How a 75-Cent Error Uncovered a KGB Espionage Operation

In 1986, Clifford Stoll was asked to investigate an accounting issue at Lawrence Berkeley Laboratory (a major lab in the USA) because a minor discrepancy had been found: 75 cents of computer usage were unaccounted for.

75 cents. That was it. Less than a single dollar. Stoll could have easily dismissed it as a rounding error, marked the task as closed, and called it a day.

But it turns out that Mr. Stoll wasn’t the kind of guy who “calls it a day” without knowing exactly what’s going on.

He actually investigated the discrepancy in detail and ended up in a huge rabbit hole which went on for over a year. The investigation eventually led him to a German hacker whose activities were part of an espionage operation supplying stolen information to the Soviet KGB.

Stoll uncovered a major espionage operation just because he refused to ignore the missing 75 cents, and because of it, his work became a landmark in the history of cybersecurity.

Rabbit holes can sometimes lead us to amazing discoveries, and if you have the luck to find yourself in one related to cybersecurity, I would recommend that you get into it as much as you can and learn new ways to protect yourself and your projects.

I recently found myself in such a rabbit hole, and while it was way less heroic than the one from Clifford Stoll, it was deeply interesting and helpful for my own security.

The trigger was a worrying issue: I learned that AI agents have full access to .env files and can freely read your app secrets, including database URLs and API keys.

If someone steals those secrets from your AI chat transcripts, they can run up your costs or steal your data. I felt the urge to resolve this quickly.

So I learned how to secure the secrets, but doing so also led me to address other smaller—but important—vulnerabilities.

I describe them in more detail in the following article: 9 Cybersecurity Habits That All Builders Should Have. Most of them are basic measures that can be taken in a few minutes but are powerful enough to prevent a catastrophe in the future.

Keeping ourselves secure in the world of AI will likely become one of the main skills to develop in the years to come.

If you ever feel curious about a vulnerability that may be affecting you—or a small anomaly like Stoll’s 75 cents—follow that curiosity. A little more knowledge about the cybersecurity world can be invaluable in the times we live in.