Jack Recider

I saw a screenshot of this. He was in the admin panel of the university. And there, in front of him, was a list of all the students who owed money to the school. And it all added up to $9 million. And he started to think... Could I? Should I mess with this?

There were 391 students listed here. He scrolled to the bottom of the page. And there was a button. Delete all? Why was there a delete all button? I have no idea. But there it was.

There were 391 students listed here. He scrolled to the bottom of the page. And there was a button. Delete all? Why was there a delete all button? I have no idea. But there it was.

Default kept going further down this path, getting into place after place. And the places he was hidden were starting to really add up.

Default kept going further down this path, getting into place after place. And the places he was hidden were starting to really add up.

Now, each of these have their own story and I've listened to him tell me some of these himself and they're insane. And I'm sorry I can't include them all here. But I do want to stop at the Facebook login exploit he had.

Now, each of these have their own story and I've listened to him tell me some of these himself and they're insane. And I'm sorry I can't include them all here. But I do want to stop at the Facebook login exploit he had.

What they did was get a Facebook username and then try to log in as them, but then say, oh, I forgot my password. And at the time, Facebook would then send you a four-digit code to your email that you had to type into the site to prove it was really you. Because after all, if you had control of the email that was registered to this user, it must really be you, right?

What they did was get a Facebook username and then try to log in as them, but then say, oh, I forgot my password. And at the time, Facebook would then send you a four-digit code to your email that you had to type into the site to prove it was really you. Because after all, if you had control of the email that was registered to this user, it must really be you, right?

Well, it was a four-digit code, which means there's about 10,000 possibilities of what it could be. And these guys learned that they could just keep submitting codes to Facebook over and over and over, cycling through all the possible four-digit codes until they found the one that worked.

Well, it was a four-digit code, which means there's about 10,000 possibilities of what it could be. And these guys learned that they could just keep submitting codes to Facebook over and over and over, cycling through all the possible four-digit codes until they found the one that worked.

And they could do this pretty quickly, too, and just reset anyone's password that way and then log into Facebook as them.

And they could do this pretty quickly, too, and just reset anyone's password that way and then log into Facebook as them.

So while all this started out as fun and a challenge, over time it morphed. I mean, how can one feel this kind of power and then watch the news and see everything wrong in the world and decide not to use this power to make change? I mean, it really is like a superpower to just topple over a computer or get inside a system that isn't yours. With great power comes great responsibility, right?

So while all this started out as fun and a challenge, over time it morphed. I mean, how can one feel this kind of power and then watch the news and see everything wrong in the world and decide not to use this power to make change? I mean, it really is like a superpower to just topple over a computer or get inside a system that isn't yours. With great power comes great responsibility, right?

What? What the hell? They made a list of people to hack into that were high-profile members of the intelligence community? This just went up to 11. I... Okay, at this point... I mean, I'm fascinated by this because I'm always surprised how high-profile people in government pretty much dox themselves, right?

What? What the hell? They made a list of people to hack into that were high-profile members of the intelligence community? This just went up to 11. I... Okay, at this point... I mean, I'm fascinated by this because I'm always surprised how high-profile people in government pretty much dox themselves, right?

They give their real name and talk on TV, and they have a phone number to their office, email address, physical address. All this stuff is public information. We know who their boss is. Chances are there's a Wikipedia article on them listing all this, or there might even be a whole biography written about them.

They give their real name and talk on TV, and they have a phone number to their office, email address, physical address. All this stuff is public information. We know who their boss is. Chances are there's a Wikipedia article on them listing all this, or there might even be a whole biography written about them.

And yeah, I always wondered, doesn't that make them extremely vulnerable targets for attacks? Oh, I am so glued to the story right now.