweakers there, too.
[37:17.390 --> 37:19.930]  I live in, like, a scrap metal mecca.
[37:44.550 --> 37:46.540]  Let's see if I can get anything interesting to come up.
[37:47.800 --> 37:49.090]  I don't think I can do the messages.
[37:49.090 --> 37:53.020]  I wanted to show you guys, but I couldn't get the connection to work on the second floor.
[37:53.110 --> 37:54.130]  The network down there sucks.
[37:54.360 --> 37:54.980]  Too many hackers.
[38:07.920 --> 38:13.220]  So, I have a SSL certificate that it redirects to, and it's not one that I paid for.
[38:13.400 --> 38:14.860]  And some people got really upset.
[38:15.000 --> 38:16.480]  They're like, what's this certificate?
[38:16.700 --> 38:17.340]  It's not valid.
[38:18.000 --> 38:18.920]  Don't use it, then.
[38:19.400 --> 38:19.880]  I don't care.
[38:27.280 --> 38:31.400]  So, this is the version where you can't see the good stuff.
[38:31.760 --> 38:32.880]  Because it's just...
[38:32.880 --> 38:36.140]  I'd have to SSH in, and I won't do it from anyone else's machine.
[38:36.560 --> 38:37.840]  Because I'm crazy.
[39:04.130 --> 39:05.190]  It's not working.
[39:08.530 --> 39:09.350]  I don't know.
[39:09.510 --> 39:12.090]  Like, I probably need to restart the machine or something.
[39:14.570 --> 39:16.150]  Has anyone else gotten in there?
[39:16.270 --> 39:17.230]  Can they restart it for me?
[39:21.750 --> 39:23.910]  I keep waiting for someone to break in.
[39:24.210 --> 39:26.010]  Like, there's easy ways and hard ways.
[39:34.670 --> 39:36.970]  So, here's like the bad trans worm.
[39:37.470 --> 39:39.230]  Got written about in the register.
[39:39.770 --> 39:40.690]  Somewhere in England.
[39:41.190 --> 39:41.810]  I don't know.
[39:47.110 --> 39:48.290]  I'm not going to bore you with that.
[39:48.410 --> 39:49.110]  You can look at that later.
[39:50.810 --> 39:51.750]  Oh, here's the...
[39:51.750 --> 39:53.350]  Here's the article about...
[39:53.350 --> 39:54.470]  Oh, no, it's gone.
[39:58.550 --> 39:59.430]  Is it pretty focused?
[39:59.650 --> 40:00.510]  They're probably gone, too.
[40:03.790 --> 40:04.530]  Yeah, they're gone.
[40:08.490 --> 40:09.510]  Oh, the Secret Service.
[40:09.510 --> 40:14.530]  They just wanted to talk about why I was running a site that focused on Jenna and Barbara Bush.
[40:14.810 --> 40:17.370]  And I told them that I was just interested in the site.
[40:17.570 --> 40:18.450]  Let's look at that site.
[40:21.270 --> 40:22.650]  Fuck this tech stuff.
[40:28.340 --> 40:29.740]  This is tech in its own way.
[40:29.860 --> 40:30.960]  It's like cultural hacking.
[40:34.300 --> 40:36.910]  Here I play the role of an avid stalker fan.
[40:45.650 --> 40:46.770]  I can talk for...
[40:46.770 --> 40:49.050]  I can talk for about five hours on this topic.
[40:53.730 --> 40:55.270]  Let me try to make the font bigger.
[41:01.800 --> 41:03.160]  All right, hold on, hold on.
[41:04.620 --> 41:06.380]  All right, I'll just show the pictures.
[41:06.380 --> 41:06.920]  I can talk.
[41:07.100 --> 41:08.380]  I can read everything I know by heart.
[41:10.580 --> 41:12.560]  Okay, so this picture started it all.
[41:13.020 --> 41:18.620]  So we're diverging from bad trans worms to adolescent drinking.
[41:19.860 --> 41:22.080]  Here's Jenna at a frat party.
[41:22.380 --> 41:24.860]  This got published in the National Enquirer.
[41:27.140 --> 41:27.740]  Let's see.
[41:28.600 --> 41:30.040]  In the end of 1999.
[41:31.160 --> 41:34.000]  And my father cut this out and emailed it.
[41:34.120 --> 41:36.220]  Or he snail-mailed it to me.
[41:36.580 --> 41:42.460]  And I saw this picture and I'm like, Goodness, this would make one of those great websites that everyone emails around to each other.
[41:42.560 --> 41:44.380]  It's like, check out this site that I saw.
[41:45.380 --> 41:48.400]  And I've always wanted to make one of those pop-hit sites.
[41:48.580 --> 41:55.720]  So I saw this and I'm like, this seeded my idea to make a whole site just dedicated to watching every move of the president's daughters.
[41:57.620 --> 42:00.360]  And sure enough, it was Yahoo Pick of the Week once.
[42:00.940 --> 42:02.160]  Last year or something.
[42:02.940 --> 42:04.060]  So there's Jenna.
[42:05.420 --> 42:07.720]  This picture is magnificent.
[42:08.060 --> 42:09.520]  There's cigarettes in hand.
[42:10.400 --> 42:11.400]  They're not dropping them.
[42:11.600 --> 42:13.160]  She's like having a good time.
[42:13.380 --> 42:15.400]  There's beer that's not getting spilled.
[42:16.280 --> 42:19.300]  And there's other people watching drinking beer out of mason jars.
[42:21.240 --> 42:22.500]  I'm not from Texas.
[42:22.500 --> 42:23.360]  I don't understand.
[42:23.360 --> 42:25.080]  But I understood enough.
[42:26.000 --> 42:27.160]  So I started that.
[42:28.480 --> 42:30.660]  And there they are at the...
[42:30.660 --> 42:30.960]  I don't know.
[42:31.060 --> 42:32.600]  That's the Republican convention, I believe.
[42:33.600 --> 42:34.760]  I don't know what that is.
[42:35.240 --> 42:35.740]  The family.
[42:35.900 --> 42:37.860]  This is back in high school.
[42:38.980 --> 42:39.380]  Okay.
[42:39.420 --> 42:40.760]  Here she is with her high boots.
[42:40.840 --> 42:43.400]  There's an article how some people thought those boots were sexy.
[42:45.580 --> 42:46.160]  All right.
[42:46.320 --> 42:48.860]  Here she is dancing at the inauguration ball.
[42:50.280 --> 42:56.420]  I don't know if you guys remember in the news, but her dress slipped down a little bit while she was dancing with her father.
[42:56.900 --> 42:57.740]  Our president.
[43:01.840 --> 43:03.200]  Here's one of her boyfriends.
[43:03.400 --> 43:05.600]  He got in trouble for being too drunk.
[43:05.760 --> 43:05.940]  Let's see.
[43:06.040 --> 43:06.620]  I can't remember.
[43:06.680 --> 43:07.360]  This is a long time ago.
[43:07.680 --> 43:07.760]  Okay.
[43:08.100 --> 43:10.780]  Jenna Bush's boyfriend, William Bridges, was three sheets to the wind.
[43:10.880 --> 43:12.680]  It got put in the slammer for four hours.
[43:14.180 --> 43:14.660]  Yep.
[43:15.560 --> 43:16.480]  What a face.
[43:19.500 --> 43:21.040]  Oh, here's something else funny.
[43:21.880 --> 43:25.580]  Jenna and Barbara were on Hot or Not and people got to rate them.
[43:28.220 --> 43:31.420]  And it's funny that their photos ended up in Hot or Not.
[43:31.540 --> 43:31.840]  I don't know.
[43:32.060 --> 43:33.560]  Maybe they were rating themselves.
[43:34.440 --> 43:35.440]  I didn't do it.
[43:41.120 --> 43:42.120]  I don't need to wish.
[43:42.880 --> 43:43.280]  Okay.
[43:43.920 --> 43:44.460]  Let's see.
[43:45.200 --> 43:46.720]  Let me go to the Hot or Not link.
[43:46.880 --> 43:47.520]  That's kind of cool.
[43:48.200 --> 43:48.420]  I don't know.
[43:48.520 --> 43:49.220]  Has anyone here...
[43:49.220 --> 43:50.720]  Raise your hand if you've done Hot or Not.
[43:53.500 --> 43:56.740]  Has anyone like entered their picture and got rated?
[43:59.060 --> 43:59.940]  I did it.
[44:00.120 --> 44:01.300]  God, no one's fessing up.
[44:01.860 --> 44:02.760]  I got a 10.
[44:07.540 --> 44:09.620]  Okay, so here are the final ratings.
[44:09.840 --> 44:13.860]  Like, they give you this bar chart that shows you how good you look to the world.
[44:14.480 --> 44:16.400]  This is kind of a cool cultural phenomenon.
[44:16.700 --> 44:23.440]  And whenever something comes up like this, I try to incorporate it into the first twin site in some way.
[44:23.660 --> 44:24.900]  And so...
[44:24.900 --> 44:29.860]  And I picked these pictures because everyone in the news media was saying Jenna looked...
[44:29.860 --> 44:31.100]  I mean, I didn't pick these.
[44:31.540 --> 44:32.580]  Someone picked these.
[44:35.120 --> 44:37.600]  Because Jenna was a lot hotter in the media.
[44:38.000 --> 44:40.280]  And I figured if I got two...
[44:40.280 --> 44:47.660]  If there are two pictures up there, and one was, you know, a woman alone, and one was someone else, that this woman would get a higher rating.
[44:47.820 --> 44:48.080]  Barbara.
[44:48.200 --> 44:49.040]  This one's Barbara up here.
[44:49.160 --> 44:50.520]  If you don't know, this is Barbara here.
[44:50.520 --> 44:51.200]  She goes to Yale.
[44:51.780 --> 44:52.580]  This is Jenna.
[44:52.780 --> 44:55.760]  She goes to University of Texas, Austin or something.
[44:56.460 --> 44:58.920]  And so, Barbara got a higher rating here.
[44:59.040 --> 44:59.420]  And all the...
[44:59.420 --> 45:02.640]  Previously, all the news had said that Jenna was the hot one.
[45:02.800 --> 45:05.140]  So I wanted to put a little spin on the media.
[45:05.300 --> 45:06.280]  And I succeeded.
[45:06.680 --> 45:08.880]  It's really easy to manipulate the media.
[45:09.300 --> 45:10.100]  That's something...
[45:10.100 --> 45:11.560]  You know, that's media hacking.
[45:11.680 --> 45:12.160]  That's fun.
[45:12.660 --> 45:13.140]  I got...
[45:13.140 --> 45:14.200]  I wrote that...
[45:14.200 --> 45:16.040]  They got in trouble for drinking at a bar.
[45:16.160 --> 45:18.620]  And I said that they're drinking margaritas.
[45:18.740 --> 45:20.280]  I'm not sure, but it was a Mexican bar.
[45:20.440 --> 45:23.180]  And then I saw it in the news somewhere else that they were drinking margaritas.
[45:23.180 --> 45:24.580]  And that just gave me a good chuckle.
[45:26.380 --> 45:27.160]  Let's see...
[45:27.160 --> 45:27.920]  Where are we?
[45:28.180 --> 45:28.920]  Let's go down here.
[45:29.960 --> 45:31.680]  So here's the fake ID picture.
[45:33.180 --> 45:36.360]  And then I got interested in slash dot code...
[45:36.360 --> 45:37.400]  Slash code for a while.
[45:37.540 --> 45:39.200]  So I put in their back end.
[45:39.300 --> 45:40.820]  And you can vote, like, which...
[45:40.820 --> 45:42.020]  Which one is Jenna?
[45:42.200 --> 45:42.980]  Which one is Barbara?
[45:43.240 --> 45:43.720]  Left twin?
[45:43.900 --> 45:44.300]  Right twin?
[45:44.540 --> 45:46.640]  And you can click here, like, okay...
[45:46.640 --> 45:47.420]  Holy body...
[45:47.420 --> 45:49.780]  Holy body snatchers.
[45:49.900 --> 45:50.540]  Those ain't them.
[45:50.680 --> 45:51.540]  You can vote on that one.
[45:52.060 --> 45:52.800]  Don't show that.
[45:53.860 --> 45:56.520]  And then you go to the slash code back end.
[45:57.640 --> 45:58.960]  And you can see that...
[46:00.360 --> 46:01.420]  How people are voting.
[46:01.800 --> 46:03.180]  And I just wanted to do this...
[46:03.180 --> 46:04.860]  How come I can't see the left part of the screen?
[46:05.080 --> 46:05.460]  Oh well.
[46:07.400 --> 46:08.920]  I just wanted to...
[46:15.800 --> 46:17.660]  I just wanted to use the slash code software.
[46:17.920 --> 46:19.360]  Because I thought it would be fun to try out.
[46:20.380 --> 46:22.860]  And it was fun, but it was too complicated for me.
[46:22.860 --> 46:25.340]  And I just stripped everything out except for the polling software.
[46:25.520 --> 46:26.260]  And I only used that.
[46:30.400 --> 46:30.720]  Um...
[46:30.720 --> 46:31.740]  Secret service?
[46:31.860 --> 46:32.600]  They just wanted to say hi.
[46:35.720 --> 46:37.280]  Actually, I only talked to them on the phone.
[46:37.380 --> 46:38.560]  I never got to meet them in person.
[46:38.580 --> 46:39.440]  I was kind of bummed.
[46:39.440 --> 46:42.760]  But I'm sure now I'll meet them in person for talking about them in public.
[46:45.280 --> 46:47.060]  Here's Jenna at a bar in LA.
[46:47.260 --> 46:48.980]  She had an internship last summer.
[46:49.640 --> 46:50.200]  Um...
[46:50.200 --> 46:51.920]  And she went out and drank again in public.
[46:52.120 --> 46:52.400]  Uh...
[46:52.400 --> 46:54.160]  To George W.'s dismay.
[46:55.800 --> 46:56.620]  Let's see.
[46:57.020 --> 46:58.100]  Here's a...
[46:58.100 --> 46:58.440]  Um...
[46:58.440 --> 47:05.980]  Talk Magazine did a fashion shoot with some models that looked vaguely like Jenna Barbara and someone that looked vaguely like George W.
[47:06.340 --> 47:07.120]  Because they're...
[47:07.120 --> 47:08.580]  They didn't really go to jail.
[47:08.920 --> 47:09.800]  They just got tickets.
[47:10.060 --> 47:12.740]  But they sort of reenacted the going to jail scene.
[47:13.320 --> 47:13.860]  And, um...
[47:14.540 --> 47:17.580]  I think someone censored Talk Magazine after that.
[47:17.640 --> 47:20.900]  They're like, We're never gonna have any news about Talk Media again.
[47:21.160 --> 47:21.620]  It's just...
[47:21.620 --> 47:24.540]  It's crazy how our country reacts to things.
[47:25.340 --> 47:25.860]  Uh...
[47:25.860 --> 47:26.580]  Political things.
[47:26.800 --> 47:30.920]  Here's a picture of some fan with a sign saying, Ich liebe Jenna and Barbara.
[47:35.480 --> 47:36.280]  I don't know.
[47:37.560 --> 47:39.320]  Any similarity is coincidental.
[47:43.500 --> 47:45.040]  There's Jenna at a...
[47:45.040 --> 47:46.680]  I think a Versace show or something.
[47:46.920 --> 47:47.200]  I don't know.
[47:47.360 --> 47:48.480]  Some fashion thing.
[47:49.040 --> 47:49.880]  Their cousin...
[47:49.880 --> 47:51.500]  The cousins started to make a lot of news.
[47:52.320 --> 47:53.960]  So I started to report on them too.
[47:54.060 --> 47:54.960]  It just branches out.
[47:55.080 --> 47:57.120]  There's Lauren Bush on the cover of Glamour.
[47:58.520 --> 47:59.400]  There's, uh...
[47:59.400 --> 48:02.200]  Lauren Bush at a Tommy Hilfiger shoot.
[48:02.840 --> 48:03.140]  Um...
[48:03.140 --> 48:03.860]  There's Noella.
[48:04.000 --> 48:05.300]  She got busted for Xanax.
[48:05.560 --> 48:06.040]  That's it.
[48:06.720 --> 48:07.320]  Uh...
[48:07.320 --> 48:08.320]  It's not a good shot.
[48:08.860 --> 48:09.740]  But, uh...
[48:09.740 --> 48:12.900]  People take that after they take ecstasy because they get depressed.
[48:13.780 --> 48:14.640]  Poor girl.
[48:15.120 --> 48:15.260]  Shit.
[48:15.800 --> 48:19.640]  I'd be depressed too if my family was so fucked up.
[48:25.650 --> 48:26.250]  Okay.
[48:26.990 --> 48:27.390]  All right.
[48:27.490 --> 48:29.390]  I'm gonna show one last thing and then...
[48:29.390 --> 48:29.910]  Oh, shit.
[48:30.910 --> 48:31.870]  Yeah, that's what I'm gonna show.
[48:32.770 --> 48:34.310]  Face flipper is a good thing to end on.
[48:34.690 --> 48:36.250]  There's a funny story about this too.
[48:36.490 --> 48:37.690]  Everything sort of links together.
[48:37.870 --> 48:38.170]  When you...
[48:38.170 --> 48:42.790]  If you work on a project and you want to have fun, just try to think of more ways to incorporate things.
[48:42.790 --> 48:51.830]  Like, my friend Karen, who does some remote control robotic stuff for SRL, wrote this face flipper thing.
[48:52.110 --> 48:52.590]  And I...
[48:52.590 --> 48:54.610]  And she had it on her site.
[48:54.750 --> 48:58.170]  And so I stole the .java file that she left up there.
[48:58.330 --> 48:58.970]  Changed a little.
[48:59.930 --> 49:03.990]  And put in the different people that I wanted to flip faces.
[49:05.890 --> 49:06.930]  It's not...
[49:06.930 --> 49:09.550]  Java doesn't work on this laptop very well.
[49:11.030 --> 49:12.810]  Look, I click and nothing happens.
[49:13.850 --> 49:13.970]  Okay.
[49:15.490 --> 49:15.890]  Applet.
[49:16.210 --> 49:17.010]  Applets rule.
[49:17.610 --> 49:17.750]  All right.
[49:18.870 --> 49:20.690]  But anyways, that was fun too.
[49:20.810 --> 49:25.190]  She lost her source code for a little while, but I'd taken it off her server, so I was able to give it back.
[49:28.890 --> 49:29.690]  Keep backups.
[49:30.070 --> 49:30.370]  I don't know.
[49:30.670 --> 49:31.670]  Any last questions?
[49:35.250 --> 49:35.850]  Right there?
[49:36.090 --> 49:36.430]  Yeah.
[49:36.670 --> 49:38.150]  I just want to comment about PayPal.
[49:38.190 --> 49:40.990]  It may have been just incompetence why he got messed up.
[49:40.990 --> 49:46.810]  Because I had a PayPal account, and they screwed it up so badly, I blew them off and got my own merchant account.
[49:47.390 --> 49:47.670]  Yeah.
[49:48.350 --> 49:52.130]  I didn't really want to tie a merchant account into dubious activities.
[49:52.490 --> 49:53.650]  Too close to home.
[49:54.550 --> 49:56.450]  PayPal is better for wandering money.
[49:59.270 --> 50:00.470]  Or so I've been told.
[50:00.790 --> 50:01.230]  Okay, good.
[50:03.870 --> 50:05.590]  Oh, let's see.
[50:05.810 --> 50:08.230]  I've got some Daily Rotten mousepads.
[50:12.830 --> 50:16.910]  There's the article about the FBI wants worms pilfered data.
[50:18.490 --> 50:19.370]  And then...
[50:21.850 --> 50:23.070]  I've got some Rotten...
[50:23.070 --> 50:24.810]  I've got some Rotten.com magnets.
[50:26.470 --> 50:27.350]  Throw harder!
[50:32.270 --> 50:33.150]  All right.
[50:33.370 --> 50:39.250]  And I also have some Monkeybrains t-shirts, but I had to pay for these out of my pocket.
[50:39.430 --> 50:39.950]  So if you...
[50:39.950 --> 50:41.570]  They cost me seven dollars each.
[50:41.690 --> 50:43.090]  If you give me five, I'll give you one.
[50:43.090 --> 50:44.030]  I only have like ten.
[50:44.830 --> 50:50.010]  So if you want one, and you want to support me in what I do, just give me five dollars.
[50:51.470 --> 50:52.510]  Oh, I have stickers.
[50:56.210 --> 50:58.850]  They're orange so you can pretend like... pretend you're security.
[51:06.600 --> 51:07.760]  Well, kind of here.