Ola
9/2/20251 hr 23 min
In 2019, Ola Bini, a Swedish programmer and privacy advocate, was arrested in Ecuador for being a Russian hacker.Find Ola on X: https://x.com/olabini. Or visit his website https://olabini.se/blog/. Or check out his non-profit https://autonomia.digital/.SponsorsSupport for this show comes from ThreatLocker®. ThreatLocker® is a Zero Trust Endpoint Protection Platform that strengthens your infrastructure from the ground up. With ThreatLocker® Allowlisting and Ringfencing™, you gain a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker® provides Zero Trust control at the kernel level...
Clips
Transcript preview
First 90 secondsJack Rhysider· Host0:00
Hey. This is Jack, host of the show. When I was a teenager, I went to university and studied computer science. At one point, they gave all the students logins to some central Linux computer. Uh, it's where you were supposed to do your schoolwork. Like, you could use it for file storage or check email there and do programming. Well, when they gave me my username and password, they said my username is my last name and my password is just my first and last name. And I instantly realized, this means if you know another student's full name, you know their username and password and can log in as them and read their emails and look through their files and stuff. And I told that to the teacher. "Hey, this is a bad password policy." And he's like, "Why?" (laughs) And I'm like, "'Cause I know everyone's password." He's like, "Yeah, well, everyone should be changing their password." I'm like, "Yeah, but they're not. (laughs) None of them are changing their passwords." I tried helping a few students change their password, but I knew it was a lost cause. You could pretty much pick any computer science student in the school and there was a pretty good chance that you could log in as them if you just knew their first and last name. Well, while I was sitting in class one day, the school sysadmin came into the class and he pointed at me and he motioned for me to follow him to the hall. So, I go into the hall and he starts telling me, "Someone has broken into our Linux computer and is going around deleting a bunch of student files and data and stuff, and some students lost a ton of work from this." And I was like, "Well, it wasn't me. I don't know anything about that. I've never done that." But this guy was