Darknet Diaries - 56: Jordan
Episode Date: January 7, 2020This is the story of Jordan Harbinger. A bit of a misfit teenager, who was always on the edge of trouble. In this story we hear what happened that lead to a visit from the FBI.GuestThanks to ...Jordan Harbinger for sharing his story with us. You can find hist podcast by searching for The Jordan Harbinger Show wherever you listen to podcasts.SponsorsThis episode was sponsored by Thinkst Canary. Their canaries attract malicious actors in your network and then send you an alert if someone tries to access them. Great early warning system for knowing when someone is snooping around where they shouldn’t be. Check them out at https://canary.tools.Support for this episode comes from Blinkist. They offer thousands of condensed non-fiction books, so you can get through books in about 15 minutes. Check out Blinkist.com/DARKNET to start your 7 day free trial and get 25% off when you sign up.More information at https://darknetdiaries.com/episode/56.
Transcript
Discussion (0)
Hey, it's Jack, host of the show.
We're about to hear a story from a friend of mine, Jordan.
Jordan is one of those guys that has a million stories,
like his life is just filled with crazy adventures.
Like this one time he was traveling and got kidnapped, but then escaped.
And then on another trip he was kidnapped again and escaped again.
And he's also been in North Korea, I think, a few times.
But today he's going to tell us a story about a time when he was a teenager and got a visit from the FBI.
These are true stories from the dark side of the Internet.
I'm Jack Recider.
This is Darknet Diaries.
This episode is sponsored by Delete Me. I know a bit too much about how scam callers work. They'll use anything they can find about you online to try to get at your money.
And our personal information is all over the place online.
Phone numbers, addresses, family members, where you work, what kind of car you drive.
It's endless.
And it's not a fair fight.
But I realize I don't need to be fighting this alone anymore.
Now I use the help of Delete Me.
Delete Me is a subscription service that finds and removes personal information from hundreds of data
brokers websites and continuously works to keep it off. Data brokers hate them because delete me
make sure your personal profile is no longer theirs to sell. I tried it and they immediately
got busy scouring the internet for my name and gave me reports on what they found. And then they
got busy deleting things. It was great to have someone on my team when it comes to my privacy. Take control of your data and keep
your private life private by signing up for Delete Me. Now at a special discount for Darknet Diaries
listeners. Today, get 20% off your Delete Me plan when you go to joindeleteme.com slash darknetdiaries
and use promo code darknet at checkout. The only way to get 20% off is to go to joindeleteme.com slash darknetdiaries
and enter code darknet at checkout.
That's joindeleteme.com slash darknetdiaries and use code darknet.
Support for this show comes from Black Hills Information Security.
This is a company that does penetration testing,
incident response, and active monitoring to help keep businesses secure.
I know a few people who work over there, and I can vouch they do very good work.
If you want to improve the security of your organization, give them a call.
I'm sure they can help.
But the founder of the company, John Strand, is a teacher,
and he's made it a mission to make Black Hills Information Security world-class in security training.
You can learn things like penetration testing, securing the cloud, breaching the cloud, digital forensics, and so much more.
But get this, the whole thing is pay what you can.
Black Hills believes that great intro security classes do not need to be expensive,
and they are trying to break down barriers to get more people into the security field.
And if you decide to pay over $195, you get six months access to the MetaCTF Cyber Range,
which is great for practicing your skills and showing them off to potential employers.
Head on over to BlackHillsInfosec.com to learn more about what services they offer
and find links to their webcasts to get some world-class training.
That's BlackHillsInfosec.com.
BlackHillsInfosec.com.
When Jordan was a kid, like many of us, he wasn't sure what he wanted to do with himself.
He was smart, energetic, clever, bored, and sometimes a rascal. You mix all that up and
you get a kid that constantly got in trouble and was into a lot of mischief. It seemed like he
didn't know right from wrong sometimes. It might just be a bad seed going down a bad path.
There was a time when my mom was crying in the kitchen and it was one of the lowest points of my life.
And she was crying in the kitchen because she thought that her son was going to screw his whole life up.
And he had a lot of promise and she didn't understand why.
And she thought maybe it was her fault and she had no idea.
And there was a time when I thought I can't be an employee or I can't get this stuff straight
or maybe I am going to not be able to resist my own BS urges and end up doing something stupid
and end up in prison committing fraud to buy something dumb that I didn't even need.
We've all made mistakes when we were young.
Our brain's just not fully formed yet.
When you look at a young kid doing bad things, is there a way to tell if they're really bad or deep down good?
Curious kids get in trouble.
Kids who think the world is strange or inefficient get in trouble.
It's only the kids who know how to play by society's rules that do good as kids.
But maybe some of us don't know how to play by the rules properly
until we get in proper trouble.
Or maybe it just takes the right person at the right time to make a serious impact on a young mind.
Let's go back to the early 90s, when Jordan was 12 or 13, when he got his first computer.
And of course I got a modem.
And so what I ended up doing was going on a lot of bulletin board systems,
networking my way on there, literally and figuratively.
And I don't mean like networking in the computer sense.
I mean, making friends with people online who lived in Detroit and
talking about crazy zany topics and having a lot of fun and chatting about adult things.
At this point, I really get interested in making things that
explode. Now, you can't do that without getting your door kicked in by the FBI. But back then,
it was like, oh, Drano bombs, hilarious, right? And this kind of like bottle rocket or model rocket
that you've attached an explosive payload to. So funny, you can make a big boom and the whole
neighborhood freaks out and the windows rattle and everyone's, you know,
kind of like, that kid.
Nobody's like Al-Qaeda.
That's what they do now, right?
They go, domestic terrorism.
Back then it was just you redneck punk.
So I start getting a reputation
as the guy that has all of those recipes for everything.
And I got every text file, they were.txt files,
of every kind of like device, box, explosive, everything. And so what my move was,
is I would sign up to a new board. And I would, you know, they had the sysop would have to approve
you, you sign up for the new board, and bulletin board system. And then at some point, I'd say, look, you should let me in.
I have 10,000 or 1,000 or whatever it was,
files about red boxes, blue boxes, explosives,
all this stuff. And a lot of people had some of it,
but not many people had, like, all of it
that you could possibly find anywhere.
I was an avid collector of this.
At 13, and he's already developing like an encyclopedic knowledge of explosives,
stuff that he probably shouldn't be getting into at that age.
But people on these bulletin boards thought he was cool.
So the admins would ask him to upload what he had, and he did.
And these sysops of these great pirate boards or little hacker boards that were just kind of
like small time or medium time i guess you could say they were stoked and sometimes boards would
go hey man you have so much of this i need you to curate it i'm going to make you an assistant
sysadmin after a couple months can you organize this make it really cool i want to make this kind
of an hq our board has the most of this stuff now anywhere that I've ever seen.
And these are boards that also had games and stuff like that.
And they were pretty elite for my area back in Detroit.
And I remember they were always busy and they had multiple phone lines.
I mean, these were freaking legit, man.
Jordan started meeting some of these people from online in real life.
And he would get together and meet with them in Detroit.
But these guys were into
something that Jordan hadn't seen before. They liked jumping into trash cans and looking for
stuff. Dumpster diving. They were looking for something particular. No, they weren't trying
to find free pizzas or day-old bread. They were looking for something a little more interesting.
The guys were like, hey, you know what we're dumpster diving for?
These electronic serial numbers.
You want to see what we do with them?
And I was like, sure.
So I started learning how to program cell phones.
And that was the beginning of the journey.
Jordan was up for this kind of stuff.
Heck yeah.
As a teenager hanging out in the town with the older kids who knew how to hack cell phones,
who also accepted Jordan, Jordan was in with the older kids who knew how to hack cell phones, who also accepted
Jordan, Jordan was in with the cool kids and things were getting exciting. Other things I started
learning how to do were diagram and learn a lot about phone systems. We called it freaking back
then. Of course, you spelled it with a PH because you were very cool and elite. And what I started
to realize was cloning cell phones was really fun. And listening to cell phone
conversations was really easy. You know, I think I had like an NEC P301 or an NEC P300 or both.
And you could somehow you could get that to scan cell phone channels and you could listen to one
side of the conversation. I think it was just one side. You could scan for channels because
everything's analog. Nothing's encrypted. Nothing's really secure. And I thought that was just one side. You could scan for channels because everything's analog. Nothing's encrypted.
Nothing's really secure.
And I thought that was fascinating.
But, you know, you would lose them as they went out of reception. And I think I really do remember you were only getting one side of the conversation.
Jordan continued to play around with the phones,
trying to hack pay phones and cell phones and landlines, everything.
One day he saw a telephone repair truck parked.
Of course, this caught his attention. Jordan was super into phone hacking at this point and would have loved to get his hands
on some of the pro tools that a lineman would have. So Jordan watched the lineman go off to lunch
and he snuck over to the truck. He saw an Ameritech handset, the ones linemen's used to test telephone
boxes with. He grabbed it and ran. And it has alligator clips, the orange handset, right? It
has alligator clips on the end. So I went in and then I made a hex wrench or whatever kind of wrench
it was to open those green boxes on the side of the road. And there was one that had bushes near
it and they hadn't trimmed the bushes in a while. And there was one that had bushes near it.
And they hadn't trimmed the bushes in a while.
They're supposed to do that, but they didn't.
So I could dump my bike and sit in or near the bushes and not be spotted from the road, open up the green box,
plug the alligator clips onto whatever line pair I wanted,
and I could listen to conversations all day in my neighborhood.
And I would spend like four and six hours
listening to conversations in my neighborhood.
Jeez, spending that many hours listening to people's conversations. How weird. A lot of
conversations were boring calls. Someone calling their spouse, what's for dinner, honey? Or do you
need anything from the store? That kind of stuff. But as Jordan hung out listening to these calls,
he started to get hooked on one guy in particular. This guy who
made a lot of calls in his neighborhood was going through a divorce and living with his mom.
He would whine to his mom or his aunt, I guess, all the time on the phone. He would whine to his
sister on the phone. He would act really tough with his friends on the phone. And when he was
talking to his soon-to-be
ex-wife he was just outright hostile and I remember thinking even at age 13 age 14 if he
just talked to his soon-to-be ex-wife the same way he talks to his sister or his mom you know he
wouldn't be in this situation which is kind of a funny insight for a adolescent tween you know to
have and so I listened to every bit of this
guy's phone calls that I possibly could. I mean, I remember my butt was just hurting.
I would go out even if it was raining. This sneaky peek into the personal lives of adults
changed Jordan a little. It was enlightening and educational to hear real conversations like this.
But what was interesting about it for me as a kid was when you're a kid, you don't get to
participate in adult conversations. And if stuff's getting heavy, you're not around. They wait for
you to leave or they tell you to leave. So this was the first conversation or set of conversations
where I was actually hearing what adults were really like. And I remember in my young brain,
adults, and this guy especially,
transformed from this sort of two-dimensional caricature
to a real person with feelings and situations and problems
and concerns and ideas just like me.
And coming from the position of a self-centered kid,
that was a novel revelation.
It made no sense to me at first,
and then it slowly opened me up. And it allowed me to look at people in a completely different
light and have more empathy. And I remember taking these skills with me to school and talking with
more adults and them saying like, oh, you're so ahead of your time. I was learning so much from
all of these phone conversations. And that's what really got me interested in people. And once you get interested
in people, but you're at the age where mischief is really taking root, the next logical step is
social engineering. Jordan continued to listen to phone calls for a while and was still actively
uploading text files to BBSs full of bomb making recipes. And he thought maybe this isn't a good idea.
Maybe the cops are watching me upload this stuff.
Maybe it's not so cool to put all this explosive information on the BBSs.
But the cops didn't contact Jordan.
They just left him alone.
But I have no doubt that they were following my connections and my people online.
And I remember being on the phone chatting voice, as we used to say, with some of the people who are operating other boards, and they would be like,
wait, there's somebody at the door. And I remember them being like, hang up the phone,
and then I wouldn't hear from them for like weeks. And I'd be like, what happened? He'd be like,
dude, the FBI came. I can't talk to anyone. I'm not doing anything. The board would go down,
you know, all that stuff. These guys would get so scared.
So it was fun for me in an exciting way because I was just on the outside of this.
As the forums he would frequent would go down, he started checking out some other websites and forums that he knew about. And when Jordan started learning about something, he has a tendency to
dive deep into it. I also, of course, was looking at the way
that credit card systems work and payment systems work.
And I had this little racket going
where I could order books using a money order.
And I could wait for them to get the money order
and wait for them to go and take care of the money order
and deposit it, or so they thought,
and send out the
stuff. And there was this little lag between then and when. And I would call to get confirmation.
Most people don't do that. They just wait for things to be shipped to them. I would call,
find out they received the money order, immediately bike over to the drugstore and
cancel the money order and get my cash back. And there was just enough of a lag. It was probably
just a couple of days where they would send out the stuff, but I would still have my money. They would not know that it
had been canceled, but you could cancel it right away, turn in that little stub, and it would be
done. And you'd get your cash right then. So it was this easy glitch in the system that was so
obvious to me as a kid. And I would get a ton of free stuff,
usually books. And I remember I ordered some more expensive stuff. But the problem is you
have to have the money first to get a money order. So I was pretty limited in what I was able to do.
Soon, though, he got bored with this scam and started learning about other ways to scam
with money. Quick side story. When I was 13, I was mad at my mom about something. She gave
me an old checkbook and a pair of scissors and told me to cut up the checks since we weren't
going to use those checks anymore and she didn't want thieves stealing the checks. Well, me being
mad at her and a little mischief maker myself, I didn't quite understand this and I got into my
head that somehow the checks were money. Money is confusing as a kid.
It's not clear if the check itself is money or if credit card is money or just cash is money or
where the money is and how it moves around and how is it tied to one thing or another.
What the heck is money? I was 13 and didn't know. And I took these checks and didn't rip them up.
And after school one day, I went to
an ice cream shop and asked, do you accept checks? The clerk said, uh, yeah. So I did my best to try
to write a check out. Didn't do it very well at all, I'm sure. I gave it to them. My hand was
probably shaking. I had no idea if what I was doing would get me in
trouble with this or what, but I just did it. I knew I was breaking some kind of rule just for
a sweet lick of some ice cream. The manager came out and looked at the check and told me,
where's your mom? I grabbed the check and ran out of there, ripped up the checks and never tried this again. But what if this did work and a small win got me a lick of ice cream with a stolen check?
I probably would have done it again.
And who knows where I would have ended up.
So I can absolutely see Jordan here having great success with the money orders and to just go ahead, take it further.
Look for what's next, what's bigger.
And that's when he got curious about credit cards.
Being on these dark and seedy forums,
he came across full credit card numbers and credit card generators
that would just make up fake credit card numbers.
He found a credit card number online.
It didn't have an expiration date or name, so he just made it up.
He tried to order something small over the phone, paying with credit card, and it worked.
He got the item shipped to his house with a stolen credit card.
Amazing.
Jordan was on to something new here.
One time, I decided to go big, and I called from a payphone and used a credit card,
and I ordered pizza for next for the next day
for my entire middle school and I gave the guy instructions I thought about this ahead of time
I said you know what you need to do come in start putting a pizza down don't go to the office just
come straight into the lunchroom start putting a pizza down on every table and eventually one of
the women is going to come up to you and say excuse me what are you doing or something like
that and that's when you say happy happy birthday, Mrs. Jacobson,
because she was the assistant principal who was also our lunch monitor.
And I knew that she would be the one to go up and say,
excuse me, what are you doing?
So what happened, of course, was I couldn't keep my mouth shut.
I told one friend who was a freaking idiot, still is an idiot, actually.
And he told everybody.
So everybody knew.
And when that pizza van showed up, that guy got mobbed.
And kids started housing that pizza.
And, of course, when the principal came up, assistant principal came up and said, what are you doing?
He said, happy birthday, Mrs. Jacobson.
And the whole school started laughing.
And she was pissed.
She took him to the office.
And the police came. and they were unhappy. And eventually they called me into the office multiple times.
They blamed everyone but me. And eventually they had nothing on me other than rumor. And they were
going to take one of my other friends who didn't do anything. He had nothing to do with it. They
were going to take him down. They said, we're going to expel you. Seeing someone else getting in trouble for his crime, he had to come
clean. The cops said, well, all right, I want to find out, how did you do this? And I explained
everything. And they said, man, we got to tell the FBI because you used a card that belonged to
somebody else. We can't reach the person who owns the card.
And I kept saying, look, I made the card number up.
You're using a name.
Of course you found somebody with that name in Florida.
It's a coincidence.
I used a fake name.
What are you talking about?
And they just could not wrap their minds around this.
So the FBI agent came, and I'm sure he was pissed
because he had to drive up from the office in Detroit
to interview
a 14 year old kid. And he said, look, after I explained everything, he said, look, you're
seemingly pretty intelligent. Why did you do this? And I said, I wanted to pull a fun prank.
And he goes, this is going to get you in deep trouble. And he said, but you should focus your
energy on something else. I'm not going to do anything with this. You got to figure out how
to pay back the damages for the pizza. You've got to call the pizza place. You've got to deal with
this. I'll deal with the credit card company. They might want to do something with this,
but I doubt it. It's petty, but keep your nose clean, man. You probably have a bright future
ahead of you if you stop pulling this crap. And it made sense to me, right? It made sense to me.
Every other adult was just pissed. They were embarrassed. Their ego was damaged.
This was the only guy who was like, huh, this is not the dumbest thing I've ever had to
investigate, right?
And that, to me, gave me a little boost of confidence, not to keep doing bad stuff, but
to maybe focus on something healthier instead.
The assistant principal wanted to throw the book at me.
The cops didn't really
seem to want to do that. And the FBI definitely didn't want to. And I'm thankful for that.
You know, as much as we in this community might make fun of a rib feds, these are not bad guys.
You know, they were much more interested in trying to keep me on the straight and narrow
and utilize my knowledge than they were in trying to get me into some kind of trouble. And I'm extremely thankful for that because it would have been easier or just as easy
for them to just book me for some sort of dumb crime and ruin my chances of getting into college.
Instead, I ended up with a letter of recommendation from one of them. I mean, what are the odds of that. When we come back, Jordan tries to find a date in a chat room, but gets so much more than
he bargained for. Stay with us. This episode is sponsored by SpyCloud. With major breaches and
cyber attacks making the news daily,
taking action on your company's exposure is more important than ever.
I recently visited spycloud.com to check my darknet exposure
and was surprised by just how much stolen identity data criminals have at their disposal.
From credentials to cookies to PII.
Knowing what's putting you and your organization at risk
and what to remediate is critical for protecting you and your users from account takeover, session hijacking, and ransomware.
SpyCloud exists to disrupt cybercrime with a mission to end criminals' ability to profit from stolen data.
With SpyCloud, a leader in identity threat protection, you're never in the dark about your company's exposure from third-party breaches, successful phishes, or infostealer infections. Get your free Darknet exposure report at
spycloud.com slash darknetdiaries. The website is spycloud.com slash darknetdiaries. Jordan had a bit of a habit.
He really did enjoy going to these shady forums
where he saw batches of credit cards with holograms being bought and sold.
He watched out of curiosity, but stopped short of participating in criminal activity.
His brush with the police and FBI had convinced him not to make fake credit cards.
He took a job at the local movie theater
and designed websites on the side.
One of the movie theaters that I worked at
was owned by the owner of the Detroit Red Wings hockey team.
And that guy was one of the wealthiest men in the world,
actually, at the time.
Certainly one of the wealthiest guys in the United States
because he owned the Red Wings,
but he also owned Little Caesaresar's pizza and the whole chain and so his
daughter owned this theater and they had some theft or some issue at the theater and so they
had security come around and when they couldn't find a regular security guy mike illich the owner
don't the daughter's father the owner of the Red Wings and Little Caesar's Pizza,
he would send his sort of in-house private investigator.
A private investigator investigating a theft at the theater Jordan worked at?
That is interesting, right? Jordan was curious to know more about what a private investigator does.
So he starts chatting with him. They got to talking about all kinds of stuff.
Martial arts, websites, crime.
And one day Jordan mentions to him that he knows how to build websites.
Now, that was sort of a rare skill back then.
The PI gave Jordan a chance to build a website for his friend's security company.
They were kind of doing, on the one hand, security for the neighborhood,
the apartment buildings and different commercial buildings.
But on the other hand, they were legit vigilante in Detroit, tackle drug dealers, tie them up and take them to the police station and collect a bounty or just arrest dangerous people in the neighborhood.
Like that's what these guys were doing back then.
And I wanted in, man, that was
exciting. I had a car, you know, at this point. So in exchange for designing a website for this
security company, they were training me in martial arts, which were like real martial arts, not like
do a kata karate, break a piece of wood. They were showing me stuff nobody was talking about
that they had learned in the Israeli military. And I met some hard dudes back then. They were usually ex-military and they were in executive
protection. So like we would end up in by we I mean, I would either drive or be like completely
back in the office's logistics, but we would have like Ice Cube, Puff Daddy come in for a concert
and they would protect him. And I handled like our phone systems, our computer stuff. I did a lot of the driving. I was actually the only white guy for a long time
in the office. And I had, I'd gotten straight A's. So my dad who worked for Ford was like,
well, if you get straight A's all three years, uh, till your junior year, till your senior year,
I'll rent you an SUV or a car that you want. I chose an SUV. It wasn't that fancy, but you know,
he's an employee of Ford. It was. He got a great deal on it.
And so I was really thankful for that.
So this was a badass car.
So I drove around and I drove our agents around in this.
And it was easy because a lot of them were busy
doing client work, things like that.
And I was able to drive my car
and transport agents around.
Some of them, honestly, 20, 20 hindsight,
probably were not supposed-20 hindsight, probably
were not supposed to be driving, probably had either felonies or had lost their license or
just didn't have a car. There were some shady people in this executive protection company,
and I was pretty clean. I'd get pulled over at night and the cops would be like, all right,
have a good day. I mean, this is 90s Detroit, man. If I'm driving around in a nice area in an SUV,
I'm just another white kid in an SUV.
If they're driving around at night in an SUV, all black, leather gear, tactical stuff, it's not going to look good.
So now Jordan is running with a whole new group of guys.
Security guards, martial artists, vigilantes, big buff dudes.
And they used to rib me about, hey, are you meeting any girls?
You meeting any girls?
And I was embarrassed because I wasn't really.
And I met girls at the movie theater where I worked, and that was kind of it.
He tried to meet girls, but he just wasn't having any luck.
So he decided to try and meet them in a different way.
Jordan was online a lot and thought, hey, if I'm online, there's probably girls online too.
So he started looking around for them.
See, this is decades before Tinder.
And at that time, it was extremely weird to sort of make new friends online
and try to find a girlfriend.
But he popped on AOL to try his luck anyway.
He liked AOL since it had a ton of chat rooms
and you could privately message people too.
He found his way into like a Detroit chat room or a teenager chat room and tried to find
girls in there. AOL turned out to be a goldmine because a lot of girls my age had it and I could
use instant messenger. And I told the guys what I was doing that I was meeting girls on AOL instant
messenger and they were really enthralled because they were like, wait a minute, there's a way to
meet girls on using the modem. I don't understand how do I do this. So I was showing them this and
one of the guys goes, you know what, if you want to stand out from other guys doing this, what you should do
is create an account that sounds like a girl and see what the guys say to you.
And I thought, that's pretty genius. Social engineering for the win, right? The very,
probably one of the very first times I ever even thought about doing anything like that. So I made a screen name on AOL that sounded really girly.
And immediately I started getting, I made these basic profiles.
I would go in the chat rooms.
Immediately guys would start hitting on me.
Immediately.
A lot of it was really pathetic.
Some of it was really clever.
I started taking notes and learning.
But then some of it was kind of funny. And I would print out the chat transcripts
of these guys hitting on this girl,
or me, who they thought was a girl.
And the guys at work would have a laugh about it
just every single time I went to work.
But then his boss stops him one day and says,
wait a minute, this guy says he's a professional photographer
and thinks you're
a 15-year-old girl
and he's a 39-year-old man.
Suddenly, Jordan realized
this dark side.
This was not just some lonely guy.
He was being hit on
by child predators.
This is a criminal.
This is a guy who victimizes young girls.
And I had never, I didn't think about that.
Being, I think, 15 or 16 at the time,
I didn't think about the fact that this was a criminal.
I was just thinking he was pathetic.
It quickly turned from a good, lazy laugh to,
holy crap, this is really bad.
Some of these guys who are hitting on this fake girl are monsters.
Suddenly, the conversation took on a different meaning.
And I'm not, this is not even like me being flirty or anything.
This is just me being like, yeah, I'm 15 and I live with my parents
and I like going to the beach.
And then they'd be like, hey, I'm a photographer.
Do you want to become a model?
Hey, you should come see me.
Where do you live?
What's your address?
When are your parents home?
We don't want your parents to be home.
Hey, can I take you out on a date?
Like really weird stuff.
And these guys were unrelenting.
I didn't even have to really feed that much into the chat.
And it was extra creepy.
So these guys said, wait a minute, we got to figure this out.
This is not good.
And a couple of the guys, of course, had connections to the local FBI office.
Yeah, even though those security guys were your typical tough guy,
they had to deal with the FBI before.
So they gave Jordan a fax number to an FBI agent.
But the FBI agent wasn't used to dealing with cybercrime.
Because I don't think many agents were at the time.
Think about this.
Since it was computer crime, the Detroit office was like,
we're not really sure what to do with this. Now, I crime does the fbi handle that's not done with a computer right i
mean but back then this was like a bank fraud unit type of crime you know they they had to figure out
who was dealing with stuff because remember aol servers are in virgin or whatever. I'm in Michigan and the other guys in like Ohio.
So what local PD has jurisdiction?
Nobody had a clue.
So we were faxing these transcripts back and forth and he would send it to D.C.
And then like a week or so later, they'd come back with, hey, we need more information on these people.
Hey, are you still talking to these people?
And I had their screen name so I could easily go and get them and bait them into a
chat. And I started working at that time via Agent Forrester and some of the other agents with people
in D.C. to hand off my chats to them and so that they could continue them. So after I kept sending
them a bunch of chat transcripts, the whoever it was up in the powers that be in Washington, D.C., they decided to get interested because I think at that time they thought, eh, so some kid finds a pedophile on AOL.
Who cares?
No harm, no foul.
But then when it was like 10 a week and it was me barely doing anything but showing up in a chat room with a name that kind of looks like it could belong to a girl, that became very, very problematic.
Right.
That became very problematic.
It became hard for them to ignore.
And I think at some point they figured this is no longer something that we can just sort
of sit there and ignore all the time or in good conscience not deal with.
And so I started to send them more and more transcripts and they would call me
ironically on a clone cell phone. Some of the time they would call me.
They would ask me questions about how, where I'm meeting these people, how I'm engaging with them
and things like that. And I don't know this as fact, but I think since they're probably didn't
have enough manpower to deal with this,
they felt comfortable enough having me send them,
I guess you would call it the leads,
and progress the conversations to the point where it was very clear
these were no longer innocent parties
that were just kind of interested in flirting with someone online.
It became really clear and really obvious very quickly
that these guys were more than willing to cross state lines and meet with and engage with a minor.
And this is long before to catch a predator, now that I think about it, right? was good enough for this guy who lived in Ohio to come up and cross the state line into Michigan
in order to engage in clearly inappropriate acts with a minor.
And so that got them pretty interested.
And so they started organizing with local PD and they started making arrests.
I would hand off the chat so I didn't get all the logistics work.
That was kind of on them.
And they would do some confirmation of like, so is this going to happen?
Are these things going to happen?
And this guy, I mean, I saw the transcripts, some of them, and they were pretty explicit after that.
Okay, so what are your parents thinking of this?
Because, I mean, number one, you're talking to pedos online.
And number two, you're an informant for the FBI at 16 years old.
They were just glad that I wasn't blowing anything up or doing any drugs. You know,
they were really glad about that. But they were not happy that I was talking to pedos online until
they got a call from the FBI, because they originally, you know, when they couldn't reach
me on my cell phone or before I even got the cell phone, they were calling the house. Imagine the FBI calls your house. Your parents, first of all,
have a miniature heart attack. And then the FBI agent says he's helping us catch people,
bad people or whatever they had to say on the phone. And then my mom goes, OK. And of course,
they had to sign off on some of this. So it wasn't just like, hey, I'm talking to the FBI
and nobody can know about it. It's like, no, your guardian has to say it's okay for my son to be working with you.
They were 50% proud, 30% worried, 20% completely not sure about what the hell was actually really going on and kind of clueless and probably gladly so.
Because they were just like, as long as our kid's not dead.
Bear in mind, I'm still getting like straight A's in school at this point i've got a job you know
there's not a whole lot for them to complain about i just also do this crazy fbi stuff on the side
so jordan jordan was still a teenager but he stuck out of public school because he had a cell phone
no one really had cell phones in the 90s, much less teenagers.
And if you had one, people thought you were like a drug dealer or a secret agent or something.
Jordan was a secret agent and had a cell phone.
He even had kind of a get out of jail free card.
He had a note signed by the superintendent of schools, the principal, and the FBI agent stating that he could carry a cell phone in school.
How cool is that?
And a librarian caught me in the hallway calling my mom on the cell phone.
And she just was clutching pearls and gasping.
And oh, my God.
And she ran back in the library and she called the assistant principal.
This is a high school, not the one that I embarrassed over the pizza incident.
And Mr. Speech Co., bless him,
comes out, hadn't seen the note. This is a pretty early day and me being able to carry the phone in
school, comes over and goes, Harbinger, do you have a cellular telephone in your bag?
And he's not mad. He's more like incredulous, just like, who the hell is a cell phone? And I have,
this is one of my teachers. He teaches a unit on Vietnam.
I'm very active in his class.
He knows I'm not a drug dealer or an idiot.
And the librarian comes out and she's got her, she's got librarian swag.
She can't wait to watch me get busted by the assistant principal.
And she's got a smirk on her face that I'll never forget.
And I said, yes, I do.
And I also have a letter from the principal, the superintendent, and the FBI. And he goes, can I see it? And I said, yes, I do. And I also have a letter from the principal,
the superintendent and the FBI. And he goes, can I see it? And I said, sure. The phone or the letter?
And he goes, oh, yeah, the phone and the letter, because I think he just wanted to see the phone initially. So I send I hand him the phone and he's he's just like, you know, he looks at the
letter. He goes, well, I'll be you sure do. Well, good for you. Are you working with the FBI? What
are you doing? This is really cool, man.
Hey, you got it.
Hey, can you come by after school?
I want to hear all about this.
Anyway, and the librarian's face went from a smirk,
and I've never seen somebody melt into a puddle so quickly.
And it's a vindication that is so rare as a teenage boy
that I don't think I'll ever forget it,
even as a 40-year-old man who should be over this by now. I'm still not, right? Because she just sort of slunk back into her library and was
just like, wah, I can't believe it. And Mr. Spichko, the assistant principal, was flabbergasted
that one of his students was working with the FBI to catch pedos online. And when he aired the story, all the teachers heard the story in short order.
And I remember when my phone would ring during class,
even the hardest, strictest teacher
would just point to the door
and I would walk out and take the call.
They weren't happy about the disturbance,
but it was kind of like,
well, the bat signal is flashing,
so Harbinger's got to leave the room now.
It was awesome.
And after school, he would call the fbi agent and report what he saw and he would call and give reports frequently and since this
whole internet thing was still new and the fbi agents didn't quite understand it all jordan just
invited them to the house to take a look for themselves so they they came over, went into Jordan's bedroom, sat down and watched
as he dialed into AOL, connected to chat rooms, used a girly name he made up and made some kind
of entrance into a chat room. And they would see me log in and then they would see it be like bring,
bring, bring. And I would go in the chat room, bring, bring, bring private messages and start
popping up all over 14 at a time. You know, I've got my screen
tiled with chats and all, you know, nine out of 10 are pedos. And the occasional kid is like,
hi, are you pretty? You know, but nine out of 10 are pedos. And this wasn't a weird chat room.
This is like a standard generic AOL chat room. He even told the FBI about the cell phone cloning
that he was doing. They didn't exactly condone it, but they didn't seem to care either.
Maybe they didn't understand what the harm was at that point.
It wouldn't be until years later that the FBI would see how cell phone cloning could cause real harm.
But of course, the dark side of this was people were committing crimes using cloned cell phones and then throwing them in the garbage. And the guys I was learning and cloning with, some of them ran businesses where they would
jack or buy phones, reprogram them with stolen ESNs, sell them to drug dealers and mafiosos
who would use them for a week and then throw them in a dumpster or return them to my buddy
who would reprogram them. There was a real dark side to that, but I wasn't messing with all that. You know, I felt like a hero. I was catching pedos online and I didn't even have to go
and tackle anyone. I wasn't tough. I was the least tough guy in the security company, but I still had
mad respect from all those guys because I was like the local hacker, right? And I wasn't hacking
squat. I wasn't doing anything really that complex. I was just
sweet-talking knucklehead, pervy pedo predators into crossing state lines and getting arrested
by the cops. I felt like I was doing the Lord's work, dude. Time passed and Jordan grew up a
little. He got through high school and decided to go to college to become a lawyer. FBI agents came
to a school to give a talk about how to become an FBI agent,
and they recommended students become a lawyer or an accountant to do that.
But as Jordan studied law, he thought becoming an FBI agent
may not pay off a student debt very well,
and the forensic work just didn't excite him.
So after law school, Jordan moved to New York City.
He passed the bar and
got a job as a lawyer on Wall Street. It was 2007. The whole economy was about to implode.
One of the higher up partners of this company was Dave. Dave was assigned to be Jordan's mentor to
teach him all about being a lawyer on Wall Street. But Dave was never in the office to mentor him.
So one day, Jordan asked to meet up with Dave over some coffee.
And finally, he had a chance to ask him some of these questions that have been nagging him since
day one. And so he took me to coffee in the basement of the building at a Starbucks. And he
said, All right, ask me anything you want. He's banging away on his BlackBerry. And I said, How
come you're a partner, you're one of the youngest partners, but you know, you're, you're never in
the office thinking he was going to give me the magic cheat code to working from home. And instead he said,
well, I work from home sometimes. Yeah. But I mean, mostly I'm out generating business for the
firm. And I thought, wait a minute, what does that even mean? So of course I had to know. And I said,
what do you mean you're generating business for the firm? And he goes, yeah, you know, I bring
in deals. I don't worry about my billable hours. I don't worry about getting a billable hourly bonus,
because if I get a bonus for bringing in like two or three deals a year, it eclipses any hourly
bonus I would have gotten. So I focus on generating deals. And I said, how come everybody doesn't do
that? And he goes, not everybody's good at that. And I said, well, how do I get good at that? And
he goes, you know, you got to go out there and meet people and work your connections and go to events.
You know, I'm going to this charity event.
I'm playing racquetball here, squash over there.
I run over here.
I bike over there.
I do jujitsu.
You know, it's cool, man.
I do a lot of different stuff.
Whenever there's an investment banker, I make sure that one of our clients is I'm hanging
out with them and then they throw us a deal.
It's actually not that hard.
I wish more people would do it, but maybe I'm glad more people don't.
He goes, if you learn how to do that, you know, you can write your own ticket.
You'll make partner earlier.
And that changed the way that I look at work forever.
Once again, one person saying the right thing at the right time enlightened Jordan.
Instead of banging away at becoming a great lawyer, maybe he needs to change his focus a little.
He thought about this.
Oh, there's this secret third path that nobody's even thinking about,
which has to do with networking and relationship development.
This is psychology-based.
I can do this.
These are people skills.
This is like social engineering, but it's like sales.
So I never, a lot of people look at social engineering and they go,
yeah, it's kind of like
sales only it's a little dark side. I learned social engineering first and I went, oh, it's
like sales. It's like social engineering, but it's, it's white hat. I didn't even think about
that before. So then I dedicated myself whole hog into body language, nonverbal communication,
persuasion, influence, that kind of stuff was my bag.
So I took every class I could find.
I read every book that I could.
And I started to apply this.
And I started trying to generate business for the firm.
And of course, I was too young and too junior to be able to do this.
And of course, other lawyers, they didn't care to learn this.
They didn't know it was important.
What they did care was that I went from being a homebody
nerd to going out all the time and meeting a ton of women. And people were like, well, wait,
what happened to you? And I said, well, I'm learning all this sales stuff and networking
stuff. And it just so happens that when you apply it to the opposite sex, it really works well.
And then people, I had their attention, right? Then everybody was like, wait, wait, wait, wait, wait.
Teach me what you're talking about here.
And that was the genesis of me starting the Jordan Harbinger show and the podcast and the things that I teach in consulting and things like that when I, ironically, train law enforcement, military, and security companies.
Yeah, Jordan Harbinger is a podcaster. That's
how I met him. One podcaster meeting another. But he's also no stranger to going to DEF CON,
and has a lot of friends in the social engineering village there. And he rounds up all this knowledge
he has and experience and interviews a ton of interesting and successful people on his podcast,
The Jordan Harbinger Show. And even though he used to dream about becoming someone in the intelligence community, now he trains those kinds of people. intelligence officers tend to do a lot of is manage lots and lots of relationships, sometimes
with people who are not completely open, sometimes with people who are maybe a little hostile,
and they have to generate trust. And that's exactly what I'm training them to do. I'm
teaching people how to know, like and trust you so that you can use influence. And it's fairly
straightforward, but it requires a lot of discipline, a lot of practice, and you really have to work on the skills. It becomes a way of being and a set of habits, not a set of hypnosis persuasion tactics
that you can apply. You really do need to be socially fluent. I'm training them things that
I learned as a teenager that I then turned into things I used in my 20s to date and meet people
that I then once again turned into social engineering and networking and sales.
It's really come full circle.
Huh.
Once punk kid chose wisely.
Through a series of remarkable events,
he ended up teaching himself to be socially fluent
and is now running his own business,
making even more money than what he did as a lawyer on Wall Street.
More money than what he could have probably been making if he was a criminal, too.
I don't know what the life lesson is here to take away from Jordan.
Maybe not to be afraid of pushing the boundaries and the rules,
because you might not realize how smart you are until you get caught.
Or maybe it's that social skills are a ton more valuable than we think,
and that social engineering can be applied for good and have great rewards.
But of course, what's interesting to me is that Jordan is constantly trying to learn and grow
every day. It doesn't matter how smart he is or feels like he is, he knows he needs to learn more,
which is something I think that's important for us all, no matter how much knowledge we think we have.
A big thank you to Jordan Harbinger for sharing his story with us.
You can hear so many more of his stories on his podcast called The Jordan Harbinger Show.
I recommend the episode where he interviews Richard Clark.
And another good one is when he interviews Frank Abagnale.
They talk about nation state hacking and social engineering.
That's just fantastic.
Oh, and don't forget to check out the Darknet Diaries Patreon.
This is where you can get bonus episodes and really help support the show to make more things and greater things and better things.
So thank you everyone who is supporting the Patreon
because that's really what gives this show wings.
This show is made by me, the snow coder, Jack Recider.
This episode was produced by Michelle Martin.
Sound design by Andrew Merriweather.
Editing help from Damien.
Artwork this episode by Lauren Olson.
And our theme music is by the jingling Breakmaster Cylinder.
And even though my dad still doesn't own a cell phone because he's just tech illiterate,
this is Darknet Diaries.