Slashdot Mirror
Losing His Religion: Adrian Lamo Interview
digidave writes "Six months after the sit-down, TechFocus.org has published their interview with renowned hacker Adrian Lamo. Done before his arrest, TechFocus kept the interview secret so as not to influence the outcome of his trial. It remains his only interview since being arrested."
The companies he broke into reads like a Forbes ranking list. Yahoo! Excite@Home. MCI WorldCom. Microsoft. SBC Ameritech. Cingular.
He got away with it by notifying those companies of the weaknesses, and in some cases helped fix them, for free.
Then he set his sights on the New York Times. They were less forgiving. Today, April 8th, Adrian Lamo will be sentenced - having plead guilty.
I first worked to get an interview with Adrian Lamo in July, 2003. Having compromised the networks of some of the most influential companies in the world was not incredibly unusual, but the manner in which it was done was intriguing. Adrian Lamo has been termed the "homeless hacker," the "helpful hacker" and numerous other nicknames - because instead of disappearing into the ether, he would make the company aware of the flaw he had exploited, and in some cases would advise them on how to resolve it. Based on that approach, Lamo was fortunate to have dealt with companies that didn't choose to press charges.
Then, during an interview with SecurityFocus (not affiliated with Techfocus), he admitted to having broken into the NY Times network. The interviewer contacted the New York Times in a request for comment. Shortly thereafter, the FBI started an investigation. He was ultimately arrested in September for the penetration of the New York Times network, and for using their resources. Today he has pleaded guilty to breaking into their network, and for conducting unauthorized searches on Lexis/Nexis - all on the Grey Lady's tab. You can read the original criminal complaint here.
Lamo had another distinction from many hackers - he did so while homeless. While his family was willing to house him, he set off on his own, traveling from place to place via Greyhound. Occasionally he slept on the couches of people he knew in different cities, at other times he would sleep in abandoned buildings or anywhere feasible. All the while, he traversed networks using a battered laptop with a wireless network card.
Adrian Lamo is most assuredly unique. A month after his arrest, I received an email from him asking how the weather was. A bit puzzled, I contacted a mutual acquaintance to verify that it was Adrian. Indeed it was, so we met the next weekend near his home to discuss his background, and the serious charges he faced.
This was no ordinary interview. Not only had Lamo not given any interviews since the arrest, but the FBI had been exerting tremendous pressure on journalists that had spoken with Lamo, demanding that they turn over all notes and correspondence with him. It was only after a strong outcry from the journalistic community and their attorneys that the FBI grudgingly relaxed their demands, but there was little solace in that. As such, there was nothing written down - just a digital voice recorder with a limited battery. Upon the conclusion of the interview, the recording was transcribed to the PC, then sent to an offshore server outside of my control, in the event that an order was made to surrender it. The digital recording was destroyed.
We hope you enjoy the interview.
Update: Sentencing has been delayed until June.
When did you get started getting interested in security online?
"That'd depend on how you define started, I guess. My first exposure to computers was my Dad's Commodore 64 when I was six or seven, and as you may have read somewhere, I was interested in making things work differently than the way they were intended - loading, then inputting it and using the list command to see all of the code contained within it to see what the hell I was supposed to do with this blind corner that didn't seem to go anywhere."
What kind of games?
"Text-based adventure, like Zork-style."
What moved you to move from disk-based security to a larger scale type of interest?
"To me there's never been that much of a differentiation, in the sense that what I do is less ab