第 340 期·中文精讀

克里斯·塔貝爾:端掉絲綢之路的 FBI 特工

Chris Tarbell: FBI Agent Who Took Down Silk Road

前 FBI 特工講述追查暗網市場絲綢之路、鎖定羅斯·烏布利希的行動細節。

官方音訊00:00 / --:--
中文精讀由 AI 基於原始訪談改寫,非官方翻譯,可能存在偏差或錯誤;表述以原音訊與官方文稿為準。說明

抓羅斯·烏布利希(Ross Ulbricht)那天,FBI 沒有破譯任何密碼。

2013 年 10 月,舊金山一家圖書館,探員趁他的膝上型電腦還開著、絲綢之路(Silk Road)的後臺還登入著,把機器拿走了。這個網站是十億美元級別的毒品市場,伺服器藏在洋蔥網路裡,錢全部走比特幣,執法部門跟了兩年多,一直找不到入口。

撬開它的東西都很樸素:一個在網站裡做到系統管理員的臥底,和一臺聊天伺服器的時區設定。

順著同一條線,FBI 還抓過另一個人,LulzSec 和匿名者(Anonymous)的核心成員薩布(Sabu),真名赫克託·蒙塞古爾(Hector Monsegur)。2010 年代初最重要的兩場網路犯罪追捕,執行者都是紐約的同一個小組。

克里斯·塔貝爾(Chris Tarbell)當時是這個組的特工。這一期播客,他講的是執法者視角下的技術細節,以及這些細節背後的人。

一個什麼都能買的地方,除了兩樣

絲綢之路是第一個真正意義上的暗網市場。塔貝爾的說法很直接:上面幾乎什麼都能買。

從阿富汗直髮的海洛因,駭客工具,僱人入侵某個系統,還有買兇殺人的服務。有兩樣東西買不到:槍,因為槍有另一個專門的站;假文憑,所以沒人能靠這個當上醫生。

網站是羅斯·烏布利希做起來的。他最早在加州的野外種蘑菇,然後拿去賣。做平臺的動機更接近一套政治主張:你自己的身體,你自己決定往裡放什麼。

塔貝爾要辦這個案子,得先說服上級。FBI 內部的判斷很實在,這首先是個毒品案。所以他需要在網站上找到最惡劣的東西來講這個故事。他見過一條賣嬰兒器官的廣告:如果你有個孩子需要換肝,可以上去發帖求一個六個月大的肝。

我見過最黑的還不是這些。我在 FBI 的時候採訪過一個食人者,那是另一個故事。那個案子確實讓我有點不舒服。(克里斯·塔貝爾)

網站的主要內容是毒品,這一點沒有爭議。爭議在別處:一個明知自己在幹什麼的人,把一套自由意志主義的價值觀放在了交易規則的最上面。他在網站上扮演船長,規則由他定,什麼留下什麼刪掉,最終解釋權在他手裡。FBI 後來拿到了伺服器,聊天記錄全都讀得到。塔貝爾說,他沒看到多少激烈的內部辯論,因為這裡沒有議會,只有一個 CEO。

洋蔥是這麼一層層剝的

要理解這個案子難在哪,得先理解 Tor。

Tor 的全名是洋蔥路由(The Onion Router),美國海軍在九十年代中期做出來的,初衷是讓境外的情報人員能安全聯絡國內,誰也追蹤不到。後來這套技術被免費放給了全世界。

它有兩種用法。

一種是訪問 .onion 結尾的站點。這類網站不在普通網際網路上,只有用 Tor 瀏覽器、並且知道完整地址才能開啟。絲綢之路就是這樣一個站。

另一種是普通上網時借 Tor 藏住自己的 IP。你想訪問一個正常網站,又不想讓對方知道你是誰,就讓流量繞進 Tor 網路,從另一個出口出來。

原理是層層包裹。

假設你要去一個 .onion 地址。你的電腦先找到一個 Tor 中繼,這些中繼的地址是公開的。你把資料加密,外面套一層殼,交給第一個中繼。第一個中繼知道你是誰,也知道下一站在哪裡,但它看不到殼裡裝了什麼。它再加一層殼,轉給第二個中繼。第二個中繼只知道包裹從第一個來,不知道最初寄件人是誰。這樣一層層加下去,一直到出口。出口再把殼一層層剝開,送到目的地。

層數夠多之後,難度就變了性質。每加一層,要還原的代價都往上翻一次,增長是指數級的,多攢一點算力補不回來。加到某個程度,數學上就沒有解了。

這也是為什麼 Tor 到今天依然是執法部門最頭疼的東西。塔貝爾在 FBI 的日常工作裡,有大量案子查著查著就撞上這麼一行字:線索指向 Tor,然後沒了。一個案子的卷宗翻開,最後幾頁永遠是這個收尾。

所以他的小組決定換個思路。與其一個個追案子,不如直接對 Tor 下手。

他們在暗網上挑出 26 個 .onion 站點做目標。他這個小組叫 Cy Two,是紐約負責刑事網路入侵的王牌小隊。挑選標準是做駭客生意的地方:提供駭客工具、提供入侵服務、或者像現在這樣把勒索軟體和釣魚攻擊打包成付費服務賣的地方。案件需要起名字,他和同事商量半天,選了“剝洋蔥的人”(Onion Peeler),帶點自嘲,也帶點對這門技術的敬意。

絲綢之路排在這份清單的第六位。但所有人都清楚,那才是最頂上那顆葡萄。真能把這個站拔掉,引起的關注會讓後來者掂量掂量。讓犯罪者害怕,本來就是執法的一部分。

不用技術破解,繞到人背後去

伺服器進不去,那就從操作伺服器的人下手。

塔貝爾的搭檔傑瑞·德里亞根(Jerry Derryagan)是國土安全調查局的調查員,用的辦法是耐心。他在網站裡一步步往上做,最後拿到了系統管理員的身份。他就在裡面,和那個署名“Dread Pirate Roberts”(恐怖海盜羅伯茨,簡稱 DPR)的人直接對話。當時外界對這個人一無所知,不知道他是誰,只知道這個代號。現在有了一個能持續說話的口子。

技術層面的突破口來自一個聊天伺服器。

網站運營用的是 Jabber 協議搭的服務,羅斯在配置裡把自己的時區設成了太平洋時間。就這麼一個預設設定,把搜尋範圍從一個國家壓縮到了美國西海岸的幾個州。

而這恰恰說明了一件事:他的技術能力配不上這個網站的野心。

塔貝爾在節目裡說得很坦率:真正技術過硬的那批人,他們抓不到,甚至碰不到。能抓到的,都是有破綻的。

我們抓的都是容易抓的。技術真正好的那批人,我們碰不著,找不到。向技術好的犯罪分子致敬,他們說不定正在看這期節目。(克里斯·塔貝爾)

被抓那天的場景現在已經進了網路犯罪的教科書。舊金山那家圖書館,羅斯的膝上型電腦開著,絲綢之路的管理後臺登入著,螢幕還亮著。探員趁這個視窗把裝置拿了下來,沒有給他合蓋或者關機的時間。

一旦筆記本合上或者關機,磁碟加密生效,裡面的東西就沒了。一個人坐在圖書館裡,用一臺私人電腦管理著一個十億美元的市場,所有身份都藏在那層加密後面。他就是輸在沒合上蓋。

那些抓不到的人

被問到這場追捕最遺憾的部分,塔貝爾提到一個代號:AV Unit。

這個人是 LulzSec 和匿名者的基礎設施負責人。隊裡有人負責入侵,薩布和凱拉(Kayla)屬於這一類;有人負責對外發聲,比如英國的 Topiary;還有幾個人各有分工。AV Unit 乾的是最不顯眼也最要緊的活:搭環境。要掛巴西的 VPN 才能穿出去,他搭;需要某個節點的伺服器,他弄。

AV Unit 到現在還讓我睡不著。其他人都抓了,就他沒抓到。他確實厲害。他偶爾還會在網上冒出來,每次看到我都來氣。(克里斯·塔貝爾)

有意思的是他被抓的同夥怎麼描述他。薩布落網後最先向塔貝爾交代的一件事是:AV Unit 是特勤局的人。

這個說法至今沒有證據。但薩布給了一套觀察依據:這個人會連著出現好幾天,然後突然消失三週,生活方式像在輪班。剛被抓、還在試探期的薩布,說的話未必可信。他可能是在做社會工程,反過來給審訊者施加壓力,暗示你們內部有問題。塔貝爾自己承認,那時候他已經有點招架不住,手上壓著幾百起針對軍方機構的入侵案要查,人是在深水區游泳。

等到案子收尾回頭看,他才意識到那個缺口一直襬在那裡,原本可以順手補上。

節目裡有一段對話挺有意思。Lex 問他,能不能邀請一個還沒落網的罪犯上播客。塔貝爾從技術顧問的角度給了建議:不要對外預告,知道的人越少越好;見面可以,但別露臉;錄音要處理過,原始檔案必須銷燬;對方得對你這個人有完全的信任。他說,你總不能讓人家蒙著頭來見你,雖然他自己也承認這話容易被人斷章取義。

對 Lex 來說,這值得費這個勁。他關心的重點在那些人的世界觀上,操作細節倒在其次:他們怎麼看善惡,有沒有把怨恨指向政府或者某個國家,童年經歷了什麼才走到這條路上,對自己小圈子裡的同伴有沒有真正的情感。犯罪者往往構建了一套自洽的敘事,他們覺得自己在攻擊這套系統的弱點,最終會讓世界更安全,哪怕順手偷走一大筆錢,那也是逼著你把錢投到該保護的地方去。

塔貝爾的懷疑更實際:

我審過的人裡,大多數時候是謊言摻著半真話。如果他講得好,這套故事能撐很久。撐不住的時候,你能看到他鬆一口氣的樣子,那層牆塌了。(克里斯·塔貝爾)

不過他對 Lex 這個想法本身不反對。他說自己會很想聽,只是提醒一句,坐在對面的人可能正在製造真實的痛苦,這件事不能因為對話精彩就被抹掉。

十七歲的女孩,三十五歲的男人

塔貝爾說,他見過有駭客的身份認同是徹底虛構出來的。

LulzSec 裡有個成員叫凱拉,薩布一直認定對方是個十七歲的女孩,甚至有一段時間近乎迷戀。薩布本人做了大量基於語言習慣的分析,堅信不疑。後來查實,這個人是個三十五歲的英國男人,凱拉的 ID 取自他姐姐名字的變體。

這種事在駭客圈不算稀奇。塔貝爾說,這幫人彼此之間社會工程玩得極狠。目的很現實:萬一哪天有人被抓,剩下的同夥能編出一整套背景故事,讓所有人相信對方是巴西某個 ISP 的老闆之類,把自己撇得乾乾淨淨。

社會工程算不上什麼外掛技能,它就是這種生活本身的一部分。無論進攻還是防守,最後都要回到人身上。

理想主義者的兩面

羅斯·烏布利希的那套邏輯,塔貝爾並不陌生:我的身體我做主,我願意往裡放什麼就放什麼,你管不著。作為一個人,他和這種說法之間隔著一道東西。

他在 FBI 期間做過一段兒童剝削案件。他說那段經歷改變了他:任何為侵害兒童提供便利的東西,都會讓他真正憤怒。這直接塑造了他對 Tor 的態度。

因為有些人用它幹壞事,這東西就該消失嗎?不該。我是搞技術的,我希望技術往前走。人總會做壞事,也總會用技術幫忙做壞事。(克里斯·塔貝爾)

於是問題繞回來了:Tor 這種東西,好處和代價到底怎麼算。

塔貝爾的看法帶著某種現實主義。沒人願意放棄隱私,這是嘴上說的。但他以前要進你家得先拿到搜查令,現在他登入你的 Facebook 就能看見你家客廳長什麼樣。人們嘴上說在乎隱私,手上一直在往外送:手腕上戴的表把心跳資料傳給了不知道哪家公司,還有什麼比心跳更私密。

他承認大多數普通人其實不需要那麼強的隱私保護。真正站得住的反駁在另一頭:當你想批評政府的時候,尤其是在局勢緊張的時候,你得有這個空間。一個國家最寶貴的東西之一,是那種個人層面的反抗精神,政府不能太強,你永遠可以指著它罵。大規模監控的可怕之處不在今天,在那種慢慢長出來的、細微的怯意:算了,何必開口,說了就是一身麻煩。

Lex 在這裡補了一個區分:政府和技術公司都在限制言論,但人類有幾千年政府濫權的歷史可查,技術公司是新生事物。權力的腐蝕性在政府這個形態裡被證明過太多次,規模也更大。

塔貝爾同意,但也提了另一面:技術公司同樣在決定你能說什麼,而且有些時候,政府官員和平臺的方向看上去是一致的,那才真正讓人不安。

他也沒回避那條最扎眼的例子。美國總統被從社交平臺上移除了,在他看來這很瘋狂。至於當年拿下絲綢之路是不是靠了 NSA 的大規模監控,他的回答乾脆:沒有這回事。Lex 追問了一句,如果有呢?塔貝爾說,那我大概不會告訴你。

和一個“敵人”做了九年朋友

故事的另一半是薩布。

塔貝爾抓到赫克託·蒙塞古爾之後,兩個人在一個房間裡並排坐了九個月。一個是被抓的駭客,一個是抓他的特工。九個月之後,案子收網,LulzSec 和匿名者的一批人落網。

這段關係沒有隨著案子結束。他們成了很好的朋友,赫克託會講自己過去做過的事。塔貝爾說他聽著聽著會冒出一句:赫克託,那就是我啊。

但他對另一個犯人就沒有這份寬容。他聽了佈雷特·約翰遜(Brett Johnson)那一期節目,聽說這人從美國政府騙福利金、搞欺詐,火氣就上來了。

他自己也說不清這種差別從哪來。為什麼赫克託就是“赫克託嘛”,而另一個人讓他惱火。答案大概就在他自己的話裡:他先認識的是薩布,那是他要抓的目標;赫克託是在那九個月裡一點點長出來的。人和代號,從來不是一回事。

給想認真理解這件事的人

這期對話資訊密度很高,但落到普通人身上,能帶走的東西其實很具體。

  • 別把匿名當成安全。絲綢之路的伺服器藏得再深,最後暴露它的是一臺沒合上的膝上型電腦和一個沒改的時區設定。技術防護再強,操作習慣上的一個小疏漏就能全部作廢。
  • 重新算一遍你交出去的隱私。你的心跳、你的位置、你家裡客廳的樣子,很多是主動給的,給的時候沒覺得是代價。抽個時間看看手機裡那些許可權,把不必要的一項項關掉。
  • 分清楚“技術厲害”和“不被抓”。塔貝爾說得很清楚,執法部門抓到的是有破綻的那批人,真正頂尖的至今在外面。網上那些被神化的駭客故事,多數是失敗者留下的傳說。
  • 理解社會工程是真實的攻擊面。最危險的一擊往往來自一段程式碼之外,而是一個能讓你相信的身份。任何一個自稱是某個人的賬號,都值得多問一句。
  • 如果你關心言論和隱私的邊界,別隻看政府。也看看平臺在決定什麼能說、什麼不能說,兩邊一起看,才看得清自己站在哪裡。
  • 對“壞人”保持一點好奇,但別丟掉判斷。塔貝爾能和赫克託做朋友,也能對另一個人動怒。理解一個人的動機,和接受他的行為,是兩件完全不同的事。
文稿由本站用語音識別模型(基於官方釋出音訊)機器轉寫,可能有識別錯誤,人名與數字請以音訊為準。
Lex Fridman Podcast #340 – Chris Tarbell: FBI Agent Who Took Down Silk Road Machine transcription by Qwen3-ASR 0.6B (MLX, local, Apache-2.0). May contain recognition errors. The following is a conversation with Chris Tarbell, a former FBI special agent and cybercrime specialist who tracked down and arrested Russ Albergt, the leader of Silk Road, the billion-dollar drug marketplace, and he tracked down and arrested Hector Montegur, aka Sabu of Lulzec and Anonymous, which are some of the most influential hacker groups in history. He is co-founder of Nexo, a complex cybercrime investigation firm, and is a co-host of a podcast called The Hacker and the Fed. This conversation gives the perspective of the FBI cybercrime investigator, both the technical and the human story. I would also like to interview people on the other side, the cybercriminals who have been caught, and perhaps the cybercriminals who have not been caught and are still out there. And now a quick few second mention of each sponsor. Check them out in the description. It's the best way to support this podcast. We got True Classic T's for shirts, Inside Tracker for bio monitoring, Express VPN for privacy, BetterHelp for mental health, and Blinkist for nonfiction. Choose wisely, my friends. And now onto the full ad reads. As always, no ads in the middle. I try to make this interesting, but if you skip them, please still check out our sponsors. I enjoy their stuff, maybe you will too. This show is brought to you by True Classic T's, high quality soft slim fitted T shirts for men. They also make other men's wear staples like polo's, workout shirts, and boxers. But I have a lot of their black T shirts, that's my main go to. I am not exactly sure why, but there is a certain kind of comfort in having a great T shirt that all look the same and having many of them, so it removes that extra little decision in your life. So you can liberate your mind to focus on the more difficult decisions in your life. So it's just this reliable thing I can count on. Either I wear a suit or I wear a True Classic T T shirt. That's it. That's all I need to worry about. Life is simple, and there is a kind of minimalist aesthetic to a black T shirt that just brings out the best in me, makes my soul sing. I think it's also in part a programmer aesthetic engineer aesthetic. I am not exactly sure. Um, but I do know that a lot of programmers I hang out with often wear black T shirts, so I am not sure what that's about. That could also just be in general a guy thing. I am going to have to get some data on that. Anyway, go to trueclassic dot com and enter code Lex to get twenty five percent off. This show is also brought to you by Inside Tracker, a service I use to track biological data. Your lifestyle decisions should be made based on data coming from your own body. I can't wait until the day that we have high bandwidth signal coming from the body at a frequency that is exceptionally high. So we have this short term and long term data about what's going on inside our body. Just raw data, so machine learning algorithms can just interpret that data to make decisions based on. I mean, to me, that's such an exciting world of creating systems that are able to truly listen to our body. This experiences I have by going to doctors, I think the job of a doctor is so difficult. They get just few little inklings into the symptoms you provide. There is some data they can collect. They can do MRIs and all that kind of scans. It's not a high resolution picture. What's going on in your body? Now, if you are the average case for particular condition or disease or particular issue you are having in your life, yeah, fine. But a lot of us are not the perfectly representative average case. In fact, most humans aren't, and so it makes sense that we should be looking at that specific person to make decisions for that specific person. Anyway, get special savings for a limited time when you go to insidetracker dot com slash lex. This show is brought to you by Express VPN. I use them to protect my privacy on the internet. This conversation talks a lot about Tor, which is a super extreme way to protect your privacy on the internet. Now that's like advanced stuff. The basic stuff that everybody should be doing is a VPN. Everybody and my favorite VPN, long long long before they were a sponsor, has been Express VPN, big sexy button. It just works. It's super fast. Any operating system, including Linux, whatever your favorite flavor of Linux is, and I've tried them all. I like all of the flavors. That's actually factually incorrect because I love all the flavors of Linux that I've tried, but there is a huge amount of them. I think there is a website called DistroWatch that looks at the popularity based on how often they're searched. I think of of different distributions of Linux and it it's kind of cool to see all the different flavors. It's really exciting how active the community is in the development of those flavors. Anyway, go to expressvpn dot com slash lexpod for an extra three months free. This episode is sponsored by BetterHelp spelled H E L P Help. I think there is a lot of ways in which social media reveals the mental instabilities that we have, the sort of the roller coaster of life, and it's easy to lose yourself in that. And not seek balance and a deep exploration of your mind beyond that kind of shallow roller coaster. Now I am a huge believer of talk therapy as a way to do that kind of serious exploration. However, you do that, and I think the great thing about BetterHelp is it's super easy to do that. It makes it accessible to try. You get access to a licensed professional really quickly. Your mind is the most precious thing you have, so make sure you take care of it. It's easy, private, affordable, available anywhere. You can check it out at betterhelp dot com slash lex and save on your first month. This show is also brought to you by Blinkist, my favorite app for learning new things. Blinkist takes key ideas from thousands of nonfiction books and condenses them down into fifteen minutes that you can read or listen to. There is actually AI systems that have recently been seeing pop up that do summarization and let me tell you something. While that's nice and everything, they do not do nearly as good of a job as humans do, especially when those humans are the sort of world class humans whoever they are behind Blinkist. There is really an extra level, an extra depth of insight that Blinkist is able to do for nonfiction books. It's not just that it's brief. It's also somehow reveal something new even for books I've read. It's revisiting the summaries, gives me a new perspective on that book. I don't know, it's really really powerful. So I recommend it not just for books you haven't read, but also for books you have read, and it includes basically all the major nonfiction books you can think of. You can claim a special offer for savings if you visit blinkist dot com slash lex. This is a lex Friedman podcast. To support it, please check out our sponsors in the description. And now, dear friends, here is Chris Tarbell. You are one of the most successful cybersecurity law enforcement agents of all time. You tracked and brought down Russ Albergt, aka Dread Pirate Roberts, who ran Silk Road and. Sabu of Lulzec and Anonymous, who was one of the most influential hackers in the world. So first, can you tell me the story of tracking down Russ Albergt and Silk Road? Let's start from the very beginning. Maybe let's start by explaining what is the Silk Road. It was really the first dark market website. You literally could buy anything there. Well, take that back. You couldn't. There is two things you couldn't buy there. You couldn't buy guns because that was a different website, and you couldn't buy fake degrees. So no one could become a doctor, but you could buy literally whatever else you wanted. You could postings drugs, you could buy heroin right from Afghanistan, the good stuff, hacking tools. You could hack for hire. You could buy murders for hire if you wanted someone killed. Now so when I was an FBI agent, I had to kind of sell some of these cases and this was a big drug case. You know that's the way people saw Silk Road. So internally to the FBI, how I had to sell it. I had to find the worst thing on there that could possibly find. And I think one time I saw a posting for baby parts. So let's say that you you know had a young child and that needed a liver. You could literally go on there and ask for a six month old liver if you wanted to for like surgical operations versus something darker. Yeah, I never saw anything that dark as far as people they wanted to eat body parts. I did interview a cannibal once when I was in the FBI. That's another crazy story, but but that that one actually weirded me out. Sorry, I just watched Jeffrey Dahmer documentary on Netflix and it just changed the way I see human beings because it's a it's a it's a portrayal of a normal looking person. Doing really dark things and doing so not out of a place of insanity seemingly, but just because he has almost like a fetish for that kind of thing. It's disturbing that people like that are out there. So people like that would then be using Silk Road, not like that necessarily, but people of different walks of life would be using Silk Road to primarily what was the primary thing drugs. It was primary drugs and that's where it started. It started off with Russ Albergt growing mushrooms out in the wilderness of California and selling them. But really, his was more of a libertarian viewpoint. I mean, it was like you choose what you want to do for yourself and do it. And in the way Silk Road kind of had the anonymity is it used what's called Tor the onion router which is an anonymizing function on on the deep web. It was actually invented by the U.S. Navy back in the mid nineties or so. But it also used cryptocurrency. So it was the first time that we saw this birth on the internet of mixing cryptocurrency and an IP blocking software. So you know in cyber crime you go after one the IP address and trace it through the network or two you go after the cash and this one kind of blocked both. Cash meaning the flow of money, physical or digital, and then IP is the some kind of identifying thing of the computer. It's your telephone number for on your computer. So yeah, all all computers have you know a unique four octet numbers. You know so one two three dot one two three dot one two three dot one two three and you know the computer uses DNS or domain name services to to render that name. So if you were looking for you know cnn dot com, your computer then translates that to that IP address or that telephone number where it can find that information. Didn't Silk Road used to have guns in the beginning or it or was that considered to have guns or was did it naturally emerge and then Russ realized like this is not good. It went back and forth. I think there were guns on there and he tried to police it. You know he he told himself the captain of the boat so he had to follow his rules. So you know I think he took off those posts eventually and moved guns elsewhere. What was the system of censorship that he used? Of selecting what is okay and not okay. I mean him alone he's the captain of the boat. Do you know by chance if there was a lot of debates and criticisms internally amongst the criminals of what isn't isn't allowed? I mean it's interesting to see a totally different moral code emerge that's outside. The legal code of society. We did get the the server and was able to read all of the chat logs that that happened. I mean all the records were there. I don't remember big debates. I mean there was a clear leadership, and that was the final decision. That was the the CEO of Silk Road. And so primarily was drugs and primarily out of an ideology of freedom, which is if you want to use drugs, you should be able to use drugs. You should put in your body what you want to put in your body. And when you were presenting a case of why this should be investigated, you were trying to find as you mentioned the worst possible things on there. Is that what you were saying? So we had arrested a guy named Jeremy Hammond and he hit himself. He was a hacker and he this would we arrested him was the second time he had been arrested for for hacking. He used Tor, and so that kind of brought us to a point. The FBI has a computer system where you look up things. You know you look up anything. I could look up your name or or whatever if you are associated with my case. And we were finding at the time a lot of things in you look it up, a case would end be like oh this is Tor and just stopped. Like we couldn't get any further. So you know we had just had this bigger arrest of Sabu and took down Anonymous and and sometimes in the FBI, the way it used the old school FBI. When you had a big case and you are working seven days a week and fourteen hours fifteen hours a day, you sort of take a break. The boss kind of said, "Yeah, see in a few months, go go get to know your family a little bit, you know and come back. " But the group of guys I was with was like, "Let's find the next big challenge," and that's when we were finding you know case closed. It was Tor case closed. It was Tor. So said let's take a look at Tor and let's see what we can do. Maybe we'll take a different approach. And Silk Road was being looked at by other law enforcement, but it was taking like a drug approach where I am going to find a drug buyer who got you know the drug sent to them in the mail and let's arrest up let's go up the chain. But the buyers didn't know their dealers they never met them. And so you were taking a cybersecurity approach. Yeah, we said let's try to look at this from a cyber approach and see if we can gleam anything out of it. So I am actually indirectly connected. Oh, to I am I am sure I am not admitting anything that's not already on my FBI file. Oh, I can already tell you what you are going to tell me though. What's that? The when you were at college, you wrote a paper and you are connected to the person that started. You son of a bitch. You clever son of a bitch. I am an FBI agent or a former FBI agent. Well, how would I not have known? No, but I could have told you other stuff. No, it's exactly what you were about to tell me. I was looking up his name because I forgot it. So one of my advisors for my PhD was Rachel Greenstadt and she is married to Roger Dingell Dineen, which is the cofounder of the Tor project. And I actually reached out to him last night to do a podcast together. I don't know. No, it was it was a good it was a good party trick. I mean, it was it's cool that you know this and the timing of it. It was just like beautiful, but just the linker on the on the Tor project. So we understand so Tor is this black box that people disappear in. In terms of like the when you were tracking people, can you paint a picture of what Tor is used in general? Are there? It's like when you talk about Bitcoin for example, a cryptocurrency, especially today, much more people use it for legal activity versus illegal activity. What about Tor? Tor was originally invented by the U.S. Navy so that like spies inside countries could talk to spies and no one could find them. There was no way of tracing them, and then they released that information free to the world. So Tor has two different versions of not versions two different ways it can be utilized. There is dot onion sites which is like a normal website a dot com, but it's only found within the Tor browser. You can only get there if you know the whole address and get there. The other way Tor is used is to go through the internet and then come out the other side if you want a different IP address if you are trying to hide your identity. So if you were doing like say cyber crime, I would have the victim computer and I would trace it back out to a Tor relay and then because you don't have an active connection or what's called a circuit at the time, I wouldn't be able to trace it back. But even if you had an active circuit, I would have to go to each machine physically at live and try to rebuild that which is literally impossible. So what do you feel about Tor ethically philosophically as a human being on this world that spent quite a few years of your life and still trying to protect people. So part of my time in the FBI was working on child exploitation, kiddie porn as they call it. That really changed my life in a way. And so anything that helps facilitate the exploitation of children, fucking pisses me off. And I I and that sort of jaded my opinion towards towards Tor because that because it it helps facilitate those sites. So this ideal of freedom that Russ Albergt for example tried to embody is something that you don't connect with anymore because. Of what you've seen that ideal being used for, I mean the child exploitation is the specific example for it. You know and it's I can it's easy for me to sit here and say child exploitation child porn because no one listening to this is ever going to say that I am wrong and that we should allow child porn. Should because some people utilize it in a bad way, should it go away? No, I mean I am a technologist. I want technology to move forward. You know people are going to do bad things and they're going to use technology to help them do bad things. Well, let me ask you then. Oh, we'll jump around a little bit, but the things you were able to do in tracking down information and we'll get to it. There is some suspicion that this was only possible with mass surveillance, like with NSA for example. First of all, is there any truth to that? And second of all, what do you feel are the pros and cons of mass surveillance? There is no truth to that, and then my feelings on mass surveillance. If there was, would you tell me? Probably not. I love this conversation so much. But what do you feel about the given that you said child porn? What are the pros and cons of surveillance at a society level? I mean, nobody wants to give up their privacy. I say that I say no one wants to give up their privacy, but I mean I used to have to get a search warrant to look inside your house, or I can just log onto your Facebook and you've got pictures of all inside your house and what's going on. I mean it's not you know so people like the idea of not giving up their privacy, but they do it anyways. They're giving away their freedoms all the time. They're they're they're carrying watches that gives out their heartbeat to a weight of companies that are storing that. I mean what's more personal than your heartbeat? So I think people on mass really want to protect their privacy, and I would say most people don't really need to protect their privacy. But the case against mass surveillance is that if you want to criticize the government in a very difficult time, you should be able to do it. So when you need the freedom, you should have it. So when you wake up one day and realize there is something going wrong wrong with the country I love, I want to be able to to help. And the one of the great things about the United States of America is there is that individual revolutionary spirit, like so that the the government doesn't become too powerful. You can always protest. There is always the best of the ideal of freedom of speech. You can always say "fuck you" to the man. And I think there is a concern of direct or indirect suppression of that through mass surveillance. You might not. Is that that little subtle fear that grows with time? That why you know why bother criticizing the government? It's going to be a headache. I'm going to get a ticket every time I say something bad. That kind of thing. So it gets it can get out of hand. The bureaucracy grows and the freedom slip away. Is that's the that's the criticism. I completely see your point. I agree with it. I mean, but I mean on the other side, people criticize the government of the freedoms. But I mean, tech companies are talk about destroying your privacy and controlling what you can say. I realize they're private platforms and they can decide what's on their platform. But you know they're taking away your freedoms of what you can say. And we've heard certain some things where maybe government officials were in line with with tech companies to take away some of that freedom. And that's I agree with you that gets scary. Yeah, there is something about government that feels maybe because of the history of human civilization, maybe because tech companies are a new thing. But just knowing the history of abuses of government. There is something about government that enables the corrupting nature of power to take hold at scale more than tech companies. At least what we've seen so far. Yeah, I agree. I agree, but I mean we haven't had a voice like we've had until recently. I mean anyone that has a Twitter account now can speak and become a news article. You know my parents didn't have that didn't have that voice if they wanted to speak out against the government or do something they had to go to a protest or organize a protest or you know do something along those lines. So you know we have more of a place to put our voice out now. Yeah, it's incredible, but that's why it hurts and that's why you notice it when certain voices get removed. The president of the United States of America was removed from one such or all such platforms. And that hurts. Yeah, that's crazy to me. That's insane. That's insane that we we took that away. But let's return to to Silk Road and Ross outbreak. So how did your path with this very difficult, very fascinating case cross? We were looking to open a case against Tor because it was a problem. All the cases were closing because Tor. So we went on Tor and we we came up with 26 web different onion dot onions that we targeted. We were looking for nexus to hacking because I was on a squad called Cy Two and we were like the premier. Squad in New York that was working criminal cyber intrusions. And so you know any website that was offering hackers for hire or hacking tools for free, you know or paid services, you know like now we're seeing ransomware as a paid service and phishing as a paid service. Anything that offered that. So we opened this case on on I think we called it. So you have to name cases. One of the fun thing in the FBI is when you start a case, you get to name it. You would not believe how much time is spent in coming up with the name. You know case goes by. I think we called this onion peeler because of the. So a little bit of humor, a little bit of wit, and some profundity to the language. Yeah, yeah, yeah. You're going to have to work with this for quite a lot. So yeah, this one had the potential of being a big one. You know because I think I think Silk Road was like the sixth on the list for that case, but we all knew that was sort of the golden ring. If you could make the splash that that onion site was going down, then it would probably get some publicity. And that's part of you know law enforcement is getting some publicity out of it that you know that makes others think not to do it. We should say that Tor is the name of the project, the browser. What is the onion technology behind Tor? Let's say you want to go to a dot onion site. You'll you'll put in the dot onion you want to go to and your computer will build communications with a Tor relay which are all publicly available out there. But you'll encrypt it. You'll put a package around your data and so it's encrypted and so can't read it. It goes to that that first relay. That first relay knows about you and then knows about the next relay down the chain. And so it takes your data and then encrypts that on the outside and sends it to relay number two. Now relay number two only knows about relay number one. It doesn't know who you are asking for this and it goes through there adding those layers on top layers of encryption till it gets where it is. That and then even the onion service doesn't know except for the the relay it came from who it's talking to. And so it peels back that gives the information puts another layer back on. And so it's it's layers like you're peeling an onion back of the different relays and that encryption protects who the sender is and what information they're sending. The more layers there are, the more exponentially difficult it is to decrypt it. I mean you get to a place where you don't have to have so many layers because it doesn't matter anymore. It's mathematically impossible to decrypt it. But yeah, you know the more relays you have, the slower it is. I mean that's one of the big drawbacks on Tor is is how slow it operates. So how do you peel the onion? So what what are the different methodologies for trying to get some information from cybersecurity perspective on these operations like Silk Road? It's very difficult. People have come up with different techniques. There there's been techniques to put out in the in the news media about how they do it running like massive amounts of relays and you're controlling those relays. I think I think somebody tried that once. So there's a technical solution and and what about social engineering? What about trying to infiltrate the actual humans that are using the Silk Road and trying to get in that way. Yeah, I mean I definitely could see the way of doing that. And in this case in in our takedown, we used that. There was one of my partners, Jerry Derryagan. He was an HSI investigator and he had worked his way up to be a system admin on the site. So that did gleam quite a bit of information because he was he was inside and and talking to you know at that time we only know it is DPR or Dread Pirate Roberts. We didn't know who who that was yet but but we had that open communication. You know and one of the things you know the technical aspects on that is there was a jabber server that was that's a communication type of communication server that was being used and we knew that Ross had his jabber set to Pacific time. So we had a pretty good idea what what part of the we part of the country he was in. I mean, isn't that from from DPR's perspective from Ross's perspective? Isn't that clumsy? He wasn't a he wasn't a big computer guy. Do you notice that aspect of like the technical savvy of some of these guys doesn't seem to be quite. Why weren't they good at this? Well, the real techy savvy ones we don't arrest, we don't get to them, we don't find them. Shout out to the techy criminals. They're probably watching this. I mean yeah, I mean we're getting the low hanging fruit. I mean we're getting the ones that can be caught. I mean they you know I'm sure we'll talk about it, but the anonymous case there was a guy named AV Unit. He still I lose sleep over him because we didn't catch him. We caught everybody else. We didn't catch him. He's good though. He pops up too once in a while on the internet and it pisses me off. Yeah, what's his name again? AV Unit. That's all I know is his AV Unit. AV Unit. Yeah, I got a funny story about about him and what who people think he is. Can actually can we go on that brief tangent? Sure, I love tangents. Well, let me ask you, since he's probably he or she, do we know it's a he? We have no idea. Okay, I mean that's another funny story about hackers the he she issue. What's the funny story there? Well, one of the guys in Lolsec was was a she was a 17 year old girl. And my source in the case the the guy Sabu that I arrested and part of in we sat side by side for nine months and then took down you know the case and all that. He was convinced she was a girl and we said you know and he was in love with her almost at one point. It turns out to be a 35 year old guy that living in England. Oh, so he was convinced it was a yes. He was absolutely based on what exactly by linguistic like human based linguistic analysis or what she she he whatever you know Kayla is what went it which ended up being like a modification of his sister's name. The real guy's sister's name was so good at building the backstory. All these guys and and it's funny like these guys are part of a hacking crew. They social engineer the shit out of each other. Just to build if one of them ever gets caught, they'll convince the everybody else that you know they're a Brazilian you know ISP owner or something like that. That's how I'm so powerful. Well, yeah, that social engineering aspect is part of living a life of cyber crime or cybersecurity and offensive or defensive. So AV Unit. Can I get also just the attention of a tangent first? That's my favorite tangent. Okay, is it possible for me to have a podcast conversation with somebody who hasn't been caught yet? And because they have the conversation, they still won't be caught. And is that a good idea? Meaning, is there a safe way for a criminal to talk to me on a podcast? I would think so. I would think that that someone could. I mean, someone who has been living a double life for for long enough where you think they're not a criminal. No, no, no. They would have to admit that they they would say I am AV Unit. Oh, you would want to have a conversation with AV Unit. Yes. Is there way? I'm just speaking from an FBI perspective, technically speaking. Because I I let me explain my motivation. Sure, I think I would like to be able to talk to people from all walks of life and understanding criminals. Understanding their mind, I think is very important. And I think there's fundamentally something different between a criminal who's still active versus one that's been caught. The mind just from observing it changes completely once you're caught. You have a big shift in your understanding of the world. I mean, I do have a question about the ethics of having such conversations. But first, technically, is is that is it possible? If I was technically advising you, I would say first off, don't advertise it. Don't the fewer people you're going to tell that you're having this conversation with, the better. And yeah, you could you do it in person. Are you doing it? Person would be amazing. Yeah, but their face would not be shown. Face would not be shown. Yeah, I mean you couldn't publish a show for a while. They'd have to put a lot of trust in you that you are not going to you're going to have to alter those tapes. I say tapes because it's old school. You know. Exactly, I'm sure a lot of people just said that like oh shit this old guy just a tape. I heard a VHS was in 1800s I think. But yeah, yeah, you could do it. They'd have to have complete faith and trust in you that you destroy the originals after you've altered it. What about if they don't have faith? Is there a way for them to attain security? So like for me to go through some kind of process where I meet them somewhere where I mean you're not going to do it without a bag over your head. I don't know if that's the life you want to live. I'm fine with a bag over my head. That's going to get taken out of context. But I just I think it's a worthy effort. It's a worth it's worthy to go through the hardship of that to understand the mind of somebody. I think fundamentally conversations are a different thing than the operation of law enforcement. Understanding the mind of a criminal, I think is really important. I don't know if you're going to have the honest conversation that you're looking for. I mean it may sound honest, but it may not be the truth. I found most times when I was talking to criminals, it's lies mixed with half truth. And you you kind of it's if they're good, they can keep that story going for long enough. If they're not, you know you kind of see the relief in them when you finally break that wall down. That's the job of an interviewer. If the interviewer is good, then perhaps not directly, but through the gaps seeps out the truth of the human being. So not necessarily the details of how they do the operations and so on, but just who they are as a human being, what their motivations are, what their ethics are, how they see the world, what is good, what is evil, do they see themselves as good, what do they see their motivation as, do they have resentment, what do they think about love for the people within their small community, do they have resentment for the government or for other nations or for other people, do they have childhood issues that led to to a different view of the world than others perhaps have, do they have certain fetishes like sexual and otherwise that led to the construction of the world. They might be able to reveal some deep flaws to the cybersecurity infrastructure of our world, not in detail but like philosophically speaking. They might have. I know you might say it's just a narrative, but they might have a kind of ethical concern for the well being of the world. That that they're essentially attacking the weakness of the cybersecurity infrastructure because they believe ultimately that would lead to a safer world. So the attacks will reveal the weaknesses. And if they're stealing a bunch of money, that's okay because that's going to enforce you to invest a lot more money in defending. Yeah, defending things that actually matter, you know nuclear warheads and all those kinds of things. I mean I I could see you know it's fascinating to explore the mind of a human being like that because. I think it will help people understand. Now of course, it's still a person that's creating a lot of suffering in the world, which is a problem. Do you think ethically it's a good thing to do? I don't. I mean I I feel like I have a fairly high ethical bar that I have to put myself on, and I don't think I have a problem with it. I would love to listen to it. Okay, great. I mean not that I'm your ethical coacher here, yeah. But well that's interesting. I mean so because I thought you would have become jaded and exhausted by the criminal mind. It's funny, you know. I I'm you know fast forward in our story. I'm very good friends with with Hector Montazer the Sabu the guy arrested. And he tells stories of what he did in his past, and I'm like, I'm that Hector, you know. You know, but then I listened to your episode with Brett Johnson, and I was like, this guy stealing money from from the U.S. government and welfare fraud and all that sort of things. It just pissed me off, and I don't know why I have that differentiation in my head. I don't know why I think one's just oh Hector will be Hector and then this guy just pissed me off. Well, you didn't feel that way about Hector until you probably met him. Well, I didn't know Hector. I knew Sabu, so I hunted down Sabu and I learned about Hector over those nine months. We'll talk about it. Let's finish with let's return tangent to back to a tangent. Oh, one tangent up. Who's AV Unit? I don't know. Interesting. So he's at the core of Anonymous. He's one of the critical people. Anonymous. What is known about him? There's what's known in public and what was known because I sat with Hector and. He was sort of like the the set things up guy. So if Lolsec had like their hackers, which was Sabu and Kayla, and they had their their their media guy, this guy Topiary up. He lived up in the northern end of England, and they had a few other guys. But but AV Unit was the guy that set up infrastructure. So if you need a VPN in Brazil or something like that to pop through. One of the first things Hector told me after we arrested him is that AV Unit was a secret service agent, and I was like, oh shit. Just because he kind of lived that lifestyle, he'd be around for a bunch of days and then all of a sudden gone for three weeks. And I trying to get more out of Hector that early on in that relationship. You know I'm sure he was a little bit guarded, maybe trying to social engineer me. Maybe he wanted that that oh shit there's law enforcement involved in this. And and not to say I mean I I was in over my head with that case just the amount of work that was going on. So to track them all down, plus the 350 hacks that came in about just military institutions. You know it was swimming in the deep end. So it was just at the end of the case I looked back and I was like, AV Unit, I could have had them all. You know maybe that's the perfectionist in me. Oh man, well reach out somehow. I can't. I won't say how right we'll have to figure out. Would you have them on? Yeah, oh my god, if you just let me know just talk about you the whole time. That's perfect. He probably doesn't even care about me. Well now he will because there's a certain pleasure of a guy who's extremely good at his job, not catching another guy who's extremely good at his job. Obviously better, he got away. Better there you go,

本集資源與出處