Stalking the Wily Hacker: 40 Years Later
Cliff Stoll reflects on the 40th anniversary of tracking down an international KGB cyber espionage ring originating from a 75-cent accounting error.
Summary
In this historic and captivating keynote from the DEF CON 34 Main Stage, astronomer, author, and cybersecurity pioneer Cliff Stoll takes the stage to reflect on the 40th anniversary of his legendary investigation chronicled in "The Cuckoo's Egg." Opening at 00:04 to an electrifying standing ovation, Cliff recounts how an innocent 75-cent accounting discrepancy in 1986 at the Lawrence Berkeley Laboratory unraveled a sophisticated international cyber espionage ring selling stolen Western military secrets to the Soviet KGB.
At 14:00, Cliff explores the scientific mindset and the gritty realities of research, humorously sharing how amateur curiosity and sheer stubbornness triumph when an investigator is underfunded and bewildered. At 28:01, he recounts working alongside early federal investigator Mike Gibbons, navigating an indifferent intelligence bureaucracy that had never previously encountered network-borne espionage.
At 42:03, Cliff delivers an impassioned critique of sanitizing corporate jargon like "threat actors," urging the audience to maintain personal responsibility and human empathy. He concludes at 56:02 by looking ahead to the future of technology, inspiring attendees to embrace playful curiosity, question dogmas, and celebrate the timeless human spark of hacking. (AI summary — Gemini Flash)
Related talks
Main Stage·44 min
Wesley McGrew
Wesley McGrew analyzes digital forensics and unallocated space across 500,000 Commodore 64 floppy disk images to uncover early hacker subcultures and ephemera.
Main Stage·1 hr
winn0na
An interactive courtroom simulation where DEF CON attendees act as jurors in a cybercrime trial, learning legal attribution standards and forensic evidence handling.
Black Hat·1 hr 20 min
Gregory S. Miles
Security researchers examine technical aspects of USA 2001 - Computer Forensics: A Critical Process in Your Incident Response Plan.


