0x311 - Teknik - Sold to the highest bidder - the escalation of ADINT (nsec)

Value of the Information & Strength of the Argument

The podcast provides valuable insights into a relatively obscure but critical aspect of surveillance. The speakers clearly explain the technical mechanisms of real-time bidding and how they can be exploited. They present a structured categorization of ADINT (passive, active, offensive) that helps clarify the threat landscape. The argumentation is solid, supported by references to well-known cases and reports from Amnesty International and Recorded Future. However, the discussion is somewhat high-level and lacks deep technical detail, which might limit its usefulness for experts seeking actionable intelligence. The conversational format also means that some points are not fully elaborated, but overall, the value is high for raising awareness and providing a framework for understanding ADINT.

Scientific Rigor, Source Quality, Title Accuracy

The speakers demonstrate good scientific rigor by referencing credible sources such as Amnesty International, Recorded Future, and Citizen Lab. They also mention specific incidents, like the NSO Group case and the Syrian refugee tracking, which add credibility. However, they do not provide direct citations or links to these sources within the podcast, relying on the audience’s familiarity. The title accurately reflects the content, focusing on the escalation of ADINT as a sold capability. The content is well-structured and the speakers are clearly knowledgeable, but the lack of explicit references and the conversational nature slightly reduce the overall rigor.

The title accurately reflects the content, focusing on the escalation of ADINT as a sold capability in the surveillance industry.

7/10

The podcast features two cybersecurity researchers presenting their own research at a major conference. They reference credible organizations like Amnesty International and Recorded Future, and discuss documented cases. However, the format is conversational and lacks detailed citations or peer review, limiting the verifiability of specific claims.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 02:00Introduction to ADINT and the speakers' background in CTI and spyware tracking.
• 05:00Explanation of real-time bidding and how user data is shared in ad exchanges.
• 10:00Discussion on the three categories of ADINT: passive, active, and offensive.
• 15:00Examples of passive ADINT, including profiling employees at sensitive sites.
• 20:00Active ADINT: real-time tracking via bid alerts and its sale to governments.
• 25:00Offensive ADINT: using malicious ads as an intrusion vector, citing Amnesty International and Intellexa.
• 30:00Conclusion on the implications of ADINT and the need for awareness.

• Amnesty International report on Intellexa — Referenced as documenting offensive ADINT and other intrusion vectors.
• Recorded Future report on Intellexa — Referenced for revealing a company linked to Intellexa with an SSP in the ad ecosystem.
• Citizen Lab research on spyware — Mentioned as a source for zero-click exploits and spyware research.

• Amnesty International report on Intellexa — Supports the existence of offensive ADINT as an intrusion vector.
• Recorded Future report on Intellexa — Confirms the involvement of ad-tech companies in the spyware ecosystem.

• No discordant sources found — The podcast does not present conflicting viewpoints or sources.