Slashdot Mirror


US Busts Military Network Hacker

yorgasor writes " KATU has an article announcing the case of a mysterious hacker who has broken into roughly 100 military networks has been solved. The hacker is a British citizen and authorities were considering extradition for the case. Although no networks containing classified information were compromised, they do consider the hacker to be a professional rather than recreational due to the large number of networks he hacked."

162 of 415 comments (clear)

  1. zerg by Lord+Omlette · · Score: 5, Funny

    Huh? Something must have been left out of the blurb. If I wank 100 times a day to porn, does that mean I'm a professional wanker?

    --
    [o]_O
    1. Re:zerg by Anonymous Coward · · Score: 2, Funny

      Well, if that's what you'd like to be referred to. Then again, after wanking 100 times in a 24 hour period and causing all that stress on your wang, I think it'd be more accurate to say you 'were' a professional wanker.

    2. Re:zerg by pyrote · · Score: 5, Funny

      and you said it was the keyboard that gave you Carpal Tunnel.

      --
      THE WORLD IS GOING TO END!!!! eventually.
    3. Re:zerg by Anonymous Coward · · Score: 2, Funny

      That's not what's on his hands.

  2. What did he exactly get into? by vasqzr · · Score: 2


    couldn't have been anything THAT serious

    Any military insiders/Brit HaX0rs care to describe some US Military systems?

    1. Re:What did he exactly get into? by Anonymous Coward · · Score: 3, Interesting

      They're a bunch of computers connected together with "cat-5" cable. We run high tech programs like "MS Outlook" and "Microsoft Office" coordinated by a really fucking slow "Exchange Server." Pretty trippy huh?

      Tracer
      USMC
      Not Commanding

    2. Re:What did he exactly get into? by steve-san · · Score: 3, Interesting

      You're right. It couldn't have been anything "THAT" serious.
      Want to know why? Do a google search on SIPRNET.
      There's a nice, safe air-gap between your local Internet connection and anything "THAT" serious on military networks.

      --
      What you want is irrelevant; what you've chosen is at hand! - Spock, ST VI
    3. Re:What did he exactly get into? by EngMedic · · Score: 2, Interesting

      There's a nice, safe air-gap between your local Internet connection and anything "THAT" serious on military networks.
      yeah, until some yahoo with clearance takes his personal laptop and plugs it into SIPRNET. And yes, it has happened. I think Bruce Schneier mentioned dumb stuff like this in a cryptopane issue...

      --
      filter: +3. Hey, look! all the trolls went away!
    4. Re:What did he exactly get into? by Anonymous Coward · · Score: 2, Interesting

      It's a pretty MS-centric environment, at least from the user end. Outlook, MS Word, IE, etc, etc. Somebody already mentioned Exchange.

      However, there are some non-MS systems in use, including some unix variants. Geeks are geeks, military or not... they need something to play with.

      I'm not a systems guy, just a geek in an allied field. I have not even attempted to look around our network for one main reason: Even looking will get you a visit from the OSI, or some other type of spook... not fun. I would rather not be doing my job in a federal prison complex somewhere.

      I always rap with the systems types when they come around to reimage a system or some other support task. They were NOT supportive when I was discussing the feasibility of running NMAP behind the firewall. Nice guys though...

    5. Re:What did he exactly get into? by jonbrewer · · Score: 4, Interesting

      There's a nice, safe air-gap between your local Internet connection and anything "THAT" serious on military networks.

      Of course there is a safe-air gap, but unless every machine allowed to connect to those networks is physically locked down, every IO port disabled, and every removable media drive locked with a physical device, you're going to have people downloading sensitive material and moving it on to unsecured networks.

      Granted it's been a few years, but I have seen young underpaid geeks walk up to such systems wearing paper badges with "NO CLEARANCE" stamped in red ink on them, and proceed to insert floppy disks into said systems in order to defragment drives or install drivers.

      A chain is only as strong as its weakest link.

    6. Re:What did he exactly get into? by Zarf · · Score: 4, Interesting

      And I've seen sysadmins with twelve years experience on "classified" systems accidentally break their security systems... or deliberately break their systems... for the sake of convenience.

      It makes me sick.

      --
      [signature]
    7. Re:What did he exactly get into? by Minna+Kirai · · Score: 2

      Fine if they're inserting the floppy disks. Just as long as the guard at the door doesn't let him take it away. (Course, according to the badge you mentioned, he shouldn't have been let in at all... badly run place)

      If they did things right (some do), all "Classified" work would be done in SCIFs (Secure Computer Information Facility?), which is not only surrounded by a faraday-ish cage, but is also a roach-motel for electronic media: "Discs check in, but they don't check out".

      (Except for every 3 months, when the security guys come around to march the accumulated tainted materials to the incinerator)

    8. Re:What did he exactly get into? by Tet · · Score: 2
      but unless every machine allowed to connect to those networks is physically locked down, every IO port disabled, and every removable media drive locked with a physical device, you're going to have people downloading sensitive material and moving it on to unsecured networks.

      When I worked for the British Ministry of Defense, yes, every machine on sensitive networks had physical access restrictions, none of them came with any form of removable media, and there was an air gap between them and the rest of the world.

      --
      "The invisible and the non-existent look very much alike." -- Delos B. McKown
    9. Re:What did he exactly get into? by troc · · Score: 2

      In a lot of MoD places the hard drives in sensitive machines are removable.... and are locked in a safe overnight.

      Troc

      --
      Troc's dubious podcast and blog: http://www.trocnet.net
  3. 100 penetrations later... by Anonymous Coward · · Score: 3, Insightful

    Wow! It took'em 100 or more tries to notice something was not quite right?

    They probably had to bait and switch to catch him...

    1. Re:100 penetrations later... by Anonymous Coward · · Score: 2, Funny

      That sounds dirty...

    2. Re:100 penetrations later... by the_2nd_coming · · Score: 3, Funny

      100 penitrations!!! wow...the millitary sure is a slut.

      --



      I am the Alpha and the Omega-3
    3. Re:100 penetrations later... by machine+of+god · · Score: 3, Insightful

      More likely they're trying to screw him. Like he got into a box connected to a couple of networks so they count each one against him.

  4. British Hacker ... by SuperDuG · · Score: 3, Interesting
    hehehehe okay ... even though the term hacker was used "incorrectly" I do find it amusing to be phrased in a new feared term of "BRITISH HACKER".

    Obviously a pro, anyone who bats higher than 100 hacks is destined for the pros. Is there sponsorship for this wonderful sport of hacking?

    --
    Ignore the "p2p is theft" trolls, they're just uninformed
    1. Re:British Hacker ... by m4vrick · · Score: 2

      anyone with British Prefix is a Pro :)

    2. Re:British Hacker ... by Anonymous Coward · · Score: 5, Funny

      Over 100 before he was caught out. That's better than the entire England cricket team...

  5. By George by IEforLinux · · Score: 2, Funny

    He must've been looking for the secret blueprints for the prevention of tooth decay...

    1. Re:By George by sql*kitten · · Score: 4, Funny

      He must've been looking for the secret blueprints for the prevention of tooth decay...

      Just be thankful that the geniuses at MIT invented the elasticated waist and made America safe for Truth, Justice and the Chicken Parm Sub.

  6. That guy kicked the military's a$$ by dirvish · · Score: 5, Insightful

    I know the military is a big target and all but 1 GUY, 100 NETWORKS? Those military network security folks must be pretty lame. Seems like the could have tracked him down a lot sooner if they knew what they were doing.

    1. Re:That guy kicked the military's a$$ by jsse · · Score: 3, Interesting

      One might not imagine how loosy office networks are, no matter what kind of department behind it. Policies usually restrict the transfer of confidential data from restricted area to office environment. However, no security policies can safeguard confidential data from human stupidity. :)

      I'm pretty sure this guy has gathered a lot confidential information(aka profitable) this way. :)

    2. Re:That guy kicked the military's a$$ by Anonymous Coward · · Score: 4, Interesting

      Well, jokes about "Military Intelligence" aside, there's also the possilility that they took that long to gather enough evidence to create an airtight, "slam-dunk" case.

      I work for a company that's cooperating with the FBI in a particular financial investigation. They know exactly who the bad guy is: name, address, MO, everything. They've known for a while, they're just waiting to gather more evidence, and are probably hoping the bad guy will lead them to more bad guys...

      Keep in mind also the potential difficulty of getting foreign ISPs and LE agencies to cooperate. Even if they're willing, that kind of organization is *very* difficult, when there aren't pre-existing lines of communication, procedures, etc.

    3. Re:That guy kicked the military's a$$ by jared9900 · · Score: 3, Insightful

      Also, you should consider that they don't mention how long he'd been attacking the networks. He could've done it slowly over a longer period of time. Many of the break-ins may've only been connected to him after they noticed a pattern somewhere down the line.

    4. Re:That guy kicked the military's a$$ by zmooc · · Score: 4, Insightful

      NAT cripples TCP/IP-functionality and was only invented to work around the lack of IP-addresses. It is not meant as a security-measurement and does not really add much security over a decent firewall. There's nothing wrong with this approach though it happens to be less safe when there is not decent firewall (which should be there).

      --
      0x or or snor perron?!
    5. Re:That guy kicked the military's a$$ by YrWrstNtmr · · Score: 4, Interesting

      FYI, the base networks are about as secure as the average company's network (in other words, not very).

      Actually, no, they are probably more secure. The average military base takes hundreds, thousands of unauthorized hits every day, simply for being what they are. A fat juicy target. Far more than the average corporate network.

      .mil sites are the Holy Grail of crackers/hackers. Far more street cred if you can gain entrance to whatever.mil, rather than JoesFlowerShop.com.

      My last base, Langley AFB, was a HUGE target. ACC headquarters, and also a bit of name confusion (people were thinking CIA HQ in Langley, VA). We had a special team set up, whose only function was to ward off intrusion attempts, and DoS attacks. For a couple of week stretch once, we were getting 10's of thousands of spurious emails per day. I believe someone got busted behind that too.

    6. Re:That guy kicked the military's a$$ by SacredNaCl · · Score: 2

      We had a special team set up, whose only function was to ward off intrusion attempts, and DoS attacks. For a couple of week stretch once, we were getting 10's of thousands of spurious emails per day. I believe someone got busted behind that too.

      Did they have titles like: Enlarge your penis 811%? Horny College Sluts Waiting For You? Lowest Mortgage Rates Ever!

      I want that guy busted too.

      --
      Freedom is merely privilege extended unless enjoyed by one and all.
    7. Re:That guy kicked the military's a$$ by slamb · · Score: 3, Insightful
      NAT cripples TCP/IP-functionality and was only invented to work around the lack of IP-addresses. It is not meant as a security-measurement and does not really add much security over a decent firewall.

      True, but as a practical matter, I'd say that NAT has improved security in general. NAT requires a connection-tracking firewall to work. So it means many people have them who wouldn't otherwise. And it enforces a specific good practice in setting up the firewall: no incoming connections to any of the internal hosts unless you explicitly configure them. Nothing people couldn't get otherwise, but something they probably wouldn't get otherwise.

      There is one thing it adds over a properly-configured firewall: hiding information about how many computers you have, which one opened a connection, etc. You might or might not consider that information sensitive.

  7. Professional Hacker? by ejunek · · Score: 5, Funny

    Does that come with a 401k plan and a good dental plan? It still probably has a better retirement plan than Enron :P

    1. Re:Professional Hacker? by mr_z_beeblebrox · · Score: 5, Funny

      Does that come with a 401k plan and a good dental plan? It still probably has a better retirement plan than Enron :P

      Best 401K around, you invest all the 'half cents' that are left over from other transactions.

  8. 100 Sites? by dubious9 · · Score: 5, Insightful

    He must have been pretty damn good to evade capture and continue to crack 100 sites. Makes me wonder home they caught him. If you are a professional and can break into 100 US military sites, what's to stop you? I figure if you are good enough to crack 10 or twenty without messing up, they are probably not going to catch you.

    Anybody have any good stories of catching elusive hackers, or insights into how they might have got him?

    --
    Why, o why must the sky fall when I've learned to fly?
    1. Re:100 Sites? by nich37ways · · Score: 2, Informative
      The more you hack/crack?? into a set of networks more and more information will be stored about how you did it, presumably.
      Thus it should be easier to figure out where you are from after 100 than it is with 1.

      This is also true with reality attacks.
      eg. For recent news the Washington Sniper as he shot at more and more people more and more information can be gathered making it easier and easier to figure out who he is.

      --
      37 - what does it stand for really...
    2. Re:100 Sites? by Minna+Kirai · · Score: 5, Insightful

      Yeah, and that shows he wasn't a professional, but someone out for fun. A professional cracker would've gotten his data, got out, and collected his paycheck.

      Same with the snipers- the police can hardly claim to have beaten them. (the number of bodies they left behind made it a phyrric victory at best). A professional assasin would've killed his target, got out, and collected his paycheck.

      So far we can barely defend ourselves from recreation "hackers" and gunmen. If some real terrorist group starts funding some, it will be much much worse.

    3. Re:100 Sites? by nlinecomputers · · Score: 4, Interesting

      100 sites seems a bit much to me. I wonder if they let him work for some time before moving in just so they could judge how good he was or perhaps who else he was connected to. Sort of a military honey pot.

      NO! NO! don't mod me! I'm too young to die a troll. {click} Oh the pain, the pain...

      --
      Slashdot, home of supporters of free software, free music, and free speech.Except for Moderators that disagree with you.
    4. Re:100 Sites? by Anonymous Coward · · Score: 5, Informative

      > Anybody have any good stories of catching elusive hackers, or insights into how they might have got him?

      The Cuckoo's Egg by Clifford Stoll is an engaging story of a grad student assigned to track down a 75 cent discrepency in computing resources. He eventually uncovers a ring of crackers working out of Germany for the KGB.

      Read a review .

    5. Re:100 Sites? by scotch · · Score: 3, Funny
      He must have been pretty damn good to evade capture and continue to crack 100 sites.

      Actually, he cracked one site consisting of a 100 node beowolf cluster. Imagine ... his surprise when he got caught.

      This post broght to you by the laws of physics.

      --
      XML causes global warming.
    6. Re:100 Sites? by ArmedGeek · · Score: 5, Interesting
      This is the problem with the criminal mentality (unfortunatley it sometimes affects us geeks as well). I have worked in law-enforcement in the past and there is something that people who break the law really should understand.
      Just because they haven't come for you, doesn't mean they don't know.
      Generally, law enforcement (usually with organized crime or the white-collar variety) will track a suspect for a while, gathering evidence. You'd be amazed at the truckload of intelligence data amassed during a large narcotics investigation. (I never worked computer crimes).

      The point is, why bust the guy after the first "penetration" so he gets probation? If you feel he's a threat, then you wait, let him continue to add to the charges, then pop him and put him away for a long stretch. They probably "had him" long before they busted him.

      note: anyone cracking US government networks, either has an agenda or is incredibly self-destructive.

      --
      Work is punishment for failing to procrastinate effectively.
    7. Re:100 Sites? by Zarf · · Score: 2

      If you are a professional and can break into 100 US military sites, what's to stop you?

      The key here is that he broke into "unclassified" sites. These sites can often be adminstrated by people who are just learning how to use a computer. Well, I currently work at an unclassified site and it sure feels that way around here. Unclassified sites often will not even have a properly functioning firewall.

      It sounds much more impressive than the actual task really would have been. The real trick is to learn about the sites. My site (for instance) doesn't even really think about computer related security... there's nothing here anyone would want anyhow.

      Now the trick is, you break into a horde of "unclassified" sites and hope you caught one that is going to go "classified" then you have a backdoor into a classified network. But, even this wouldn't get you anything truly juicy.

      The really good stuff is kept on an isolated network and even the cat 5 wires have to be kept a minimum of six inches from any other electronic devices not on that network. So, if you want the real stuff you have to cross an "air-gap" and I don't know of any networking protocol that can do that.

      --
      [signature]
    8. Re:100 Sites? by Anonymous+Custard · · Score: 2

      The really good stuff is kept on an isolated network and even the cat 5 wires have to be kept a minimum of six inches from any other electronic devices not on that network. So, if you want the real stuff you have to cross an "air-gap" and I don't know of any networking protocol that can do that.

      802.11a/b? Of course, that would take significant carelessness on the part of the classified network's administrator.

    9. Re:100 Sites? by kiwimate · · Score: 3, Insightful

      A professional assasin would've killed his target, got out, and collected his paycheck.

      Yes and no. Mostly yes -- a professional assassin is typically hired to kill a specific target. A true mercenary does the job purely for financial gain, not for ideological purposes, and so the motivation to escape is obviously high.

      But what if your aim is to instill fear? Suicide bombers don't care about getting out; they want to take as many with them as possible. Similarly, I wouldn't be surprised if we discover the motivation for the snipers was to instill as much fear as possible in the American population. To that end, it was a big success -- no apparent link between the targets, which meant anyone could be next, and they just kept on going day after day with no-one having a clue who they were.

      So, the lesson is that, while professional is usually taken to mean that one gets paid for the task, that's not the only definition. It can refer to someone who performs a task to high standards and with a certain degree of expertise (look it up on Merriam-Webster).

      (Oh, and it's Pyrrhic, not phyrric. Even without the correct spelling, it still refers to Pyrrhus, so you should at least capitalize it as a proper noun. Classical education ain't what it were.)

    10. Re:100 Sites? by AndroidCat · · Score: 2
      Anybody have any good stories of catching elusive hackers, or insights into how they might have got him?

      Slashing back in time...

      Hack the Army, Brag About it, Get Raided
      A Spammer's Luck Runs Out When She Forges The Wrong Domain from SEC Institutes Proceedings Against Rodona Garst

      I'm sure that there are plenty other stories out there about elusive "hackers" and catching them.

      --
      One line blog. I hear that they're called Twitters now.
    11. Re:100 Sites? by AndroidCat · · Score: 2

      And covering the legal/social end of things: The Hacker Crackdown or The Hacker Crackdown Read a good book for free. (I bought the hardcover.)

      --
      One line blog. I hear that they're called Twitters now.
    12. Re:100 Sites? by kevlar · · Score: 2

      However great this guy may seem to appear, he is more than likely a moron, simply because he got caught. The feds like to let a hacker run amuck to see who else he brings into the picture. The mere fact that they KNOW he hacked 100 machines (or networks or whatever) means that he was extremely obvious about it (bragging, nuking machines, etc).

    13. Re:100 Sites? by 2short · · Score: 2, Insightful

      "If I leave my doors unlocked and the key in the car my insurance won't pay out, it's called negligance"
      But if I take your car, it's still called Grand Theft.

      "If they could have stopped the hacker after a few hackes (or attempts) but didn't because they wanted to watch the attacks then that's aiding and abetting"
      No, it's not. Buying him a better computer would be aiding and abetting. Telling him he should try to hack you a bunch more times would be entrapment. Watching and taking notes, even though you could stop him is neither.

    14. Re:100 Sites? by inKubus · · Score: 2

      Cliff Stoll is not a grad student. He's an astronomer. The cuckoo's egg is post cliff stoll grad student days.

      It's good stuff. He's a hippy tracking a hacker and the government won't do anything. So, his sense of duty keeps him going, and eventually he goes to visit the NSA and stuff like that.

      It's tiiiiiiight.

      --
      Cool! Amazing Toys.
    15. Re:100 Sites? by Zarf · · Score: 2

      802.11a/b? Of course, that would take significant carelessness on the part of the classified network's administrator.

      Good point. I'd forgotten about wireless. But then again we're not even supposed to have cell phones or wireless phones inside the "secure" environment. I say "supposed to" because the boss allows a lot of stuff that we're not "supposed" to do.

      --
      [signature]
  9. This fits here.. by RebelTycoon · · Score: 5, Funny

    All your bases are belong to us...

  10. Extradition by funkdancer · · Score: 3, Interesting

    It will be interesting to see if the US are actually able to extradite a Brit for having commited cyber crimes. Wouldn't the penalties be a fair bit harsher over the pond than in Europe?

    --
    ISO certified == THX certified
    1. Re:Extradition by Rolo+Tomasi · · Score: 2

      This strikes me as extremely odd. I don't think any country would extradite its own citizens to a foreign government. E.g. it's written in the German constitution that German citizens can't be extradited. But then again, the Brits have a weird justice system.

      --
      Did you know you can fertilize your lawn with used motor oil?
    2. Re:Extradition by FeloniousPunk · · Score: 3, Informative

      No, it's only forbidden for (most) European countries to extradite when the accused faces the death penalty.

      --
      I know this because Tyler knows this.
    3. Re:Extradition by Anonymous+Custard · · Score: 2

      it's written in the German constitution that German citizens can't be extradited. But then again, the Brits have a weird justice system.

      Ok... so Germany by law harbors international criminals (if they're german citizens), and you claim Britain's the country with the weird justice system?

    4. Re:Extradition by jeremyp · · Score: 2

      He meant the UK. Lots of people have trouble telling the difference (including many of us English).

      --
      All I want is a secure system where it's easy to do anything I want. Is that too much to ask ~~ Randall Munroe
    5. Re:Extradition by jeremyp · · Score: 2

      I don't know about the EU, but Britain will not extradite anybody for a crime where they'll get the death penalty if found guilty, which is probably why they wouldn't extradite terrorists to the US unless GWB asked Tony nicely (although I don't know what case you are referring to there). Quite a lot of Brits take the view that the death penalty is morally unacceptable.

      For the record the Government offered plenty of support to the plane spotters in Greece for writing down aircraft numbers. Unfortunately, they were arrested in Greece, so extradition didn't come into it and they were up on a charge of spying so if they had got back to the UK, they may have been extradited on the grounds that we expect our citizens to be responsible for their actions when abroad.

      Asylum seekers are another question altogether. People seek asylum here for two reasons a) they think they'll be richer, b) they might get killed if they stay in their own country. We can't send them back until we know that their reason for being here is definitely (a).

      --
      All I want is a secure system where it's easy to do anything I want. Is that too much to ask ~~ Randall Munroe
  11. Re:Why must we persist in... by wadetemp · · Score: 2

    That's how American English functions, dawg. You have to be forceful with incorrect syntax, dank new phrases, and like, just plain wrong usage of words, and eventually you have your own little "who's who" entry in the dictionary (and it's free too, which is totally sweet.)

  12. Is it just me... by alargeduck · · Score: 4, Insightful
    Or is this really dirty:

    Once, the FBI tricked two Russian computer experts, Vasily Gorshkov and Alexey Ivanov, into traveling to the United States so they could be arrested rather than extradited. The Russians were indicted in April 2001 on charges they hacked into dozens of U.S. banks and e-commerce sites, and then demanding money for not publicizing the break-ins.

    FBI agents, posing as potential customers from a mock company called Invita Computer Security, lured the Russians to Seattle and asked the pair for a hacking demonstration, then arrested them. Gorshkov was sentenced to three years in prison; Ivanov has pleaded guilty but hasn't been sentenced.

    Why not just extradite them? The US has a extrdition treaty with Russia I'm sure. Now I'm not saying that arresting them was "wrong", but why resort to deceptive law enforcement tactics like this?

    1. Re:Is it just me... by serps · · Score: 2
      Is it just me... Or is this really dirty: [snip]

      You mean, you don't read slashdot?

      --
      "Einstein argued that [...] God is not capricious or arbitrary. No such faith comforts the software engineer." ~ Brooks
    2. Re:Is it just me... by reallocate · · Score: 2

      Well, one reason to lure them to the States would be a certain lack of confidence in the Russians' ability or willingness to arrest and extradite the pair.

      BTW, luring criminals that way isn't "dirty". As far as I knw, it's fairly common. I've read of local police forces doing something similar to herd together folks who have skipped out on their child support payments.

      --
      -- Slashdot: When Public Access TV Says "No"
    3. Re:Is it just me... by totallygeek · · Score: 3, Insightful
      Why not just extradite them? The US has a extrdition treaty with Russia I'm sure. Now I'm not saying that arresting them was "wrong", but why resort to deceptive law enforcement tactics like this?


      Stings like this are done all the time within our own country. Creating a "new" crime that has a well-documented beginning and arrest becomes a more solid conviction. Proof of activity across the Internet by multiple people at undocumented times leads to reasonable doubt in the minds of jurors.

  13. Punish those responsible... by Minna+Kirai · · Score: 5, Insightful

    Throw some military sysadmins to a court-martial for dereliction of duty!

    Ok, don't be that harsh on them. Scare em a little, then let the go with a warning. But national western militaries cannot continue to run their networks like this. It's dangerously irresponsible.

    For a national military to assume they can use police arrests (force of arms) to secure their networks is folly. Armed force only works against attacks that are perpetrated from inside your range of military dominance. For the US that's a big area, but there's still many places where they can neither call in a SWAT team, nor direct an unmanned plane to assasinate the target.

    If this fellow had been a professional (earning money from these hacks), then he'd be living in a secret compound provided by his employers in Iraq/Korea/China. True, the internet bandwidth isn't that great there, but a good hacker doesn't need it. He can just compromise some broadband PCs in the US or UK (possibly with the help of an agent on scene- a retailer who sells trojaned machines for instance) and use that to leapfrog to the real targets.

    (If this guy was any good, we'll find out that this British suspect was just a patsy)

    One big argument against more stringent computer-crime laws in the US is that they permit businesses and the military to postpone installing real network security. Why bother defending yourself, if the FBI just busts the punks for you?

    This sets us up for disaster in 20 years, when the economy really needs the internet to survive day-to-day, and China has caught up to our 2005-era connectivity levels. If President Bush the 3rd angers China and they set 200 top computer professionals at making mischief, the damage could be real.

    ("Vaccinate now! Free Heckenkamp")

    1. Re:Punish those responsible... by Klaruz · · Score: 5, Insightful

      Court martial military sysadmins? No way. It's not their fault.

      Hear me out here. The people running these systems (from my ex-air force perspective) are between kids out of high school (Airmen) and 20-sometings that have been doing military computer stuff since high school (NCOs). All they know is what the military trained them to do. Guess who decides what to train them in? NCOs and Officers. That's for the military people. There are civilians too, usually retired military. They all have to abide by policies set out by the DOD which are something short sited and not very well thought out. They also leave very little room to impliment no ideas and take care of important problems right away.

      The best and the brightest who can actually secure a system don't go into the military. When they do, they're ignored because they're 'young' and have no 'experience'. I fell in the later catagory. There's nothing like the feeling of fixing somebody else's screw up (usually a contractor) and 30 minutes later be taking out the trash or doing some other degrading duty. Needless to say I got out and now make alot more money with alot less hassle, have a boss who listens to me (mostly), and can actually advance in the company and my career without having to wait X number of years and take a test on things that have nothing to do with my job.

      Anyway, without going off topic. You can't blame these guys, most of them don't have a clue, those with a clue have their hands tied by stupid policies.

      If you want to blame somebody, blame the high ranking Officers, they make the policies and the training programs that made this happen. Of course, that would never happen, some poor Airmen or overworked NCO will get railroaded.

      Oh well, I'm free and clear now. At least I got a jump start on life and some free college out of the deal.

    2. Re:Punish those responsible... by E-Rock · · Score: 2
      Maybe you're misunderstanding what he had access to and what professional means? Supposedly anything really juicy isn't connected to the internet anywhere and professional means he's getting paid, that's it.

      That doesn't mean that there isn't a lot of profitable data on the connected network. My pops works for a company that does about 80% of its business with the military. I'm sure that if the Brit got one of their proposals off a network share, there's a rival firm with a slimy exec out there who'll buy it to undercut the contract.

      That seems a lot more likely than him selling troop movements and materials checklists to the Iraqis. Also seems that they'd be willing to track this activity long enough to make a strong criminal case rather than simply disappear you.

    3. Re:Punish those responsible... by Minna+Kirai · · Score: 2

      I'm being intentionally alarmist here, and assuming the worst. Military planners should do the same, and prepare for the baddest scenario they can imagine. (And of course I don't mean that the zero-tier console-jockeys should be responsible for this. They should kick it up the chain until we finger the general who placed profits & patronage over security)

      If he's looking for competitive info, then Raytheon and Lockheed Martin's corp networks are much softer and juicier. (Of course, for all we know, he's been in them too)

      If he's an enemy, then there's non-classified data that can still be damaging. Especially military personnel records (which are often in the lesser category "sensitive"). Asymmetrical warfare procedure: Check out the make of aircraft bombing you, look up where the pilots get trained, see who's rotated through there, cross reference against health-care records for neo-natal care, and dispatch someone to visit the pilot's wife/kids.

      (There are other ways to get the data, but lets not make it easier than necessary)

    4. Re:Punish those responsible... by lommer · · Score: 4, Insightful

      "(If this guy was any good, we'll find out that this British suspect was just a patsy)"

      No actually, if this guy is any good we won't find out that this Brit is just a facade...

    5. Re:Punish those responsible... by WaKall · · Score: 2, Insightful

      >>(If this guy was any good, we'll find out that this British suspect was just a patsy)

      Actually, if he was VERY good, that would be true but you wouldn't find it out.

    6. Re:Punish those responsible... by mr_z_beeblebrox · · Score: 2

      Throw some military sysadmins to a court-martial for dereliction of duty!
      Great precedent to set, I bet you are not a sys-admin at a site worthy of 'hacker' note.
      If this fellow had been a professional (earning money from these hacks), then he'd be living in a secret compound provided by his employers in Iraq/Korea/China.
      That is true the third world would definitely want to utilize its' native talent, local technology and definitely local bandwidth. There could be no reason for them to recruit an American/European CS student at a 21st century University. Likewise they would be hard pressed to find such a student who needed money. Oops, I forgot to say ... NOT!

    7. Re:Punish those responsible... by nolife · · Score: 2

      There's nothing like the feeling of fixing somebody else's screw up (usually a contractor) and 30 minutes later be taking out the trash or doing some other degrading duty.

      That is the way the military works. One minute you are troubleshooting a nuclear reactor protection system, after that you work for 8 hours doing pre-critical checkoffs and tests, then you are starting up the reactor and bringing temp and pressure up to the normal operating range (one of the most detail oriented things I have ever done in my life). One hour later you are in the machinery spaces with a broom and dustpan cleaning up. There are only so many people that can fit in a submarine, ship or airplane. You can not hire a cleaning crew to support that.

      --
      Bad boys rape our young girls but Violet gives willingly.
    8. Re:Punish those responsible... by PhxBlue · · Score: 4, Informative

      Well-said!

      I'll add--the reason this guy didn't get into any classified information is because the military doesn't store classified information on the NIPRNet, that is, Unclassified but sensitive Internet Protocol Router Network. This NIPRNet is the Internet that DARPA originally developed and that everyone here uses today. Classified information is transmitted only along a SIPRNet, or Secret Internet Protocol Router Network, which is not actually connected to the public Internet.

      Releasing or altering classified information would almost certainly require physical access to one of the computers that's already linked to the military SIPRNet. If the rest of the computers across the military are protected in similar fashion to the ones where I work--behind a foot-thick wall of steel with armed guards stationed at the entrances--I feel pretty good about the security of our classified information networks.

      --
      !#@%*)anks for hanging up the phone, dear.
    9. Re:Punish those responsible... by SEWilco · · Score: 2
      Maybe nobody in the military is guilty.
      If this guy broke in to 100 honeypot systems, with no data and running only an unpatched retail NT system, the attacker did the crimes but nobody in the military did anything wrong.

      ("Free Heckenkamp" -- can I get one free even though I didn't buy anything?)

    10. Re:Punish those responsible... by Minna+Kirai · · Score: 2

      I was abbreviating North Korea, which is a stereotypical "US enemy". And of course the difference in bandwidth across the DMZ is night and day. (The difference in electricification is too)

  14. Kinda OT by teamhasnoi · · Score: 5, Interesting
    When someone can bust into ONE HUNDRED MILITARY SITES and only get caught on the 101st, it makes me really doubt the 'security' of our electronic voting systems which are:

    Closed Source
    Admin'd by a Private Buisiness
    Secured by Microsoft
    Run by volunteers at each polling place.

    Kinda makes you wonder if you really did/will vote, eh?

    If this guy does get extradited to the US, I bet he'll be working for someone in a five-sided building real soon.

    1. Re:Kinda OT by wadetemp · · Score: 5, Funny

      Damn. You're right. I knew I shouldn't have given my ballot to that bearded guy carrying the 80s-era Soviet anti-tank missle launcher.

    2. Re:Kinda OT by ceejayoz · · Score: 5, Insightful

      You can hardly compare the electronic voting systems to military servers. The military servers are connected to the public internet - the best way of securing a computer is to smash its network card into itty bitty pieces.

      The voting machines, on the other hand, aren't connected to the internet - they save the votes onto removable cards (compactflash cards, IIRC) that get taken (under guard) to a location where they're all downloaded and the results determined.

      They're two completely different problems.

    3. Re:Kinda OT by i_am_nitrogen · · Score: 2, Funny
      the best way of securing a computer is to smash its network card into itty bitty pieces.


      Alternatively you could just take it out of the computer.

    4. Re:Kinda OT by Jah-Wren+Ryel · · Score: 2

      You don't know the half of it. Peruse this article in a recent Risks Digest.

      For those who are unaware of the Risks Digest it is not your typical consipiracy theory discussion list - excerpts are regularly published by the ACM. They've had regular coverage of problems with electronic voting systems since before the Gush & Bore debacle, but each new item on the topic seems to be scarier than the last. We potentially have HUGE problems with our electronic voting systems -- if policies are not changed soon we will (if we haven't already) end up with a situation far more serious than watergate ever was.

      --
      When information is power, privacy is freedom.
    5. Re:Kinda OT by silvaran · · Score: 3, Interesting

      Nonetheless, I can't wait to see a bug that causes the voting system to count down and give 4294967295 votes to a single candidate.

    6. Re:Kinda OT by Chriscypher · · Score: 2, Insightful

      Actually, during the last election on 11/5, I recall a news blurb extolling the virtues of electronic voting in Florida. The poll worker brought a touchscreen tablet *out to a car in the parking lot* so that an elderly voter could place her vote. I noticed a floppy wire that looked eerily like an antenna hanging off the side of the box, which immeditatelt said to me "wireless network". So, if wireless networking is in fact being used, I'd say their "secure" voting LANs will get cracked by the next general election, if they haven't been already.

      To be above suspicion, elections require voting metohds are difficult to forge and have ballots can be confirmed after the fact (re-count). Electronic voting places all points of failure in an unexaminable variable in the system software. If done well, compromise of this system would be difficult if not impossible to detect, and there will be nothing to manually re-count: game over.

      How do you *prove* the election was not rigged? Elections must have the appearance of impossibility of being rigged. It is very hard to forge 400,000 ballots with filled in dots (a la standardized tests; they can be both electonically and manually tallied).

      The new voting machines in Florida are a exellent example of technology being more unrilable than simpler/cheaper/proven methods.

      --
      "You have liberated me from thought."
    7. Re:Kinda OT by ceejayoz · · Score: 2

      Hmm, interesting. Looks like the voting booth makers planned for that and had it save a copy of the results on the booth, too.

      Wonder how widespread that kind of thing was, though :-/

    8. Re:Kinda OT by ceejayoz · · Score: 2

      The new voting machines in Florida are a exellent example of technology being more unrilable than simpler/cheaper/proven methods.

      No, the Florida debacle was an excellent example of how the weak point is more often than not the humans.

      Most of the problems with the new touch screens in Florida were due to the polling place workers either not showing up (!) or not knowing how to work the machines (never trained).

      Actually, during the last election on 11/5, I recall a news blurb extolling the virtues of electronic voting in Florida. The poll worker brought a touchscreen tablet *out to a car in the parking lot* so that an elderly voter could place her vote. I noticed a floppy wire that looked eerily like an antenna hanging off the side of the box, which immeditatelt said to me "wireless network".

      Wait... you heard about it on a news blurb, yet you "noticed a floppy wire"? How'd you manage that?

      I smell a rat.

  15. Watch to see their target... by Goonie · · Score: 5, Insightful

    The article was vague. Maybe he made a mistake and gave the investigators something that identified him. Equally likely, maybe the infosec guys decided the payoff for letting him continue hacking for a while (firm up the evidence for a conviction, be able to convict him for more serious offences, and most importantly figure out what his motives and techniques were) was more important than having him arrested immediately.

    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
    1. Re:Watch to see their target... by oliverthered · · Score: 2

      Isn't that aiding and abetting? How can it be a 'crime' if your deliberatly letting someone do it? It's like leaving a pile of gold on your front door step and then screeming blue murder when someone takes it.

      --
      thank God the internet isn't a human right.
    2. Re:Watch to see their target... by mr_z_beeblebrox · · Score: 2, Funny

      The article was vague. Maybe he made a mistake and gave the investigators something that identified him.

      Probably used the oldest trick in the book on him. They added an address field to /etc/passwd so when he added his back door account he put his name and address down. I don't know about you, but that gets me every time.

    3. Re:Watch to see their target... by YrWrstNtmr · · Score: 2

      No, it isn't aiding and abetting. Waiting until you have incrontrovertible proof of who it is, where they are, and what they've been doing is merely prudent investigation.

    4. Re:Watch to see their target... by inKubus · · Score: 2

      The article was vague. Maybe he made a mistake and gave the investigators something that identified him. Equally likely, maybe the infosec guys decided the payoff for letting him continue hacking for a while (firm up the evidence for a conviction, be able to convict him for more serious offences, and most importantly figure out what his motives and techniques were) was more important than having him arrested immediately.


      Maybe, just maybe, he doesn't exist at all.....

      --
      Cool! Amazing Toys.
  16. Dental plan = null&void by Chris_Stankowitz · · Score: 2

    Remeber hackers have an ethics clause built into their "contracts" . Once broken you trade it health plans for orange jumpers and the chance of having your manhood "rooted". I hope he gets a cell big enough to count the days in binary on his wall.

  17. Re:Hacker by Max+the+Merciless · · Score: 2, Funny

    "He is probably a dirty, greasy, long haired linux hippie freak, who smells REALLY bad and hasn't taken a shower or left his parents basement in 5 years"

    Don't you mean "GNU/Linux hippie freak"

    --
    * * Always question "the National Interest" - 9 times out of 10 it is a cover for evil
  18. Re:This is not 'hacking' by njchick · · Score: 2, Funny

    Maybe he was armed by an AK77?

  19. Re:This is not 'hacking' by lpontiac · · Score: 5, Informative
    thats what breaking into the US millitary is, terrorism

    No, it isn't. Terrorism is the use of violence and/or threats to frighten a civilian population, to coerce or punish them.

  20. Re:This is not 'hacking' by teamhasnoi · · Score: 4, Insightful
    If the guy is from Britain, he is considered a hacker. If he were from Iran, he would be considered a terrorist.

    They should just scrap the term hacker and call him a terrorist, because thats what breaking into the US millitary is, terrorism.

    Would breaking into British Military also be terrorism? How about Iraq?

    There is a difference between breaking into a companies network out of curiosity and breaking into a millitary network. At worst, it could be considered an act of war from the country where the hacker originated against the country that was hacked. This would be bad for britain as they are totally dependant on America for support and are controlled by America's millitary policy.

    Britian is dependent on the US? Tony Blair certainly is Bush's Yes Man, but I wouldn't go so far as to say that they are dependent on us, or controlled by our policy.

    100 successful hacks is quite impressive, and it's good to see that America's war on terrorism is paying off and this man was caught before he could have caused serious damage to the western world.

    Yes. The war on terrorism is paying off, just like the war on drugs. We prevented this guy from breaking into *every* military network, just like we've taught kids to 'Just Say No' and quelled the importation of millions of dollars of coke and dope.

    Thank you Geoilrge Bush, and God Bless Amerika!

    Yes, I know, IHBT,IHL,HAND - I just wanted to practice my italics and paragraph tags.

  21. Extradition treaty, nyet by MacAndrew · · Score: 2

    I'd be awfully surprised if there were such a treaty -- here's a reference that there's not There's still a pretty big difference in each's concept of justice, and they were bitter enemies until a few minutes ago.

    There's no problem with deceptive law enforcement so long as it is not entrapment or go so far as to violate the constitution. For many types of crime it is the only practical way to get a collar. It depend son the circumstances. One of my favorites were a bunch of guys who owed child support; the cops had arrest warrants and called them all to tell them they'd won the lottery and all they had to do was claim the prize. It was a slaughter....

    Interestingly, some countries are unwilling to extradite to the U.S., Russia, or other countries that practice capital punishment. This is a background issue re 9/11 prosecutions.

    1. Re:Extradition treaty, nyet by FeloniousPunk · · Score: 2

      Interestingly, some countries are unwilling to extradite to the U.S., Russia, or other countries that practice capital punishment. This is a background issue re 9/11 prosecutions.
      No, this only happens in cases where the person being extradited would actually face the death penalty.

      --
      I know this because Tyler knows this.
    2. Re:Extradition treaty, nyet by MacAndrew · · Score: 2

      Er, yeah, I think that's implied. And it's not "would actually" but "could possibly."

  22. Re:British hate us by shtarker · · Score: 2, Interesting

    Bah you wouldn't have stood a snowflakes chance in hell with out the Russians and you know it.

  23. It's true that.... by MacAndrew · · Score: 2, Interesting

    ...the British have TWICE attacked the United States for no good reason and lost. OK, it's been a few years, but do we KNOW this guy wasn't OSS? The British have been known to carry grudges.

    Seriously, I would not argue that Britain is totally dependent on the U.S., and certainly not control by our military policy (they can defend themselves against, um, the French?). It just looks that way because they're the only ones (the gov't anyway) who agree with the U.S. half the time on international issues.

  24. Re:This is not 'hacking' by Anonymous Coward · · Score: 2, Funny

    Merriam-Webster says "the systematic use of terror especially as a means of coercion". I'm surprised the US gov't hasn't forced all dictionaries to broaden the definition.

  25. Re:This is not 'hacking' by njchick · · Score: 5, Funny

    So, a guy from Iran who breaks into just one military computer is a recreational terrorist, right?

  26. At least quote it right! by Scaebor · · Score: 2, Insightful

    "All your base are belong to us". Please, when posting shitty jokes, at least post them correctly.

    --
    "Hey brother Christian with your high and mighty errand / your actions speak so loud I can't hear a word you're saying"
  27. Re:This is not 'hacking' by porn*! · · Score: 3, Interesting

    They should just scrap the term hacker and call him a terrorist, because thats what breaking into the US millitary is, terrorism.

    Wow, that's a pretty extreme definition of terrorism.

    There is a difference between breaking into a companies network out of curiosity and breaking into a millitary network.

    hmmm... Are you saying that morality can be judged as a function of whether or not a particular act is committed against the state or a private company? I agree that if info. had been stolen that it would be a very bad thing, but since nothing broken into was classified ??? I'm not sure we know that he did anything other than make some web/sys admins look bad.

    I can tell you right now I would not be amused if someone hacked into my systems because they were curious. I wouldn't take any legal action unless someone actually took intellectual property, but I'd probably 'hack' my sysadmin a new one!

    All of that being said, I say hang him upside-down for 20 years and then turn him rightside-up for another 20.

    porn*! - hanging upside-down for almost 20 minutes now!

  28. Re:Why must we persist in... by Capsaicin · · Score: 2, Insightful
    Why must we persist in calling crackers hackers?

    Give it up. This one has been lost, just like split inifinitives or latin plurals. Why must we persist in calling fora forums?

    Guess you just have to accept that the word 'hacker' now has more than one meaning, it happens to words sometimes. One of them is a synonym of 'cracker,' the other(s) is(are) something quite else.

    --
    Better to be despised for too anxious apprehensions, than ruined by too confident a security. --Edmund Burke
  29. Just a matter of time before by Cheese+Cracker · · Score: 2

    Tsutomu Shimomura takes the credit and turns it into a book and a movie... just to make some extra cash.

  30. hmmm. by _ph1ux_ · · Score: 5, Interesting

    military cyber-guards.

    I was watching this discovery channel documentary and there was this military type, jar-head cyber guard guy. He was standing there talking about how they monitor all the traffic on their networks, and keep a close eye out for any signatures of attack.

    He was stressing how secret they keep all their information about their networks - that they dont let anyone know even their IP sets assigned to different networks, and that this information could help an attacker find out the machines they would need to attack.

    The whole time he was talking about this - he was standing in front of a bunch of monitors, and the ones to the left of him was scrolling some sort of log and it was showing IPs to hostname mappings and some traceroutes as well. They were all in the really low IPs - and their hostnames were all .mil and *all* of it was easily readable by the viewer....

    and i do not think it was something that was done on purpose and made to look like an accident. Not by the way these people were acting.

    especially since they avoided filming any of the screens that people were working on.

    So I am not too surprised.

    1. Re:hmmm. by Ektanoor · · Score: 2, Interesting

      "military cyber-guards"

      Brrr. Hope the US Congress will be a bit cold-head before giving military the power to roam the net. Military are usually too crazy and too paranoid. Besides they are not usually bound to rules and laws the same way enforcement and intelligence agencies are. They are warmakers, and in war, most rules and laws are usually pieces of paper and voices in the wind. They are the dreamers of the maxima that "the only rule in war is that there are no rules". Right, there is the Geneva Convention, all those doctrines and instructions, there is still the fact that they have to bound to the civil state. However, in real wars, and I have seen a very real one, all that gets quite foggy.

      Btw, yesterday a program in Russian TV was criticizing Pentagon for its stance on Iraq. One of the criticisms was well remarked there:

      "While CIA still has its header in its shoulders and tries to see the real situation, Pentagon military try to take for granted what they wish to see and how they wish too see. Worse, they try that the Congress and general public only see what they wish.

      Frankly, in this statement there is something that applies to many military in the world. In most cases they see things as they wish to see. If someone walks near the border, he's probably a spy. If someone makes too harsh statements, he's an enemy to be crushed down without pitty. If someone shoots into your territory, then there's a whole division behind and it's time to move our forces into enemy territory before they do it on us. And all this should be accepted by everyone. Or else you're a traitor, a summy commy, a terrorist and you should also be crushed.

      Leave security to FBI, CIA and NSA. While they are not saints, they still are the professionals who know the field and the limits. Military have no breaks in their heads and may fire a war much faster than anyone else, as that's their main profession...

  31. "professional" by g4dget · · Score: 5, Insightful
    they do consider the hacker to be a professional rather than recreational due to the large number of networks he hacked.

    Sleeping with a lot of men/women makes someone a slut; it requires getting paid for it to be considered a professional.

    1. Re:"professional" by infiniti99 · · Score: 3, Insightful

      Not necessarily. I visited Merriam-Webster to check on this, and "receiving financial return" is just one of the many definitions of a professional.

      I believe there was a related debate on a recent Slashdot poll involving programming, where two of the options were "Professional" and "Open Source". This was a poor choice of words, since the two are not mutually exclusive.

  32. Re:This is not 'hacking' by Twirlip+of+the+Mists · · Score: 5, Insightful

    They should just scrap the term hacker and call him a terrorist, because thats what breaking into the US millitary is, terrorism.

    The term "terrorist" has certainly been overused in the past year or so, but what many people don't realize is that it actually has a strict legal definition. (Well, actually several strict legal definitions, depending on the jurisdiction you're paying attention to at the time.)

    Way back in 1937, the League of Nations defined terrorism as, "All criminal acts directed against a State and intended or calculated to create a state of terror in the minds of particular persons or a group of persons or the general public." So under that definition, an act is terrorism only if it's specifically intended to create a state of terror. September 11, yes. This guy, no.

    In 1999, the UN defined terrorism this way: "Reiterates that criminal acts intended or calculated to provoke a state of terror in the general public, a group of persons or particular persons for political purposes are in any circumstance unjustifiable, whatever the considerations of a political, philosophical, ideological, racial, ethnic, religious or other nature that may be invoked to justify them." So here to we have the idea that the act must be specifically intended to invoke a feeling of terror. So by that definition, too, this incident is not terrorism.

    The USDOD defines terrorism to be, "The calculated use of violence or the threat of violence to inculcate fear; intended to coerce or to intimidate governments or societies in the pursuit of goals that are generally political, religious, or ideological." Once again we have the idea that the act must be calculated to cause fear. If an act merely incidentally causes fear or terror, it's not strictly terrorism.

    Since 9/11, laws have sprung up in several US jurisdictions making it a crime to plan, enact, or carry out any act designed to produce a fear response in the population. In fact, the DC sniper suspects are being indicted in Maryland under just such a law. But all of these also have the same basic thread: that the act must have been done with the specific and deliberate intent of causing fear.

    So no, what this loser did isn't technically terrorism.

    At worst, it could be considered an act of war from the country where the hacker originated against the country that was hacked.

    Not really. In order to make the leap from crime to act of war, there has to be an element of direct or indirect state sponsorship. An individual acting on his own to carry out a criminal act-- even a horrible or devastating one-- in another country does not automatically constitute an act of war. But if another government sponsors the act, that's a different story. The basic idea here is that war is a state of armed conflict between nations, not between groups or individuals. Rhetorical shorthand aside, the United States could never be in a state of war against al Qaeda, or against Osama bin Laden personally. The concept of war can't be applied to those sorts of conflicts in any meaningful way.

    --

    I write in my journal
  33. If you do it a lot, you're a "professional" by Jeremiah+Blatz · · Score: 5, Funny

    Hrm, "they do consider the hacker to be a professional rather than recreational due to the large number of networks he hacked."

    Wow, I guess I'm a professional /. reader? This is so cool! I thought I was unemployed, but no, here I am, practicing my profession *right now!* Rawk!

    1. Re:If you do it a lot, you're a "professional" by Anonymous Coward · · Score: 3, Funny

      Wow, I guess I'm a professional /. reader? This is so cool! I thought I was unemployed, but no, here I am, practicing my profession *right now!* Rawk!

      The bad news is that you only get paid with Karma.

      The good news is that is may be more valueable than VA's stock.

  34. Flamebait?!? by MacAndrew · · Score: 2

    Gee, I guess deadpan slips by some people a little too easily? I thought I put in enough hints. Read it again, slower....

  35. Re:Why must we persist in... by istartedi · · Score: 4, Interesting

    Because it's gauranteed to elicit responses like yours, followed by more page views, followed by more ad revenue. Frankly, I'm surprised I had to scroll this far down to read this post, which I anticipated as soon as I read the headline.

    Do you think the /. editors aren't aware of this little linguistic duel? This, BTW, is also the same reason they don't really care about polishing the stories, and may in fact be intentionally putting little grammar and spelling gaffes into them--more page views, more ad revenue. I put forth that theory many posts ago; though I don't claim to be the originator of it.

    At any rate, "cracker" is already reserved for crazy people, a racial slur used against Whites by Blacks, and most commonly a crunchy snack food. Overloading it any further just didn't make sense. Hacker can be used exclusively for those who break into computers as far as I'm concerned. We already have many thesaurus entries with less sinister connotations: geek, nerd, guru, and hobbiest, all of which may be modified with "computer" as an adjective when the context is unclear (which it usually isn't). Speaking of context, when modified with the name of something (e.g., Linux hacker, assembly hacker) the word regains its positive connotation; but you still need to be careful when using it in the company of laymen.

    At any rate, I seem to recall a time when the /. editors were on the side of the purists; but that time has passed. Some may choose to look back to a time before /. "sold out". I prefer to think that the battle is over and the "cracker" advocates lost.

    However, I will give you guys something in your favor. Use of the term "safe cracker" persists so we have introduced yet another context-sensitive rule into the English language, making it that much harder for people to learn the language.

    Could it be simply that "computer cracker" is too aliterative and just doesn't sound right? Also, a safe cracker may literally have to crack (break) something to get in, whereas a hacker (a good one anyway) usually doesn't break anything.

    --
    For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
  36. Re:This is not 'hacking' Haiku for ACs by teamhasnoi · · Score: 2

    I assure that my original post was written in the clearest of mind and calmest of spirit. You sound like you could use a drink. Good Day.

  37. sanitized bet on it.... by codepunk · · Score: 3, Interesting

    You can bet your sweet ass that was sanitized screens you where looking at. When I worked in the navy command center we where frequently visited by the press and if they had camera's we threw bogus stuff on the screens to sanitize the area before entry. So what you see is completely bogus smoke and mirrors.

    --


    Got Code?
  38. Re:This is not 'hacking' by Anonymous Coward · · Score: 5, Interesting

    They should just scrap the term hacker and call him a terrorist, because thats what breaking into the US millitary is, terrorism.

    No, it is not. Terrorism is the use of terror tactics against a civilian population (which presumably isn't able to defend itself). Attacking military targets is perfectly legitimate acts of guerilla warfare, and the perpertrators of such are entitled to be treated as prisoners of war, and not this "enemy combatant" category that Bush invented.

    So:
    * attacking that supertanker the other month - terrorism.
    * ramming the Cole - legit.
    * blowing up the WTC - terrorism.
    * blowing up the Pentagon - legit.
    * shooting off-duty US marines in Yemen - legit.
    * hacking military bases - legit act of war, or civil crime. Definitely not terrorism.
    * dropping a 2000 pound bomb on a wedding party - a regretable accident.

    Essentially, any act against a government office or military base would be a legitimate act of war.

  39. Re:Not Again by coryboehne · · Score: 2

    not that it really matters but what is up with the parent's nick? binary for 7 and 14? or is it 126? ASCII for V? I don't get it, please explain...

  40. Another re-write of the language? by Zemran · · Score: 4, Informative

    Professional (adj) - practicing for a livelihood.

    Either this person was making his money from this (which I doubt) or this is another case of "they don't know the what they are saying".

    Just like the abuse of the words "theft" and "pirate" in relation to software when no one is permenantly deprived of anything.

    These terms are being misused, not out of ignorance (although the ignorance is obvious) but out of a desire to create a false impression and make the crime seem worse than it is.

    --
    I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
  41. Re:This is not 'hacking' by teamhasnoi · · Score: 2
    Sure, nobody likes the fact that people are being killed and beaten, however those people are very far away, and the gas tank on Mrs. Johnson's SUV is very near and dear to her heart.

    As far as attacking the rest of the oil producing countries go, we don't have a 'convincing/convienent' excuse. Yet.

    I figure that things will happen roughly like this: War on Iraq after 'lame duck' session of Congress is over. Some homeland security stuff mixed in with some education reform (for the kids!/votes) pushed thru Congress, another smaller 'terrorist attack' somewhere visible, maybe on the other coast, war on random terrorist-producing(oil) country. More tax cuts for people who don't need them, maybe some more touchy-feely legislation, go and drill in Anwar, more homeland security powers and rights to seize and detain, and finish up with some more love-in legislation barely covering the dark amendments beneath. Just in time for 2004, and polls, and scared/delighted/one-issue voters!

    Whee. I wish I didn't think these things. Cynical, paranoid, ignorant, or trolling, some AC will come along and call me all four.

    I just hope I'm not right.

  42. Read more closely by Anonymous Coward · · Score: 2, Insightful

    ...who broke into roughly 100 unclassified...

    Did you folk all miss this phrase? Focus on the word 'unclassified.' This retard probably hax0red a bunch .mil web sites designed to attract Army recruits or something.

  43. it was a typo by DahGhostfacedFiddlah · · Score: 2, Informative
    Here's an excerpt from the definition at dictionary.com.

    ...3: of or relating to or resembling Pyrrhus or his exploits (especially his sustaining staggering losses in order to defeat the Romans); "a Pyrrhic victory"...


  44. Extradition? by panurge · · Score: 4, Insightful
    We all know that the US govt. will not sign up to the International Criminal Court, yet tries to extend US jurisdiction outside its borders. But this is ridiculous. If the actions took place in the EU, on what basis could there be extradition to the US? Extradition is in respect of a crime committed in the country requesting the extradition.

    Basically what he did was sit at a keyboard typing and looking at a screen in, presumably, the UK. At what point was the crime committed? When he hit the return key, or when he viewed the resulting data? I would suggest that is the case, and any prosecution should take place in the UK - there is plenty of existing legislation.
    I am sure that someone will start bleating on about the theft of CPU cycles, or whatever. But this is extremely abstract. If the sites were non-secure, then presumably they had public access. If we are going to pass laws that people can only view websites as the designer intended, it may suit the kind of Government idiots that once threatened someone with prosecution for telling them they had an open SQL port with anonymous login on a military server, but is hardly going to promote good design (or be enforceable).

    This is exactly the kind of case that makes the notion of a World Court reasonable. But I can just imagine his lawyers going to the EU Courts to argue that (a) the US is refusing to allow its citizens to be subject to the ICC, thus demonstrating that US law is not even-handed, (b) in the present climate of hysteria he could in any case not get a fair trial, (c) that US law is in conflict with EU human rights legislation.

    It seems to me we have more to fear from the kind of idiots that go in for the kneejerk "This guy looked at a Govt. site! He is a terrorist!" reaction. The word for them is Stalinists, and the last thing we want is for the delightful security and political policies of the former Soviet Union to gain a foothold in the Republican Party.

    --
    Panurge has posted for the last time. Thanks for the positive moderations.
    1. Re:Extradition? by flossie · · Score: 2

      You are absolutely correct, but don't hold out for any resistance from Dubya's poodle in number 10 - there won't be any. To be honest, I think that this is probably the most confusing thing about international politics at the moment. Why on earth does the leader of the Labour party (an organisation with left-wing trade union roots) feel the need to cosy up to the leader of a party to the right of the Democrats (which are themselves considerably to the right of the Tory party). It makes no sense! Clearly the CIA have got something on Tony - the sooner it comes out, the better for all of us.

  45. Free sk8? Why? by Wee · · Score: 2
    Vaccinate now! Free Heckenkamp

    We should free him? Why? He doesn't need us. He's doing such a marvelous job of freeing himself that he shouldn't need our help.

    Hey, if I let someone crack into my machine after I commit really incriminating and expensive online crimes, do I get a "Get Out Of Responsibility" card too?

    What a load...

    -B

    --

    Ash and Hickory, straight-grained and true, make excellent bludgeons, dandy for the cudgeling of vegetarians.

  46. Re:This is not 'hacking' by theLOUDroom · · Score: 2

    Actually, by the Patriot Act, hacking IS an act of terrorism. I forget the exact wording of it, but any attempt to gain access to a government computer system is considered a act of terrorism.
    Just because it a law doesn't make it right.
    Or as someone once said: Ignorance is no excuse for the law.

    --
    Life is too short to proofread.
  47. What is a Professional Hacker? by divide+overflow · · Score: 3, Funny


    Q: How can you tell a professional hacker has hacked into your network?

    A: You can't. That's why he's a professional.

    1. Re:What is a Professional Hacker? by Ektanoor · · Score: 2

      You can if you are also a professional and care for your work, the network you administer and the people who work on it. "Professional" is a term that states your experience and skills and not that you are God-All-Mighty.

      *Interesting*???? Who modded this up?

  48. Re:Extradition? - ICC by matthew_gream · · Score: 2

    You don't know what you're talking about. The International Criminal Court is only concerned with "mass crimes" against humanity, especially this committed by by states.

    Try reading ICC Jurisdiction:

    1. The jurisdiction of the Court shall be limited to the most serious crimes of concern to the international community as a whole. The Court has jurisdiction in accordance with this Statute with respect to the following crimes: (a) The crime of genocide; (b) Crimes against humanity; (c) War crimes; (d) The crime of aggression.
    --
    -- Matthew - matthew.gream@pobox.com, http://matthewgream.net
  49. What frightens me most.. by varjag · · Score: 4, Funny

    ..about this story, is that noone of slashdotters objected this time to use of word 'hacker' as a label to 'cracker'.

    Oh well...

    --
    Lisp is the Tengwar of programming languages.
  50. Of course he didn't get to any classified info by LazLong · · Score: 3, Insightful

    Classified networks are air-gapped from unclassified networks, which the Internet is by definition.

    I love it when some U.S. gov't computer getting hacked makes headlines....The most sensitive info a hacker could ever get would be HR type info.

  51. Re:This is not 'hacking' by Tokerat · · Score: 2

    Yes, and according to the DMCA, copying my CDs into my computer can be considered an act of Copyright Violation...and Theft.

    The Patriot Act is as full of shit as half the new laws passed in recent years. Not that we dont' need to protect against terroism, but dont' call a crime "terrorism" when it isn't. Hacking a US Millitary network is a pretty Bad Thing to be doing, but I wouldn't put it in the same catagory as strapping a bomb to your chest and diving through a resteraunt window.

    The US Government is too easily excited by hype and buzzwords like that...

    --
    CAn'T CompreHend SARcaSm?
  52. Echelon by Martin+S. · · Score: 4, Insightful

    So let me see if I have this right.

    The US Military want to prosecute somebody for doing something they've been doing for years ?

  53. could be a pro by Anonymous Coward · · Score: 2, Interesting

    I dont think its so unreasonable to think that this guy could be a pro, many people have said that just becuase he has hacked tha many networks he isnt a pro, which is true. But i think that it is not unreasonable to assume that for him to be good enough do this, he could well be a pro, even if he wasnt bing payed for these specific hacks.

    wish i didnt have to post as an anon coward, but ive forgotten my nick/pass time to sign up again i guess!

  54. Re:Why must we persist in... by zbeba · · Score: 2, Funny

    [paraphrased from someone's alt.2600 post. apologies to the poster; I can't remember who it was]

    The term Hacker vs. Cracker is just an attempt by a bunch of pompous, self
    righteous, tie wearing dorks to separate themselves from the unruly upstarts that
    have surfaced in the past 10 years. Hacker isn't a name that solely belongs to
    those people who somehow think that they're Marvin Minsky's grandchildren. It's a
    name for whatever a person happens to call themselves. I'm sure there's a great
    number of professional Axe Murderers who are dismayed that a bunch of computer
    nerds are calling themselves 'hackers' too, but you don't see THEM acting all
    indignant over it.

    --
    You can't trust code that you did not totally create yourself.
    -- Ken Thompson
  55. but only for around 50 years by Martin+S. · · Score: 2

    The British have been known to carry grudges.

    Yep, but only for around 50 years or so; Americans seem to carry them for 200 years.

  56. Re:Extradition? - ICC by panurge · · Score: 4, Interesting
    I do know what I am talking about.

    The present US govt. will not allow the extradition of US citizens by the ICC for the most serious crimes, war crimes, mass murder etc. So why should anyone allow extradition to the US for lesser crimes committed outside its jurisdiction? Either the Bush government recognises that all states and citizens have legitimate cross-border security interests, or it doesn't. At the moment, it recognises them in a very one-sided way (You can prosecute Milosevic, but not Kissinger.) It also has a habit of tearing up international treaties. So why should other states recognise treaties with the US? This is a no-brainer. If Bush wants to be isolationist, fine. If he wants to be internationalist, better. But saying "I can be isolationist in my interests but internationalist when I want something from you" - Tony Soprano government.

    --
    Panurge has posted for the last time. Thanks for the positive moderations.
  57. Re:Not Again by N+Monkey · · Score: 2

    I think he'd better take a much needed vacation. I'm tired of hearing about crackers going to jail. The Falkland Islands are rather nice this time of year.
    Ahh there's no need. Given that article (and many others like it) doesn't seem to know the difference between England and Britain, he could probably just move to Scotland, Wales, or N.I. and they wouldn't find him ;-)

  58. Re:This is not 'hacking' by moz25 · · Score: 2, Insightful

    He's evil, he's fascist, he kills his own people, his own countrymen... He lives in luxury, while his own public starves.

    You do realize that this of course also applies to the fundamentalistic theocracy of Saudi Arabia? The country where medieval style punishment is still 'ok', women are not allowed to drive, homosexuals simply do not exist, the increasingly larger poorer segment of the population barely has enough food to live of, while the filthy rich 'princes' live in luxury in their palaces

    The difference between a friend (Saudi Arabia) and a foe (Iraq) doesn't appear to lie in the extent to which their leadership is despicable, it's about the extent to which they are willing to play along. Saddam wasn't any more of a 'swell guy' when his regime was considered friendly to the western countries...

    And yeah, oil makes everything all the more relevant

    Moz.

  59. No by Goonie · · Score: 2

    Or at least no more than any observation operation set up by police.

    --

    Any sufficiently advanced technology is indistinguishable from a rigged demo
    --Andy Finkel (J. Klass?)
  60. Re:Book ! by AndroidCat · · Score: 2
    "Based on a true story" is when TV mangles something vaguely based on facts. Cuckoo's Egg is a true story. (For large values of true.)

    He's entertaining as a speaker too. I was at his panel at a Niagara Falls science-fiction convention. Perhaps just a little hyperactive. :^)

    --
    One line blog. I hear that they're called Twitters now.
  61. Re:I bet this "hacker" is a.... by Artemis · · Score: 2, Interesting

    You have no clue what you are talking about. Do you really think troop movements are done via unclassified networks? It's all done through AUTODIN via messaging, or through DMS, which requires a ISSUED Fortezza card to release the message. I don't think a hacked email/message coming from "Doe Col John A" saying to move "10,000 troops to Luxembourg" would be taken seriously. It was most likely some unpatched IIS servers that were servers as www.wherever.service.mil. Sure, those IIS servers should be patched, but the crap it takes to get it authorized is insane. We're still waiting to stand up a single Win2k Server (without AD). Of course, in the Navy/Marine Corps, everything IT is essentially "on-hold" for NMCI. You think this will be any better when EDS takes over the unclassified networks for 1/2 the military?

  62. Re:This is not 'hacking' by karlm · · Score: 2
    As others have pointed out, the term is "unlawful combatant" (combatant not sactioned by any recognized political state), and Bush didn't make the term up. Also, non-uniformed soldiers are subject to many fewer rigts under the Genieva conventions. (Do non-uniformed soldiers have any Genieva convention rights?)

    If you send paratroops in dressed as civilians and force the military to go after people that look like thier own people (and greatly increase the chances of civilian casualties), you don't deserve the same rights as common soldiers.

    --
    Copyright Violation:"theft, piracy"::Anti-Trust Violation:"thermonuclear price terrorism"<-Overly dramatic language.
  63. Operation Sealion by Martin+S. · · Score: 2

    Actually, top military theorists have yet to work out a way in which Germany's 'Sealion' invasion plan could work.

    Indeed, Operation Sealion was doomed from the start, the British Isles where never seriously threatened with invasion. Operation Sealion required the defeat of the RAF to establish air superiority over the English Channel, then defeat of the Royal Navy, before a landing could even be considered.

    The RAF-Fighter Command held their own against the Luftwaffe, RAF-Bomber Command sunk most of the Rhine Barges to be used for the landings. Costal Command kept the Channel clear of the Germany surface fleet and the Royal Navy chased the German High fleet around the global, either sinking it's ships or forcing them into home waters for the duration of the War.

    The Royal Navy defeated the Italian Navy (which was superior in numbers and equivalent in technology to the Germany Fleet. The 'Desert Rat's' (British Army Regulars) defeated first the Italians then the Germans in North Africa, the Italian forces in the Middle East. (It is also perhaps worth mentioning the Italian reputation for cowardice is largely unfounded, faint, thrust, retreat, consolidate was very much the tactics of all sides in North Africa.)

    Also what many seem to forget is that prior to WW2, Great Briton (& Empire) was the pre-eminent Military power in the World, in essense it was the Worlds only true super power'. In a pre-WW2 (& nuclear weapons) sense this was measured by the ability to project an effective military force around the world and provide the logistics to maintain a compaign. There was only one nation able to do this before WW2, and that was British Royal Navy. Undeniably the cost of WW2 for Briton was the loss of Empire.

    In fact, it was the Poles that saved us (1930s Polish hackers won WWII for the allies).

    And then we (all Western Allies) betrayed them.

    1. Re:Operation Sealion by Minna+Kirai · · Score: 2

      Operation Sealion was doomed from the start, the British Isles where never seriously threatened with invasion

      "And I'd have got away with it too, Churchill, if not for your pesky radar!" The German plan was a fine one, and could've worked except for technological innovations that the Nazis couldn't have known about. Even so, the RAF was seriously attrited. Maybe if the German resources weren't split on the Eastern front they could've overwhelmed the defenders. Or if they had an amazing espionage victory they could've neutralized radar.

      In either of those cases (or if the invention had never been made at all), then German forces could've pushed onto the British Isles. It would've been a a bloodbath for both sides, but then the coastline of Axis Europe would be safe, with no convenient launching-point for American troops to launch an amphibious assault.

      WW2 was the first war to be definitively won by scientists and inventors.

      the Italian reputation for cowardice is largely unfounded, faint, thrust, retreat

      Fainting still sounds cowardly. Or like they didn't maintain a proper diet. Feinting would be a superior combat tactic.

  64. Re:This is not 'hacking' by teamhasnoi · · Score: 2
    Our Prez and VP both have ties to oil companies (Bush Exploration, Arbusto, Harken, Haliburton), the prez's father sold weapons and trained the very guy we are(were) looking for, the prez's grandfather had dealings with the nazis. Conflict of interest runs in the family..

    Don't forget about Venezuela, Russia, or any number of other places with large amounts of oil. Even if the middle east was nuked tomorrow, we'd only face an oil shortage from distribution problems, not from diminished oil availability.

    I agree. We've got two+ experts in the White House, how could we have a shortage? We aren't going to nuke anything, we are just going to go in and 'help'. With that help will come a few select buisinesses that will set themselves up well. Frankly, I don't need FUD, I need TUMS. The liberals don't have a monopoly on making fear, uncertainty and doubt.

  65. OT [grammar lesson] by FreeUser · · Score: 2

    (Oh, and it's Pyrrhic, not phyrric. Even without the correct spelling, it still refers to Pyrrhus, so you should at least capitalize it as a proper noun. Classical education ain't what it were.)

    I normally loathe and despise grammar nazis (of which I most emphatically do not classify your post), for a couple of reasons: I don't spel very well myself, and web fora are notoriously lacking in spelling checkers, and I find the thought being communicated more important than the fine details of writing (exception: formal works for publication), particularly in casual forums such as this.

    All that having been said, yours is the first such correction I'm actually greateful for. My education was public (which is arguably the antithese of classical these days), and Pyrrhic, while I understand the phrase from having seen it in many contexts where the meaning was apparent, was something I never knew the origin of (and probably wouldn't have managed to spell anyway). So for the first time in the 15 years I've been on the 'net (and perhaps the last), I just want to say thanks for that little tidbit of information ...

    --
    The Future of Human Evolution: Autonomy
  66. Re:This is not 'hacking' by Dave_bsr · · Score: 2

    I realize all that. But I don't think Saudi Arabia has plans to kill us or take over that section of the world. So the point is...they are playing along with the rest of the world, they aren't threatening everybody. If they were - and they might be going that way, given their recent show of support for Sadam - it wouldn't be unreasonable to think of action there too.

    Look! Look! I got modded down because....why? "underrated". ??? Is it cuz I'm taking a disagreeing stance? Some moderators do use mod points to argue, idn'it great?

    --


    Who is this Anonymous Coward character, how does he post so much, and why is he always such a whore?
  67. Re:Why must we persist in... by jeremyp · · Score: 2

    Yes, a hacker is a person that breaks into computer systems or is simply good at programming. A cracker is a dry flat biscuit that goes nicely with cheese.

    Unfortunately, English is a living language which means that the meanings of words depends on a consensus of the people that use them. The word "hacker" means "person who breaks into computer systems".

    --
    All I want is a secure system where it's easy to do anything I want. Is that too much to ask ~~ Randall Munroe
  68. Re:This is not 'hacking' by Zemran · · Score: 2

    Bush may not have coined the term "unlawful combatants" but he did misuse it. Neither the Talaliban nor the nothern alliance wore uniforms yet he decided to call the Taliban unlawful combatants. The Taliban were the "legitimate" side in that country and were not unlawful combatants by wny stretch of the term. I personally am glad to see them gone as they were cruel and barbaric. It is fine by me that the military went in and ousted them but when you make a white flag deal it is completely unforgivable to renage on it. Most of the soldiers held in Cuba were given assurances that if they surrendered they could go home. When they got to the fort in Afghanistan they were told that they could not go home until they had told the CIA all that was required. That was when they rebelled. The US changed the rules after making a deal.

    --
    I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
  69. Or that just happens to hit a few in the process.. by Kjella · · Score: 2

    Hiroshima?
    Nagasaki?

    Hadly directed attacks towards military installations. If that wasn't using terror to make Japan surrender, I don't know. Yet I haven't seen Truman (or the generals, or Congress / Senate) on trial for it. Now why doesn't that surprise me?

    Kjella

    --
    Live today, because you never know what tomorrow brings
  70. They just released his name - Gary McKinnon by Nintendork · · Score: 3, Informative
  71. Re:British 'hacker' identified as Gary McKinnon 36 by flossie · · Score: 2

    I don't know where you got this information from, but if true, he could probably plead prevention of genocide as a defence against extradition (Genocide act 1969) considering that he incapacitated part of the military and given the US killings of innocent civilians in Afghanistan as part of the "war on terror".

  72. Re:This is not 'hacking' by flossie · · Score: 2
    Let us not forget, Mr. Blair was also Bill Clinton's Yes-Man.

    That's just further proof that CIA have got something on him.

  73. Re:This is not 'hacking' by flossie · · Score: 2
    If Bush wanted to fight wars over oil, why aren't we attacking every other terrorist-supporting, oil-producing country?

    There is no need to. As long as you attack one, the rest won't put their prices up too high for Mrs. American Pie to fill her gas-guzzler to the brim, or cut their prices too low for Dubya Exploration to make a profit.

  74. Re:You are an idiot by flossie · · Score: 2
    Despite the flippant use of the word "legit", the original poster is not wrong. The attack on the USS Cole did not use glass rounds, flame throwers, blinding lasers or kill any non-combatant civilians. An attack on a military vessel is arguably more "respectable" than a helicopter attack on a car (Yemen, this week - no trial by jury). As mentioned in other posts, the use of civilian hostages to attack the Pentagon certainly removes any legitimacy that the attack might have had, but it is undoubtedly a "legitimate" military target.

    Btw, the presence of brave and patriotic troops in a region does not automatically justify their being there.

  75. Re:Now on CNN by h4x0r-3l337 · · Score: 2

    The above response was originally posted in response to the "newton's principia stolen" article. Several times now I've seen my own comments and those of others become magically attached to some other story. Cowboy Neal needs to fix is. Or something.

  76. Re:This is not 'hacking' by flossie · · Score: 2
    TB's total and unquestioning support for US presidents, in spite of the hostility that this engenders towards him by the majority of the British electorate, is such ludicrous behaviour that some really far-fetched theory is needed to explain it.

    Assuming that he hasn't done a deal to become World President in the near future (a role that I am sure he would be eager to have if the UN had more power), the leading explanation for his puppet-like behaviour is quite possibly that the CIA have him under their complete contol.

    If only we could find out how.

  77. Battle of Briton by Martin+S. · · Score: 2

    The German plan was a fine one, and could've worked ...

    It was fine for the invasion of Norway where strategic and tactical surprise was achieved against numerically inferior military at a low state of readiness.

    It was a poor plan against the British Isles. 1) No surprise, not even tactical. 2) British had a superior force on the ground. 3) No prospect of quickly seizing the seat of Government. 4) Little prospect of retaining seizing Airfields, 5) Little prospect of seizing or retaining ports.

    German forces could've pushed onto the British Isles

    The Germans had limited amphibious capability therefore allowed only limited provision for landing heavy equipment, tanks, artillery, trucks etc; beyond seizing a port as the primary objective. Germany Parachutists would have been extremely vulnerable to land based mechanised counter attack (something not possible in Norway due to terrain). They would have been in a worse position than the Allies at Arnhem during Market Garden, without any prospect of retreat across the channel. They would have been decimated.

    In summary German amphibious & parachute forces where adequate to take Norway, they would have been completely inadequate to take the British Isles.

    Sealion was never implemented or even seriously consider, it was a plan, not an operation. The German high command even the reckless Hitler realised it was complete folly.

    the RAF was seriously attrited.

    The RAF had three fighter groups available in the British Isles. Two front line fighter groups and one stategic reserve. It committed only one front line group to the Battle of Briton. The RAF's plan was to rotate the Southern and Northern Groups, if the Southern group broke. It never broke. The Luftwaffe may have started with a numerical advantage but in practice the RAF had many practical advantages, RADAR, it operated over friendly territory, it had lower losses, higher production of new aircraft, much higher levels pilot replacement and aircraft better suited to the task in hand.

    Maybe if the German resources weren't split on the Eastern front they could've overwhelmed the defenders.

    No. Barbarossa, the German offensive against the Soviet Union started in June 41 nearly a year after the Battle of Briton finished in August 40.

  78. Re:Extradition? - ICC by matthew_gream · · Score: 2

    I agree with you about general US foreign policy. It is typically one-sided.

    What I meant was that the ICC or a World Court is not directly relevant in this case: what is relevant are international treaties and agreements on extradiction and recognition of crimes - irrespective of anything to do with the ICC or a World Court.

    You said: ''yet tries to extend US jurisdiction outside its borders. But this is ridiculous. If the actions took place in the EU, on what basis could there be extradition to the US?''

    Incorrect: The actions did not take place in the EU - the act of intrusion occurred in the US, because the physical machines are located in the US. He was a legal entity ''reaching into'' the US and acting within the US.

    The crime is "intrusion into computer". Where is the computer: US. He is located outside of the US, but the act occurred in the US.

    --
    -- Matthew - matthew.gream@pobox.com, http://matthewgream.net
  79. Re:Extradition? - ICC by panurge · · Score: 2
    I'd like to make the point that I am not taking an anti-US stand on this, I am making a point about claims to extraterritorial jurisdiction. It is a dangerous argument because, for instance, it can be used to justify the assassination of nationals of a state living abroad but upsetting the government by their criticism (define it as treason and the rest follows.)

    However, and I am aware I may be taking this argument beyond the scope fo the usual Slashdot discussions, it is precisely the concept of "reaching into" a foreign server that I take issue with. The actual actions of the alleged cracker took place in the UK, not the US. What actually passed to the US? Nothing physical (the electrons in the wire do not cross the Atlantic). In effect, he asked the server to do something (passed information ) and it responded by doing it.

    Now consider an analogous case. Suppose I phone up someone in Chicago and tell them I am their long-lost uncle from Tampa. The person is foolish enough to believe it. I then persuade them to remit me $250 in cash so that I can make it to Chicago, with some hard-luck story. Now, what crime have I committed? Possibly fraud. Where did I commit it? I suggest that most people would say "In Tampa", because that is where I was when I told all those lies, and that is where I actually received the money. What happened in Chicago was that someone behaved in a foolish and gullible manner - which is not itself a crime, though perhaps it should be.

    In the same way, although the server was physically located in the US, the action of telling lies to it took place in the UK, and the "stolen" information was received in the UK. The server answered questions and responded to requests to perform certain actions. Had the server ignored the requests, nothing would have happened. The situation is quite different from, say, a terrorist missile launched from one country into another, where a physical destructive agency is passed over which does not rely on the cooperation of an agency in the attacked country.

    Of course, IANAL-just someone who has lawyers in the family.

    --
    Panurge has posted for the last time. Thanks for the positive moderations.
  80. Re:Extradition? - ICC by matthew_gream · · Score: 2

    You need to talk to your lawyers about legal jurisdiction. These jurisdictional arguments are well established in legal community (I am currently a law student).

    The "telling lies" and "information was received" are not the issue, the issue is "theft/break into computer" which clearly happened in the US. Although the act was initiated elsewhere, it clearly happened in the US (the server is in the US - how much more clear can that be?).

    Your point about treason has mixed relevance. Firstly treason only applies to citizens of a country, not to non-citizens, and it relates to state secrets and issues that affect the security/wellbeing of a country, not mere criticism (although the line can be fuzzy, most sensible people know where it is). Although in international law under the "doctrine of effects", some activity outside of a country that has impact upon the country can be taken as affecting law within that country (so, for example, an external person inciting hatred within a country causing significant legal problems could be considered to have violated said countries laws -- whether or not extradition will help, though ...).

    I'd prefer not to continue this debate.

    Read this: http://www.law.indiana.edu/fclj/pubs/v50/no1/wilsk e.html

    --
    -- Matthew - matthew.gream@pobox.com, http://matthewgream.net
  81. Re:Or that just happens to hit a few in the proces by why-is-it · · Score: 2

    Hadly directed attacks towards military installations. If that wasn't using terror to make Japan surrender, I don't know. Yet I haven't seen Truman (or the generals, or Congress / Senate) on trial for it. Now why doesn't that surprise me?

    There are a number of people who argue that "Bomber" Harris should be considered a war criminal because he ordered the fire-bombing of Dresden at a point in WWII when Germany's defeat was all but certain. That absolutely pales in comparison to the nuclear attacks against Japan of course, but some might say that Japan was all but defeated prior to the nuclear attacks as well...

    --
    *** Where are we going? And what's with this handbasket?
  82. Re:NAVEWEISS by NaveWeiss · · Score: 2

    Hehehe.. I'm not going to die in the near future. I'm afraid you'll have to get used to me! I'm so cool!!! And I love myself. yea.

    --
    Slashdot community, please notice: I am looking for a girlfriend.
    Nave H. Weiss