Invasion of Privacy: A Deep Web Thriller #1 (Deep Web Thriller Series) (17 page)

Brody wondered what she saw in the man. He was probably twice her age and married. But then, as Leroy always pointed out, he was hardly an expert on understanding what made relationships work.

He looked back at the online chatroom to see if Doc_Doom had finished his search. A string of messages awaited him.

Doc_Doom:
Got it. It’s an exploit based on Java applet same-origin policy being bypassed via a HTTP redirect. You heard of it?

Doc_Doom:
Fingal, you there?

Doc_Doom:
Earth calling Fingal . . . 

Just as Brody was about to type a response another entry appeared. 

Doc_Doom:
Fine, I’m off.

Fingal:
I’m back. Sorry about that. Pizza delivery just arrived.

Doc_Doom:
Ah, the food staple of champion hackers. Pepperoni and mozzarella? Or do you Brits not do pizza like we do here?

Fingal:
Told you before, mate. I’m Australian. Which means shrimp and bbq sauce toppings.

Doc_Doom:
Not buying it Fingal. But don’t worry, I understand your need for stealth. I’m the same really. But wouldn’t it be great to actually meet in person one day and actually talk to each other, f2f, over a Bud or something. No typing. Online is great, don’t get me wrong, but . . . 

Brody had had a similar conversation with Doc_Doom a month ago. He’d been taken aback at his suggestion then. After two years of building their friendship online — knocking around hacking challenges like this one, amiably debating whether the Empire from
Star Wars
could kick the Federation from
Star Trek’s
ass, whether Marvel’s superheroes were more rounded characters than DC’s, or exploring how limiting it would have been in the eighties to write assembler programs on the old eight-bit chipsets used by Sinclair and Commodore — Doc_Doom had proposed meeting up in person. 

Brody had briefly been tempted. Their online friendship was great. They shared opinions on many subjects. They convivially disagreed on others, each defending his corner with deep personal knowledge or rapid searches on the Internet to unearth facts and examples to bolster his viewpoint. It had become a real friendship and Brody was confident it would survive the transfer from the online to the offline world. 

And he was tempted again now. 

Instinctively, Brody looked up at the framed poster of Vorovskoy Mir’s most wanted list and his gaze fell on his own online name, Fingal, listed under the third silhouette. 

Fingal:
You know my policy, Doc. It’s just too dangerous to mix physical and virtual. 

Doc_Doom:
I understand. One day maybe, eh? Anyway, what about that new exploit? Any use?

Brody hadn’t heard of anyone using HTTP redirect to bypass Java’s same-origin policy. He quickly searched on the phrase and found more details of the hack, first published only two weeks ago. It was quite an interesting approach. Yes, it might work. Excited, he dropped over to Oracle’s website, the vendor of Java, and linked through to the pages listing their latest versions. The most current patch for Java was released just four days before. Shit, they might have plugged it. He searched through the accompanying release notes for details of what had been fixed and, sure enough, there it was. 

The hole was blocked. 

But, if he was lucky, there was still one chance. If Crooner42 hadn’t installed this newly patched version of Java onto the SWY site, he could still use the exploit. After all, the patch had only been released four days ago. He ran one of his utilities against the web server to identify the version of Java.

Damn. It was at the latest patch level. The hole was plugged. Deflated, Brody replied to Doc_Doom.

Fingal:
Thanks Doc. But Crooner’s already blocked it.

Doc_Doom:
Jesus, that was fast. Very fast. He’s better than I thought.

Fingal:
Tell me about it.

Doc_Doom:
Have you tried session hijacking?

Fingal:
I can’t, he’s got server side session id tracking enabled.

Doc_Doom:
Dictionary attack?

They carried on for another half-an-hour, back and forth, throwing ideas out for consideration, and quickly knocking them down. Brody felt even more disheartened. He hadn’t really expected Doc_Doom to come up with anything, but going through everything like this had reconfirmed his predicament.

Doc_Doom:
Jesus, this site’s more secure than Fort Knox. Who the hell is this guy?

Fingal:
You’d know better than me. 

Doc_Doom:
What’s that supposed to mean?

Fingal:
Just that you seem to get on better with the other forum members.

Doc_Doom:
Better than you, you mean? Yeah, well that’s because I’m less of a threat to them than you are. 

Fingal:
Don’t be so modest, Doc. Do you know anything about Crooner? I’m thinking if I can identify another website he’s built, maybe it’ll be less secure but some of the configuration will be the same. Which means I could use what I learn there to aid in cracking SWY.

Doc_Doom:
I like your logic. But all I know about Crooner is what you see on these forums. He’s been around for a couple of years. He’s never been that forthcoming about what he does. As far as I’m aware, this is the only site he’s mentioned. I guess he’s just one of those who mostly stay in the background, mopping up everyone else’s thoughts and ideas. Looks like we all underestimated him.

Fingal:
True enough. 

Doc_Doom:
If it helps, I think he’s British. 

Doc_Doom:
Like you :-)

Fingal:
Okay, let’s have this out once and for all. What makes you say that? About me and him? 

Doc_Doom:
The letters ‘u’ and ‘s’.

Fingal:
?

Doc_Doom:
Color. Flavor. Personalize. Realize. Recognize. 

Fingal:
Ah, because I don’t use Americanised spelling like you do. Maybe it’s a deliberate ploy by me. Or, as I said earlier, maybe it’s because I come from Australia. Or New Zealand. Or any other ex-British colony. 

Doc_Doom:
And then there’s your use of slang. Or your lack of use of Australian slang.

Fingal:
Strewth. And there’s me thinking we were just chewing the fat. Fair dinkum, mate. So you think Crooner’s a Pommie, then?

Fingal:
(That enough Oz-talk for you?)

Doc_Doom:
Okay, okay. I’ll stop over-analyzing. But yes, I think Crooner’s a Brit.

Fingal:
Interesting. But not sure how it helps me.

Doc_Doom:
Would help if you’re a Brit too and you could somehow track him down in meatspace. 

Fingal:
Hmmm. 

Brody bristled at Doc_Doom’s shrewd analysis of his spelling and slang usage. He made a mental note to better disguise himself going forward, especially on the more public forums on CrackerHack. He’d google a list of obscure Australian slang terms and occasionally insert them into his future posts. 

As for Crooner42 also being British, that was interesting, but unlikely to be of any use. The technical ability he exhibited in securing SWY meant he was most likely every bit as good as Brody in protecting his real world identity. Which meant tracking him down in meatspace — real life — would be next to impossible. And supposing he did, what could Brody actually do? Threaten him? That would only work if he turned out to be a meek teenage kid. And even then Brody wasn’t confident. He had no training or experience in any form of physical combat. He certainly had no idea how to physically coerce anyone against his or her will. 

No, he just needed to keep going as he was. 

Or admit defeat.

Or wait for Matt_The_Hatter to announce he’d got root first, and face the inevitable fallout. The public humiliation. The wrecking of his hard-earned elite status.

No. He needed to keep going. Surely there must be a way?

Of course there was. He needed to come up with a new zero-day exploit, something he hadn’t done in well over two years. He needed to identify a brand new vulnerability that no one had ever come up with before and use it to crack through the site’s defences. 

The only problem was that it was incredibly difficult to do. Unless you fluked it, creating a zero-day exploit was incredibly time-consuming. It involved
fuzzing
— an inconsistent technique whereby he inserted random data into memory, attempting to force an application to crash, from which he could then analyse the results to see if there was a flaw he could exploit by substituting his own commands — but it was completely hit and miss. Usually miss. With no guarantee of success at all. And usually days or weeks of work.

And all the while, Matt_The_Hatter could break through.

But what choice did he have?

Brody stared at the seven feeds on the huge TV screen. Hilary Saxton lay in bed, reading. Izzy Saxton slept in her cot. Audri the au pair was still out with Derek the cheating husband. Life in Middle England carried on as normal.

Middle England?

England?

He had a thought.

He was approaching this from the wrong direction. Perhaps there was another way after all. He just needed to stop thinking like a typical computer hacker.

* * *

Jenny fought to overcome the overwhelming desire to run. To hide. Her eyes darted from left to right as she searched for exits. There were none. She scanned the room for something defend herself with. Nothing obvious. She’d been trained for this, she told herself. Trained to run towards danger not away from it. To attack not fly.

Attack. That was it.

Jenny pushed herself up from the bed. 

Everything seemed to happen in slow motion.

The knife protruding past the door became a hand holding a knife. The door continued to swing open. She rushed for the door, slamming her full body weight onto it. The door slammed against the wrist. The knife clattered to the bedroom floor. A bread knife. 

“Argh!” a female voice screamed. 

Then the door was shoved back into Jenny’s face, knocking her backwards. She fell to the floor. The hand withdrew. Landing on her bum, Jenny kicked the door with both her feet. It banged shut. A clattering noise from the other side.

“Police!” she shouted, realising she should have done that earlier.

Jenny climbed back to her feet and readied herself to open the door. She kicked the knife under the bed, counted to three and threw the door open.

Crumpled in a heap in the hallway and cradling her wrist was Kim Chang. Crying.

Jenny felt helpless. And stupid. “I’m so sorry, Kim!” She knelt down beside her. “Are you alright?”

Between gulps of air, Kim said, “I thought it was Anna. I came home, opened the front door, heard the music and I thought it was Anna.” She stared helplessly into Jenny’s eyes, tears falling freely. “And then I remembered what had happened to her . . . I grabbed a knife. I thought you were her . . . her killer.”

Jenny wrapped her arms around the girl. Kim leaned into her chest and sobbed.

“I’m so sorry, Kim. I thought maybe . . .” she didn’t finish her sentence. She had been going to say that she thought Kim was Anna’s killer also. “How’s your arm?” she asked instead.

She held it up, wiggled her hand around and winced. A red mark had appeared. It would bruise. “I don’t think anything’s broken.” She sniffed.

“That’s good.” 

Kim made to stand up. Jenny stood first and helped her up.

The Disney plaque with Anna’s name on it lay on the floor. Kim picked it up with her good hand. From within the room, symbols crashed and drums banged. The music had reached a crescendo. Jenny re-entered the room and lifted the arm of the record player. 

Silence descended.

“Anna bought these for us all,” pronounced Kim, leaning on the doorframe and examining the plaque in her hands. “She gave them all out as presents last Christmas. It was a bit of a joke. Joanne got Cinderella because she never stays out after midnight. Polly got Sleeping Beauty because she’s always lying in. Denise was given the one from
The Princess and the Frog
because she’s always cooking something. Apparently, that’s the plot in the movie. I’ve no idea; I’ve not seen it. Have you?”

Jenny shook her head, happy to allow Kim to chatter freely. She perched herself on the chair by the desk.

“She said she was originally going to give me Mulan seeing as she’s Chinese, but then she gave me Belle instead. She said it was because we both always have our heads in books, but I know it was really a dig at Patrick. You know, Beauty and the
Beast
.”

“How did Patrick react?”

“He thinks the whole thing is stupid and childish.”

“And she gave herself Jasmine from
Aladdin
?”

“Yeah. She said it was the only one left. Patrick said it was because she wears loads of see through clothes and acts like she lives in a harem.”