Hacker Gary McKinnon Interviewed

G0rAk writes "The BBC World Service has a half hour audio interview with British hacker Gary McKinnon. As recently reported on/. and BBC News, Gary was arrested and freed on bail pending extradition proceedings to the U.S. There, he faces charges of gaining unauthorised access and causing criminal damage to military computers in his search for evidence of UFO coverups and anti-gravity technology of extra-terrestrial origin. In a very candid interview, Gary re-affirms that he had no malicious intent, was amazed at the ease with which he penetrated the networks, explains in detail what evidence of UFO coverups he saw, describes a personal journey through hell as he became obsessed with the project and how very scared he is that he could be facing up to seventy years in a Virginian jail. A bit of a nut, perhaps. But a fascinating listen that helps a lot in making that judgment. The Interview can be listened to with RealPlayer from 11:32 GMT (06:32 EST) on Saturday until the same time next week."

Comments

Re:Thank you Gary

[thelost]

I found a recent interview with him interesting as in it he mentioned that he was far from the only one nightly sneaking into US Gov computer networks, saying that he saw many others from all over the world doing exactly the same as him. How well protected are these systems really then?

My Experience

[techsoldaten]

I have experience working with the U.S. Federal Government as an IT contractor in various capacities. While I find it completely possible Mr. McKinnon penetrated a system using a default password and was able to access various documents, I strongly doubt people's interpretations of what he saw.

This is based on several factors in his story, including the ease with which he was able to penetrate this system as well as the total lack of understanding of the English language common to people in positions of authority in the U.S. Federal government.

First off, I have had the displeasure of being party to audits by the Office of the Inspector General and am familiar with their standards for assessing IT policy based on the security level of content being housed on the server. They are fairly standard, highly regimented, and include every possible protection someone could have imagined 3 years ago.

While these requirements do not automatically extend to military networks, they are regarded as being less stringent than military networks (for instance, you will commonly see references to 'military grade standards' when receiving proposals from other contractors).

One specific requirement of an OIG assessment is evidence of the enforcement of a password security. They check to see whether users are required to have passwords, how often passwords expire, how many characters should be in each password, the minimum number of characters that must be non-alphanumeric, etc.

The type of content Mr. McKinnon accessed surely would have been classified secret if it referred to a non-public military capability, and would probably be top secret if it referred to something of extraterrestial origin. 100% of servers containing secret documents are hardened against attack in public agencies, and I would assume the same is true with the military.

All this leads me to believe it is extremely unlikely Mr. McKinnon saw what he thinks he saw, or else he is probably not being truthful in his description of how he cracked the system. I prefer to think of this in the former, but cannot really render judgement without seeing the source materials.

The other reason I am extremely skeptical of the idea Mr. McKinnon understood what he was seeing is that people in positions of authority in the U.S. Government and in the military tend to be unable to understand English to the point they are bordering on illiterate. This is not an exaggeration, I know of several agencies that require all of their SES officers to attend remedial English classes as a requirement for employment. These people commonly use words with total disregard for their meaning, their memos often communicate instructions which are exactly the opposite of their intended message, and most importantly, they give names to things which are wholly inappropriate.

If Mr. McKinnon saw a memo referring to non-terrestrial officers, we can only guess at what that term may mean. My guess is that it refers to aerial or naval forces, but it really could be anything.

M