// Comparison

Kingpin vs Permanent Record: Which Should You Read?

Two cybersecurity books on Narrative, compared honestly: who each is for, what each does best, and which to read first.

Beginner

5/52011

How One Hacker Took Over the Billion-Dollar Cybercrime Underground

Kevin Poulsen

Kevin Poulsen's reconstruction of Max Butler's career — from white-hat consultant to running CardersMarket, the carding forum that consolidated the early-2000s underground — and the FBI investigation that finally took him down.

Beginner

4/52019

Permanent Record

Edward Snowden

Edward Snowden's first-person memoir: the technical work that led him into the NSA's mass-surveillance programs, his reasoning for disclosure, and the Hong Kong handoff to the journalists who broke the story.

Read this if

Anyone interested in cybercrime as an economy rather than as a series of incidents. Poulsen, himself a former hacker turned journalist, has both the access and the technical fluency to make the carding-economy mechanics legible.

Anyone who wants the inside view of the 2013 NSA disclosures from the source rather than the press coverage. Also a useful read for engineers thinking about institutional ethics — Snowden's argument is technical and procedural, not abstract.

Skip this if

Readers wanting current ransomware-economy detail; the book is 2011 and pre-dates the modern affiliate / RaaS structure. The mechanics generalize, the actors don't.

Readers wanting an unvarnished, multi-perspective account of the disclosures; this is Snowden's narrative on his terms. Pair with Glenn Greenwald's No Place to Hide and Bart Gellman's Dark Mirror for the journalism-side counterweight.

Key takeaways

Cybercrime markets are markets — they have liquidity, reputation, dispute resolution, and trust topology, and they fail in market-like ways.
Most underground takedowns are won by HUMINT and OSINT inside the forums, not by exploitation; Butler's downfall was social.
The book's pacing makes the carding economy legible without flattening the moral complexity of its inhabitants.

The technical case for the disclosures is sharper than the political coverage ever made it: Snowden walks through the specific architectures and capabilities that violated his oath.
The personal-cost chapters are the underrated half of the book; whistleblowing is structurally discouraged because the pipeline is set up to make life miserable for the person who goes through it.
Operational privacy is illustrated, not preached — the book is itself an artifact of careful OPSEC, and that lesson is worth more than any single chapter.

How they compare

We rate Kingpin higher (5/5 against 4/5 for Permanent Record). For most readers, that means Kingpin is the primary pick and Permanent Record is a useful follow-up.

Both books target beginner-level readers, so the choice is about topic, not difficulty.

Kingpin and Permanent Record both cover Narrative, so reading them in sequence reinforces the same material from different angles.

Keep reading

Kingpin

→ Alternatives to Kingpin → What to read after Kingpin