Greatest Moments in Hacking History: Samy Kamkar Takes Down Myspace

Рет қаралды 2,227,825

8 жыл бұрын

In this pilot episode of Greatest Moments in Hacking History, hacker Samy Kamkar talks about the time he created a worm in 2005 and accidentally took down Myspace.
WATCH NEXT:
Is Uber Killing the Yellow Taxi in New York City?: bit.ly/25xMeW4
Subscribe to MOTHERBOARD: bit.ly/Subscribe-To-MOTHERBOARD
Follow MOTHERBOARD
Facebook: / motherboardtv
Twitter: / motherboard
Tumblr: / motherboardtv
Instagram: / motherboardtv
More videos from the VICE network: www. vicevideos

Пікірлер: 1 500

@philippark1347 5 жыл бұрын

Why would you animate his face when you can have the real Samy in-front of the camera

@olive7831 5 жыл бұрын

Really shitty animation aswell

@GHOST-sk2sz 5 жыл бұрын

Dope

@BlueEyes-WhiteDrag0n 4 жыл бұрын

To actually have content for this bullshit

@miksuko 4 жыл бұрын

For the parts they can't record.

@TheLexiconDevils 4 жыл бұрын

Because Samy fell out of the ugly tree and hit every branch on the way down

@panlis6243 4 жыл бұрын

me after clicking "inspect element": You know, I am something of a hacker myself

@webcooltz 4 жыл бұрын

Der Fuchs lol yep

@orngng 4 жыл бұрын

11 year olds in school: *OMG GUYS I JUST HACKED THE SCHOOL SYSTEM*

@leeanucha 4 жыл бұрын

lol

@peep9636 4 жыл бұрын

Pan Lis lmaooo

@peep9636 4 жыл бұрын

I used to Do that to get me a shit ton of coins in a game of school

@nah8826 8 жыл бұрын

Moral of the story: if you are addicted to your computer, hack a social media site, then you'll get out of the house more. :)

@jojagro 8 жыл бұрын

Guess I will have to learn hackig now. Otherwhise im gonna be stuck behind my pc forever.

@umnikos 8 жыл бұрын

or just give $100 to a friend with the following deal: if you turn on your computer in the period of X, then your friend is gonna keep those money but if you succeed in not turning on your computer for the X period then you will get your $100 back... make the X period large enough that you will stop being addicted to your computer...

@PhattyMo 8 жыл бұрын

It won't work. It will just pull you in deeper. Well,other than leaving the house to do some IRL recon,once in a while.

@wasd3108 8 жыл бұрын

k good, goin to hack facebook, never gona leave this pc :(

@e.l.r.e.b.e.l.d.e.g.8426 8 жыл бұрын

I just have 2 questions: Kurzgesagt: What Are You? CGP Grey: You Are Two? About the Porsche;) what color and do you still have it?

@barberman1087 5 жыл бұрын

1. Don't use your real profile 2. Don't use your personal internet 3. Trash the computer afterwards

@MrLatvia2010 5 жыл бұрын

true lol :D

@user-yg2up4lg3r 5 жыл бұрын

Crush it afterwards

@hunterbruyere5052 5 жыл бұрын

VPN and/or Proxy. You’re welcome.

@nobies2620 5 жыл бұрын

@@hunterbruyere5052 today you can trace a VPN without a problem

@bleueraijin 5 жыл бұрын

@@nobies2620 true, you should learn how to connect to public proxies with lots of users connected to it :)

@LAKD 5 жыл бұрын

Imagine if he went to jail: Prison guy: So what did you do? He: Oh I found a flaw on MySpace and made it so I would get a million friends, you? Prison guy: Killed 20 people

@maj746 5 жыл бұрын

**unfriended**

@Micah.Moeller 5 жыл бұрын

jail and prison are 2 different things my guy

@aymankarroum4032 5 жыл бұрын

Prison guy 🤣 man just put prisoner

@hannes8978 4 жыл бұрын

@@Micah.Moeller how?

@darthmortem585 4 жыл бұрын

@@hannes8978 Jail is a group of cells which is less protected and for small crimes, whereas prison is a huge police station type of thing in which it is very hard to escape and very tight security, and is for people who have done way worse crimes

@sachinkartv 6 жыл бұрын

Something exactly like this happened to Facebook as well, done by a guy named Chris Putnam. But instead of fining the guy, facebook actually hired him because of his intellect. This is the reason Facebook is in the top right now, and myspace is a graveyard of deserted profiles. Lesson: Always value the talent and the people who show you your flaws.

@aritrosaha1616 5 жыл бұрын

But, did he release it into the wild, causing them to take it down temporarily?

@__________________________4597 5 жыл бұрын

@@aritrosaha1616 yes

@tiffles3890 3 жыл бұрын

This.

@Evergreen1400 2 жыл бұрын

I thought Google has always offered money and a contract to anyone who can show them a backdoor into their system

@tomwwabo9246 Жыл бұрын

@@Evergreen1400 indeed Telegram is doing so too. Fuck MySpace they were focused too much on commercialisation back then

@112233jjooee 8 жыл бұрын

this is bullshit, its myspace's fault that their code had a vulnerability, not his. He didnt gain anything from this he shouldn't have gotten in trouble.

@mrnice4434 8 жыл бұрын

So when a someone don't locks his front door you can go in his house and take all the stuff?

@112233jjooee 8 жыл бұрын

+Mr Nice he didn't gain anything. It's more like wandering into someone's field if they don't have a fence around it and then accidentally stepping on a couple plants

@four0two167 8 жыл бұрын

No. When someone don't lock his front door, you open it wide open, which causes a chain reaction that makes all the other doors slam against the walls the doors are mounted(like when you open a window and the nearest door slams, thanks to a change in pressure). Now, accidentally, one of your doors' door hinges are not screwed on, which makes the door fall on the floor. The floor now gets severely damaged. You did something unethical, and should definitely pay for the damage, but you should not go to jail, as the damage on the floor was an accident.

@HunterTinsley 8 жыл бұрын

The internet =/= a home.

@four0two167 8 жыл бұрын

+Hunter Tinsley Haha, of course. However Mr. Nice's analogy was not appropriate.

@runemrick 3 жыл бұрын

Samy is now an ethical hacker, as most hackers are. He looks for and solves vulnerabilities to keep people safe. Be like Samy.

@bing0bongo 2 ай бұрын

Samy is my hero

@lightsier 8 жыл бұрын

Wait.. how do you buy a porsche at 19?

@SimpleSock 8 жыл бұрын

Rich family would be my guess.

@TehOktro 8 жыл бұрын

He founded a software company at 16 that raised over 64 million in private funding.

@knewyouareboringg 8 жыл бұрын

oh my fucking god If only i could code..

@schlappy 8 жыл бұрын

If only the internet could teach you how to code, but alas...

@knewyouareboringg 8 жыл бұрын

I suppose it could. Although me being uninterested about it doesn't really help....

@hiwayM9 8 жыл бұрын

curious what the charges were for Samy at that time? Hindering corporate profits? If spreading viruses unintentionally and without malice is a crime, then why aren't they arresting kids in elementary schools whose parents sent them in sick and spread their cold to the student next to them?

@paishocajun 8 жыл бұрын

from the sounds of it he didn't do it maliciously but it was careless/reckless since he was smart enough to write that himself in the first place. it's not like he was a telemarketer who got through to the pentagon because he dialed a random computer generated phone number.

@hiwayM9 8 жыл бұрын

+CajunCoding I agree, but we never see an independent citizen who was hacked get the response a corporation does under the same circumstances. If my bank account gets hacked, there is no federal case.

@deavisdude 8 жыл бұрын

For real, he didn't even cost them anything. They could probably undo it within ~30 minutes of noticing it and fix the exploit in a day or two.

@TehOktro 8 жыл бұрын

From what I've read the feds saw him as a possible threat to national security because of how fast it spread. They used the patriot act to get a warrant. Total bullshit

@hiwayM9 8 жыл бұрын

+TehOktro exactly.

@NolocoLawrence 8 жыл бұрын

hehe I was going to bring them doughnuts like sorry guys

@deavisdude 8 жыл бұрын

He should have, it's not a big deal. Maybe they wouldn't have gotten butthurt if he had.

@abudahm1 8 жыл бұрын

and maybe gave him a job as security checker

@sk8mafia97 8 жыл бұрын

+Davis Odom think about what a big company like myspace makes a day. when somebody is to blame for the loss of money they obviously will let him pay.

@edspencer7121 6 жыл бұрын

Ninten Nol But.....I ate the donuts before I got to MySpace headquarters!😎

@suestreets8891 5 жыл бұрын

l didnt do anything wrong and has for my space on every body computer in search bar

@0xEmmy 6 жыл бұрын

If I were him, I'd have told Myspace about the worm immediately upon realizing its impact. At the same time, with the kind of cybersecurity negligence on Myspace' part necessary for this to even be possible, and the fact that Kamkar clearly wasn't malicious, being banned from the internet for 3 years is way excessive. IMO he absolutely shoul've gotten a fine, and maybe some civil liability for the damages, and maybe he could be banned from posting public content to the internet, but killing private use is a major social disability, especially depending on Kamkar's career.

@TravisTerrell 5 жыл бұрын

I agree that a fine (albeit a much larger one, judging by how much he surely cost MySpace) would've been sufficient. Luckily, losing internet access in 2005 was quite a bit less major than it would be today.

@Cracktune Жыл бұрын

yea like how is this his fault ?

@brealistic6377 6 ай бұрын

He actually did do that. He wrote an anonymous email to them explaining in detail what it did and how to stop it.

@Volnues 8 жыл бұрын

The animation makes me uncomfortable the way his mouth moves

@467sprite 8 жыл бұрын

his shoulder :c

@ElevatedChillz 5 жыл бұрын

Dudley look up “toast boy.”

@shishirpathak2123 5 жыл бұрын

Thats how my gf pussy moves

@dvorak826 5 жыл бұрын

shisir pathak r/nobodyasked

@ManofCulture 4 жыл бұрын

@@shishirpathak2123 hahahahaahahaha

@HunterTinsley 8 жыл бұрын

It's absolutely absurd how you were treated.

@Ripcode2233891 8 жыл бұрын

3 years of his life disconnected from the internet. And during his years of transition from a teenager to an adult with proper goals. This guy could have contributed significantly to the progress of technology (programming-wise), much more than he already has, considering how smart he was. How in hell can he be okay with what he was put through? The potential for his mental growth was blocked completely for 3 years. I'm glad that MySpace became the wreck that it is. Pieces of shit

@aritrosaha1616 5 жыл бұрын

@@Ripcode2233891 "The potential for his mental growth was blocked completely for 3 years." I agree. However, people should also learn communication skills. If you can make an excellent program that'll solve big problems, but you can't communicate it, what's the point? In my opinion, him having 3 years to gain better (or even learn as he said he was stuck to the computer) social skills with others.

@dyslexicstoner2408 5 жыл бұрын

World's richest people do not have very good social skills. If they're smart enough they'll get it done, find other ways, etc. communication isn't this fundamental thing for success.

@slash148 2 жыл бұрын

You see. The punishment being excesive is done like that to state a model. Don't mess with stuff online or you'll be heavily punished. That's a way to keep other folks away from doing such things.

@GranVlog 8 жыл бұрын

Just because you had more friends than them

@MichaelB5522 8 жыл бұрын

Pls make this a series. Great video.

@eatadick5647 8 жыл бұрын

@Wooze100 8 жыл бұрын

YAYA

@BuckfastConsumer 8 жыл бұрын

@abhi36292 3 жыл бұрын

@@eatadick5647 ya

@HamguyBacon 8 жыл бұрын

Fuck that, it was myspace fault for having such a huge exploit on their website, its not his fault for noticing and using it. infact without him it never would have been discovered and if it did it could have been really malicious. he should be paid for finding the exploit not having to go to probation and paying $20,000

@wergvra 8 жыл бұрын

Probably true if he didn't use the exploit and report as soon as he find out. But he brought myspace down so it's a no-no.

@Andoxico 7 жыл бұрын

It's not as huge as you might think. It comes from a slight syntax error that isn't detected to be a problem by the compiler. If he had written harmless code to find the bug and reported it to myspace he probably wouldn't have faced charges. However, we knowingly wrote a virus. A virus that myspace had to shutdown the website for a time to remove it, causing them to lose money.

@HamguyBacon 5 жыл бұрын

@Valesto93 theft is theft, but without those hackers you will continue to have weakness in your system.

@piersonlawrence3467 5 жыл бұрын

Y-You know those times where you just get bored and managed to take down Myspace with a makeshift worm and the FBI puts you on probation for 3 years and you never touch a computer for like a year after probation? I love those times.

@AM1N4L 8 жыл бұрын

Good stuff! Would love to see this as a series! :-)

@Xifler 8 жыл бұрын

I remember seeing the stories about they guy with a million friends, didn't know this was how it went down lol

@four0two167 8 жыл бұрын

Great pilot! This should become a keeper! Great job and idea!

@MusicByNumbersUK 8 жыл бұрын

Great story there :) loved how casual it was told.

@zachfaulks3169 7 жыл бұрын

This was the best story, I have heard in a long time. thank you

@2iinfinite 5 жыл бұрын

They diluted a genius, it’s sad.

@Tedd755 5 жыл бұрын

Dude, look Samy up. He's not suffering.

@inx1819 4 жыл бұрын

a simple xss worm isn't exactly genius

@rajbiswas776 4 жыл бұрын

@@inx1819 Back then it was I guess.

@fortheSavior 6 жыл бұрын

Spent five minutes trying to find more episodes, realized this was a pilot. I would watch all of these.

@MitchellWiggs 5 жыл бұрын

Exactly what law was broken tho

@ericlee8708 3 жыл бұрын

I mean he did kinda shut down the entire server, which caused their service to shut down, ultimatlely losing several users and potential profit. He kinda did do them a favor by finding it, and I dont think any penalty like that is deserved. But theres a point to everything. Also its been a year :)

@micahrogers7536 3 жыл бұрын

Unauthorized access to computer (myspace server)

@Matuterocks 3 жыл бұрын

@@micahrogers7536 He didn't access their server

@ericCSS 3 жыл бұрын

@@wifinesesi dude thats literally like saying if u invade a country its the country's fault for getting invaded because they're military wasnt good and were exploited?

@bernhardtrian7471 3 жыл бұрын

what a stupid comment ..... "what law was broken tho" ... srsly ?

@nickldp1350 8 жыл бұрын

love it. keep the series going!

@BendikOlsen 8 жыл бұрын

I would love to see more episodes like this!

@d-t-c9141 4 жыл бұрын

2:55 I think I know where this is going

@potatosmasher1072 4 жыл бұрын

Can I get a 1,000,000 subs without any videos ? Underrated comment lmao

@lewisbaitup6352 3 жыл бұрын

Oh no

@archockencanto1645 3 жыл бұрын

😂😂😂

@mrgummygod 8 жыл бұрын

this is what happenes when you show a corparation a security flaw, instead of hiring you or giving you a reward for finding it and showing it to them so they can patch it before its exploited, they sue you and send you to prison. And then they complain that "cyber attacks" are rampant. no shit you scare everyone off from not only helping you but just exploiting it instead. Then its even harder to get into the feild of security analisis because of fear of arrest for trying to learn

@HamguyBacon 8 жыл бұрын

some companies pay people to find security flaws in their websites. others try to send you to prison for finding their mistake. then when they loose personal information of its users "its not our fault!"

@aritrosaha1616 5 жыл бұрын

he didn't disclose it to them, he was like "oh yeah, lets release this worm into the wild! idk what it'll do, but oh well!". if he properly disclosed, he'd most likely gain a reward.

@Renteks- 5 жыл бұрын

It's like how Kim Jong Il executed any scientists who failed missile tests. but Kim Kong Un didn't and simply celebrated getting closer to their goal. Who ended up as a better leader?

@TravisTerrell 5 жыл бұрын

But...he didn't show them. He just exploited the fla flaw. That's the difference in a white hat hacker vs a black hat (or grey hat).

@slash148 2 жыл бұрын

That's cause people who find such security flaws are not 'helping' in any way. They're often trying to scam someone or getting advantage off someone. In cases like this where there were no obvious malicious intentions, they still manage to make companies lose a lot of money while the services are down. Of course they're angry. But hackers NEVER are like: "Hey, company, I was seeing your code and noticed there is a flaw that can be exploited. I'm open to discuss some terms to tell you how to fix it." THAT would be a different story.

@jadovaoliaro 8 жыл бұрын

Loved the animations!

@alessandrocarcione5663 8 жыл бұрын

The only ridiculous part about this story is buying the porsche boxster as a 19 y/o.

@DomJLva 5 жыл бұрын

Alessandro Carcione fr like he must have some rich parents or made some real money,probably some rich parents.

@SoFxEquinox 5 жыл бұрын

He started a software company at 16 that got over 40 million in private funding.

@memesfromdeepspace1075 5 жыл бұрын

@@SoFxEquinox WTF . That story' that muat be tell not thiss one

@icrus3803 4 жыл бұрын

@@memesfromdeepspace1075 yeah bro 😂

@AFFRA 4 жыл бұрын

You can buy a used porsche boxster at like $8000

@2PacStoleMyBike 8 жыл бұрын

Lol what a trip. MySpace just sent me an email notifying me that a Russian hacker just stole a ton of information from users who made profiles prior to 2013. This video couldn't be uploaded at a better time.

@ksf27 8 жыл бұрын

That was really interesting, would love to see more. :)

@HashbeanSC2 8 жыл бұрын

for your own good I hope the uploader never wastes another minute of your life, or mine for that matter

@GilbertKingAispuro 8 жыл бұрын

Awesome story, SUBSCRIBED!

@oatfielder 8 жыл бұрын

Great story and vid ! Look forward to the next one ! The guy is a a good/fun storyteller too...which helps ! :)

@AlexanderBollbach 8 жыл бұрын

so in summary, an authoritarian police state used intimidation tactics to impose a plea bargain on a hapless hacker who merely increased a friend count on a public profile, leaving him emotionally unable to continue to explore the internet and finally drinking his feelings away at a local dive bar with some "friends". Hah! nice try NSA!

@richz650 8 жыл бұрын

Bingo

@endritiger 8 жыл бұрын

that's retarded, it wasn't just a harmless bug... the virus could have crashed the whole server. it was growing expenemsially so in another day everyone would have been infected, and if he had the virus steal info he would have had a million+ people's info he could have sold.

@hardwirecars 8 жыл бұрын

sounds like the websites fault not his. ya know before the gov went big brother companies used to pay for this kind of testing now they get away with anything. according to you and a few others allsups gas station should go to jail for the skimmers put on their gas pumps.

@AlexanderBollbach 8 жыл бұрын

endritiger you should send an application to the NSA

@AlexanderBollbach 8 жыл бұрын

endritiger also, it was a joke..

@JordanTelezino 8 жыл бұрын

man this was nice story, kept enterrtained throughout. good one peepz

@daloverboycarlos09 8 жыл бұрын

this was AWESOME!

@Izzak_Beck 8 жыл бұрын

This is a really cool story, thanks for sharing.

@pastasam4069 7 жыл бұрын

This guy is a fucking genius, I love this story.

@user-zh3sn6fo5o 8 жыл бұрын

My runescape account got hacked back in 2008 that felt so bad, it should definitely be on the number 1# spot of hacks all time.

@aritrosaha1616 5 жыл бұрын

can't find a mass attack on runescape back in 2008. was it just you?

@stephenfjohnson 8 жыл бұрын

There needs to be more in this series!

@MrLM1909 8 жыл бұрын

Definitely best one of the pilot week

@LegoStax 7 жыл бұрын

2:08 Correct me if I'm wrong, but I don't think Myspace had in 2005.

@MADTRAP 8 жыл бұрын

NEW NEWS HEADLINE! "After posting new video on youtube. My space hacker shuts youtube down!"

@nicholasdejonge7530 8 жыл бұрын

@CinemaByteProductions 8 жыл бұрын

@user-nf3hh8kn5r 8 жыл бұрын

@homebr0110 8 жыл бұрын

Please make more of these

@CiaranIsJustGreat 8 жыл бұрын

MAKE MOAR OF THIS!

@BrendanBradshaw 8 жыл бұрын

What the fuck. What 19 year old has the money to drop on a Porsche in the middle of a recession and still has 20 grand to dump on a plea bargain?? I feel like the real moral of the story is when you're rich, you can get away with anything.

@ReasonMakes 8 жыл бұрын

He didn't get away with it. In fact, he was punished with extreme prejudice.

@eloycruz1148 8 жыл бұрын

A very smart one

@CheezSalad 7 жыл бұрын

Porsche Boxter is a cheap car, it's known as the crappy lowest level porsche. You're better off with a Honda. But he is successful, so that means he's good at saving money instead of buying a really expensive car.

@franciscopen1681 7 жыл бұрын

he started his own software company at the age of 18 or after his 3 year of punishment?

@garlic-os 8 жыл бұрын

I'm sorry i can't stop laughing at that drawing of a keyboard in the beginning

@goncalotomas5659 8 жыл бұрын

Loved it! More!

@StarCrusher. 8 жыл бұрын

Best one so far

@J3lbow 8 жыл бұрын

That's so shitty, You were punished because the security system of myspace was shit? they should have paid you because you found out. Really really unfair.

@PlatinumFlyTrap 8 жыл бұрын

You're an idiot.

@RichardHarlos 8 жыл бұрын

And you're not? lol

@J3lbow 8 жыл бұрын

PlatinumFlyTrap You have solid arguments...

@MrJfergs 7 жыл бұрын

I like how this guy is smart enough to create a worm and infect a million people on myspace, but not create a fake profile and use a proxy. He could have easily gotten away with this if he wanted too. Plus if he had just emailed myspace after about the exploit they should have paid him 20,000 for bringing it to their attention.

@adygombos4469 7 жыл бұрын

J It's because he didn't mean to fuck up their website, he was just playing around. And a simple proxy won't save you from the government.

@lucafeinraus9702 8 жыл бұрын

More please! I love it :)

@xTriggerHappi 8 жыл бұрын

More of this series!

@An0N1337sic 8 жыл бұрын

new episode from Samy :-)

@AVERYhornyMrDinosaur 6 жыл бұрын

i would've been the guy who went over to myspace headquarters with doughnuts.

@augustoleme 8 жыл бұрын

This is great. More.

@aleksandarstevanovic5854 5 жыл бұрын

XSS? This guy is a legend, imagine a bunch of professional developers on number 1 site embarrassed by a 19 year old... That kid should get an award, not a punishment

@A_Balanced_Breakfast 8 жыл бұрын

this was fantastic! guess he should've brought the donuts and coffee

@elementneon 7 жыл бұрын

Back in those days I was one of the few people hacking social networking sites on that level. Hard to believe nowadays with so many people learning how to hack for very legitimate reasons. I had the same hack (executed slightly differently but with the same results) that Samy used. And it's actually not nearly as well known, but in november 2003, 2 years prior to Samy's hack, a similar worm ran through myspace named the lupidvirus, which is where I (and likely Samy) got the initial idea for such a hack. I remember brainstorming, trying to think about how it could best be used. I was never a malicious hacker, I never agreed with those people that would deface websites just because they got access, to me even as a kid that seemed childish and pointless. I played with websites at the time as a sort of puzzle brain-teaser type game, to see if I could outsmart those people making crazy amounts of money. Here I was, a kid who didn't even have to file taxes some years because I didn't make more than the $8000 minimum income limit, and I knew more about security than the guys making over $100,000 and running multi-million dollar websites. Needless to say, I ultimately never used the exploit I mentioned earlier, Samy beat me to it, and I saw how much attention he got for it. I've since mentioned this to him and anytime I see him remind him that drinks are always on me for that life lesson he taught.

@n8style 5 жыл бұрын

That would make a good update for your blog

@aritrosaha1616 5 жыл бұрын

*searches up lupidvirus* *nothing proper appears* hmm