We in the FBI have created a malware repository and analysis tool known as the Binary Analysis Characterization and Storage System, or BACSS, which provides near real-time investigative information. BACSS helps us link malware in different jurisdictions and paint a picture of cyber threats worldwide.
It's true, I had hacked into a lot of companies, and took copies of the source code to analyze it for security bugs. If I could locate security bugs, I could become better at hacking into their systems. It was all towards becoming a better hacker.
What's hard, in hacking as in fiction, is not writing, it's deciding what to write.
I met a lot of hackers, and some of them were very arrogant. They thought I was stupid because I couldn't follow what they were talking about. But then I met this great guy whom companies hire to find their security holes, and he was very good about explaining so I could understand.
My hacking involved pretty much exploring computer systems and obtaining access to the source code of telecommunication systems and computer operating systems, because my goal was to learn all I can about security vulnerabilities within these systems.
Hackers often describe what they do as playfully creative problem solving.
Hacking is very interesting. Once they hack, if you don't catch them in the act, you're not going to catch them.
At CrowdStrike, we look for traces of the adversary and try to find out who the adversary is, what they are after, and what their tradecraft is. We also disseminate that information to enable collective action.
See, unlike most hackers, I get little joy out of figuring out how to install the latest toy.
My primary goal of hacking was the intellectual curiosity, the seduction of adventure.
