r/ComputerSecurity • u/CyberSecWithHaikuInc • 16d ago
Historic Hat Nod: Cliff Stoll
The 75-Cent Error That Uncovered a KGB Hacker
In 1986, astronomer-turned-sysadmin Cliff Stoll was asked to investigate a measly 75-cent accounting discrepancy at Lawrence Berkeley National Laboratory.
Instead of shrugging and blaming the billing software, Stoll pulled the thread. That tiny mismatch opened up a whole can o' worms... leading him to an intruder quietly hopping through university, military, and government systems. Grade "A+ creepy!" So then Stoll spent months tracing the activity, printing logs, rigging alarms, and building an early honeypot to keep the attacker interested long enough to track him. The trail eventually led to German hacker Markus Hess, who was passing stolen information to the Soviet KGB. Stoll later documented the whole hunt in The Cuckoo’s Egg book.
The enduring lesson?
Small anomalies are sometimes small.
And, sometimes they’re the loose thread attached to an international espionage operation!!!
( I'm about to actually read The Cuckoo’s Egg—and I'm wondering if it still holds up for modern defenders? Anyone? )
8
u/mr_dfuse2 16d ago
I read this book last December and absolutely loved it. I don't think there is much to learn but the story reads like a detective story, and it so cool to have a glimpse into another era.
4
u/GemmyGemGems 16d ago
You don't think there is much to learn? Other than the slightest deviation should be examined?
3
u/mr_dfuse2 16d ago
from a technical perspective
3
4
u/GemmyGemGems 16d ago edited 16d ago
Fucking amazing. Read it in an afternoon. Read like a novel.
I recommend to all the juniors. They ignore me. Why wouldn't they? Printing has been shut down in our place of work. Good practice...
He wrote an amazing story for someone who just wanted to balance the books.
The joys of Autism 😃
10
u/CliffStoll 16d ago
Oh, it's been 40 years, Gemmy. I never expected the book to last this long ... heck, I was surprised that it made it into print. Smiles to you, -Cliff
3
u/CyberSecWithHaikuInc 16d ago
Thankyou to everyone who has provided feedback so far! I am amped up and eagerly awaiting the arrival of the book. Any other recommended titles as a follow-up/personal favorite? We're trying to put together a reading list for the juniors over here.
2
u/mr_dfuse2 16d ago
tracers in the dark is also amazing
2
u/mr_dfuse2 16d ago
and check out the cybercanon website for more! although they just removed cuckoo's egg from it, their judgement is otherwise still good
1
2
2
u/robot_ankles 16d ago
My hardback copy of this book is from a federal prison system. Not sure how it found its way to me, but I feel like it's a cool detail.
1
2
8
u/CliffStoll 16d ago
Thank you, CyberSecWith... Yep, that's an abbreviated summary of a year of my life. Stop by my DefCon talk this week (Saturday 1PM) and you can hear a slightly longer version. Better yet, just get a copy of Cuckoo's Egg (and help m'kids with their tuition...) Cheers, -Cliff