Slashdot Mirror


T-Moblile Cracker Pleads Guilty

hackajar writes "The Register is reporting Nicholas Lee Jacobsen plead guilty to cracking into T-Mobile's phones. He was picked up in mid October of last year in the "Operation Firewall" sweep by the FBI. He faces "maximum five years' prison and a $250,000 fine" according to the site."

38 of 139 comments (clear)

  1. Summary is misleading... by FrYGuY101 · · Score: 5, Informative
    He cracked into the network, not just phones... from TFA:
    Nicholas Lee Jacobsen accessed US Secret Service email, obtained customers' passwords and Social Security numbers, and downloaded candid photos taken by Sidekick users, including Hollywood celebrities, as we reported in January.
    --
    "If we let things terrify us, life will not be worth living."

    - Seneca
    1. Re:Summary is misleading... by mboverload · · Score: 4, Insightful
      It is one thing to crack into a network. Stealing social security numbers and personal photos is another, however.

      Other than the "respect" we give him for being able to pull it off, he had no noble intensions in mind what so ever. This man deserves none of our, or your, sympathy.

    2. Re:Summary is misleading... by blowdart · · Score: 5, Funny

      he had no noble intensions in mind what so ever

      Whereas if he'd managed to use the intrustion to delete every single custom ringtone off every connected mobile he would have been sainted. :)

    3. Re:Summary is misleading... by traffi · · Score: 2, Interesting
      Other than the "respect" we give him for being able to pull it off
      I'm not sure if we should give him any "respect" - quotation marks or no.

      The article doesn't say anything about how he did it so it might well have been Mitnick style "hacking" , involving tricking people over the phone to give out passwords (also called social engineering which he wrote a book on).

      So this might have been a confidence hack rather than a techie hack, although I admit I don't know which it was...
      --

      Treo + Kaffi = Traffi
    4. Re:Summary is misleading... by ceeam · · Score: 2, Interesting

      Uhhhm, yes, the _crackers_ that crack viruses deserve no respect. Uhhhm, yes, the crackers that expose mal/spyware deserve no respect. Yes, the crackers that crack commercial drivers to find out how hardware should be programmed deserve no respect. Etc, to infinity.

    5. Re:Summary is misleading... by DaRiachu · · Score: 3, Insightful

      Always the subject of debate, eh?

      Why not just call 'em all hackers and let things like adjectives sort 'em out.

      Oh, wait! That'd get people to stop being righteously indignant, and we can't have that. :(

    6. Re:Summary is misleading... by milletre · · Score: 4, Funny

      Uhhhm, yes, the _crackers_ that crack viruses deserve no respect. Uhhhm, yes, the crackers that expose mal/spyware deserve no respect. Yes, the crackers that crack commercial drivers to find out how hardware should be programmed deserve no respect. Etc, to infinity.



      Please, let's leave race out of this.

    7. Re:Summary is misleading... by digitalchinky · · Score: 4, Interesting

      Perhaps the easiest way to access the cellular network is via the microwave link they normally have on each cell site. The transmission from there is typically just a standard T1, 24 channels, few bits of overhead - a couple of channels handle the SS7, the rest are devoted to the (unencrypted) vocoders from each active mobile telephone.

      You can learn a lot just from the SS7 packet stream - including text messages and phone numbers, imsi's and other data (SS7 can get pretty complicated, it has a standard, but phone companies usually twist it a little for their own usage)

      There are codecs available online for most transmissions - GSM is usually a 16kbps signal, bust it out and it rasters at around 180 bits wide (from memory) - hook on to the sinc and feed it in to your demux real time - There are probably off the shelf scanners that do all of this these days.

      Those small microwave dishes are either pointed at an exchange, or another cell site - find one going to an exchange and you'll get more data to sift through. They transmit at around about 2GHz so you'll need a receiver, downconverter, modem, and some type of capture card for your trusty little portable Pee Cee.

      Not cheap, but not impossible. (Make sure to buy two of each or you'll be marked as a 'spy' or terrorist straight off the bat) All of this stuff can fit in to one of those silver metal camera cases.

      I'm not making any of this up either :-)

    8. Re:Summary is misleading... by ozbon · · Score: 2, Funny

      And if he'd hacked into Nokia and deleted "the Nokia ringtone", he'd have been awarded next year's Nobel Peace Prize. *grin*

      --
      I say we take off and nuke it from orbit. It's the only way to be sure...
    9. Re:Summary is misleading... by mwood · · Score: 2, Interesting

      "It is one thing to crack into a network. Stealing social security numbers and personal photos is another, however."

      Yes, it is. One is burglary; the other is copyright infringement.

    10. Re:Summary is misleading... by mwood · · Score: 2, Insightful

      Yes. If A uses B's "CC#, SSN and bank PIN" without authorization by B, then A has stolen money from B and defrauded the bank as well (having obtained services from the bank under false pretenses, and making them liable for B's loss). He's also defrauded the merchant. A is in a whole lotta trouble, if caught.

      At least, that's the way I see it -- if you want a legal opinion, buy one from a lawyer.

      This brings up an interesting point. We actually do have long experience, in law, with the taking of "virtual property". Forging a check, for example, gives the forger possession of money which rightly belongs to someone else, even though the money may never have existed as physical coin or currency. Much of the money circulating today never existed in the physical world. This blows another hole in the argument that taking someone's information is fundamentally different from taking his silver candlesticks.

  2. Few thoughts by Anonymous Coward · · Score: 5, Informative

    As I recall, he wasn't picked up in the Operation Firewall sweep (although he would have been), instead, he turned himself in several days before the arrests.

    Secondly, the maximum five year/$250,000 fine thing is standard for a single felony. In all likelyhood he will get MUCH less, especially because he cooperated and plead guilty.

  3. Secret Service! by mboverload · · Score: 5, Insightful
    Nicholas Lee Jacobsen accessed US Secret Service email...

    Why the hell are the secret service sending unencrypted emails (!!!) other a PUBLIC, wireless phone system. I don't like our president or anything, but he deserves more than some hack jobs practically advertising themselves to the world.

    1. Re:Secret Service! by Capt'n+Hector · · Score: 2, Insightful

      I was of the understanding that the secret service had two email systems, one for communication with the general public, and one internal - secure - system.

      --
      Quid festinatio swallonis est aetherfuga inonusti?
      Africus aut Europaeus?
    2. Re:Secret Service! by digitalchinky · · Score: 5, Informative

      A great deal of inter-organisation banter is considered 'unclassified' so it makes sense to use public systems that are already in place - saves money all round. Also workers will send personal stuff like banking and email to friends and family, it's got to leave the 'secret service' building somewhere.

      I seriously doubt he got anything hard core. Air Gap - (and no, I did not say WiFi gap)

    3. Re:Secret Service! by LinuxHam · · Score: 2, Informative

      since they are part of the US Treasury dept

      Used to be part of the treasury dept. They are now DHS

      --
      Intelligent Life on Earth
    4. Re:Secret Service! by mwood · · Score: 2, Insightful

      100% of my work isn't classified, but I know better than to throw secrets around unencrypted.

      Setting aside what the President may or may not deserve, *we* deserve better from the people who work for us.

  4. Operation Firewall by mboverload · · Score: 4, Informative

    Here is an article about Operation Firewall. Interesting that wikipedia does not yet have an entry on it... http://www.viruslist.com/en/news?id=154205192

  5. Better article by mboverload · · Score: 4, Informative
    This article has WAY more information. Great read

    http://www.theregister.co.uk/2005/01/12/hacker_pen etrates_t-mobile/

  6. Punish him constructively by [cx] · · Score: 5, Interesting

    Make him work unpaid with only room and board as a slave for T-Mobile as a security technician.

    Oh yeah..slavery...

    I guess it's not such a good idea, but without the bad past of slavery, but incarceration is just a waste of money, when he could be using his "talent" positively. By forcing them to atone for their crimes perhaps they will learn the error of their ways by dealing with (in this case) people trying to crack the same security network he is now trying to secure.

    Monitor him, which will probably cost less than the prison fees. He is not a danger to society, he is just simply someone who overstepped their legal boundary. I believe prison should be for violent criminals. Not that he will go to a real tough prison.

    But if he screws up in the program outside of prison as rehabilitation, then he would be sent to a maximum security prison to serve the sentence to the end.

    [cx]

  7. He now works for the secret service by Anonymous Coward · · Score: 2, Interesting

    Maximum of five years and a $250,000 fine is the maximum for a single felony. From the previous article:

    The same source also offers an explanation for the secrecy surrounding the case: the Secret Service, the source says, has offered to put the hacker to work, pleading him out to a single felony, then enlisting him to catch other computer criminals in the same manner in which he himself was caught. The source says that Jacobsen, facing the prospect of prison time, is favorably considering the offer.

    It seems that a surefire way to get a job tracking down criminals for the government is to get arrested for committing crimes, a bummer for us regular folk :(

  8. T-Moblile by victorhooi · · Score: 2, Insightful

    Hi, Is it just me, or does somebody at Slashdot have a personal vendeta against The Society for Correct Spelling? *rolls eyes* It's happened so many times in the past few weeks that I was starting to think it was intentional, some clever attempt to subvert the Establishment and show how progressive they are....or, maybe I'm over-analysing it.... Anyway, back to the topic - I wonder if the FBI will cut a spill-the-beans deal with him? I mean, breaking into a major telco...that's gotta be worth at least a couple of hacker brownie points... bye, Victor

    1. Re:T-Moblile by Anonymous Coward · · Score: 5, Funny

      That's "vendetta"

      HTH
      The Society For Correct Spelling.

  9. But most importantly... by paulschroeder · · Score: 2

    ...will we be seeing the 'candid' photos? It's not like Paris Hilton and her ilk could embarrass themselves any further.

  10. Standard Slashdot Responses... by mumblestheclown · · Score: 2, Insightful
    • He was a "private security researcher."
    • He never stole anything
    • People like him do the world a service by exposing the weaknesses of such systems (to.. uhh.. people like him).
    • 5 years! Compare this to $LESSERSENTENCEDCRIME.
  11. 'Honest, Judge... by Sensible+Clod · · Score: 5, Funny

    I thought I was accessing my WiFi AP. Its SSID was T-Moblile!"

    --

    The difference between spam and poop is that you don't have to dig through septic tanks looking for real food. -- Me
  12. Re:Get a clue, idiot. by DeepHurtn! · · Score: 3, Insightful

    Well, it is going to happen to some extent anywhere, but the thing is that there seems to be a culture of tolerance and acceptance of it in the States. It's expected. I can never believe that rape is something that is just casually joked about in the US. Also, many states have severe overcrowding with understaffed and undertrained security. That certainly doesn't help.

  13. no way, jose by John+Seminal · · Score: 2, Insightful
    he should go to jail. why reward bad behavior? it is about ethics, about right and wrong. the hacking was wrong, now he is going to jail.

    better yet, pass a law that says anyone convicted of a computer crime can't work with computers. something like what they do with criminals who harm children. laws make it illegal for them to work or be around children.

    even with driving privliges, after so many tickets, they will take a drivers license away.

    oh, about your statement that incarceration is a waste of money, no it is not. it keeps these animals out of mainstream society, and after their sentance is done, they will still be in databases so we know who they are. that is the real value. employers can weed them out. better colleges can make admissions more difficult. neighborhoods can make living there difficult. it is all about punishment. no more three strikes and you're out. i say, fuck up once, and that is it.

    --

    Rosco: "If brains were gunpowder, Enos couldn't blow his nose."

    1. Re:no way, jose by mboverload · · Score: 4, Insightful
      No way. Even for a hacker restricting computer use is WAY too far. Computers are a part of life that one can not avoid. It would be like restricting the use of the kitchen because you hurt someone with a knife.

      As for your comment about fuck up once and your out, keep in mind many convictions are of innocent people. Also, the only way to start to get these people into society is to get them JOBS! Give them a meaning to life and a way to support it. I know I would want help if I ever fell into crime. To humans purpose is extremely important. Onc eyour in jail long enough you just loose all sense of that. I had an uncle in prision and he told me all about how it screws with your mind. He is now legit and all, but some of it still lingers.

    2. Re:no way, jose by m50d · · Score: 2, Insightful
      Forced labour would hardly be "rewarding" what he did. It's just punishing him in a way that gives more benefit to the rest of society.

      And I think you're being excessively hard. If that's how things should work, why don't we just execute everyone, first time, for any crime? We believe people can be reformed, that they should go to prison or do community work or pay a fine, somehow pay their debt to society, and then be allowed to start over.

      --
      I am trolling
  14. Throw the book at him... by ttys00 · · Score: 5, Insightful

    ... and hope nobody realises that if this guy can read secret service emails by himself, foreign government intelligence agencies (ie. whatever the KGB is called these days) with more resources and more staff must be finding it laughably easy.

  15. Re:ironic, bank lending = counterfeting by Anonymous Coward · · Score: 4, Funny
    All your dollars are worth-less.... buy gold now @ kitco.com

    If my dollars are worthless why are you going to give me gold for them?

  16. Re:ironic, bank lending = counterfeting by ikkonoishi · · Score: 2, Informative

    *buzzer* Wrong.

    Sorry you fail at finace.

    http://wfhummel.cnchost.com/banklending.html

    Basically the bank lends money out of the money deposited in it. It has to keep a certain amount of liquid cash availible, but it can actually have less on hand cash then it has money in its accounts. This is done by having the banks borrow money from the FED. If you were to try your scheme you would quickly find yourself out luck when the Fed refused to loan you any more money and called in your debt plus interest.

    Banking like anything else in a market economy a giant balancing act between supply and demand. The money "made out of thin air" is called profit. Its this wonderful concept of when you have something worth less to you than someone else is willing to pay you for it, both of you make money. Since the other guy would have paid more somewhere else and you would have taken less somewhere else.

    In this case it is refered to as "interest on funds loaned". You make a loan in expectance of it being paid back with interest, and people loan you money expecting you to pay them back with interest.

    At least you are right on your last point. To scam involves gaining money at someone else's expense. If everybody gains then there is no scam. Just as there is none here.

  17. Re:Get a clue, idiot. by gl4ss · · Score: 4, Insightful

    by offering them a chance to wank off instead of turning into raping each other? by making it less accepted, making the prisons less overcrowed? with that attitude, why do you mind about rapes outside of prison?

    you know, it's not really civil to punish one from selling crack by few years in prison and 88 assrapes - it would be considered quite uncivilised if it was said out loud like that in court(it would be torture! or death sentence if you manage to get hiv). for a country that prides on having standard freedom and rights for all it's quite backwards to be thinking that you lose them the second someone deems you guilty.

    --
    world was created 5 seconds before this post as it is.
  18. A mere pittance by QCompson · · Score: 5, Funny

    $250,000? That's nothing! At least he wasn't caught sharing four or five songs...

  19. why hackers get caught by Anonymous Coward · · Score: 2, Insightful

    The only real reason why hackers get caught is because they always have to boast about what they have done.

  20. Re:Enlightenment by geoffspear · · Score: 2, Funny
    Maybe someone needs to inform the media that ESR has decided to deprecate the term they're using.

    I think they're more likely to keep using a real dictionary, though.

    --
    Don't blame me; I'm never given mod points.
  21. Cat's out of the bag by Doc+Ruby · · Score: 2

    "Sources say the hacker was also able to download candid photos taken by Sidekick users, including Hollywood celebrities, which were shared within the hacking community."

    Where are these photos?

    --

    --
    make install -not war