The Story of the Pedophile-catching Hacker
missing30 writes "A Turkish hacker seeding usenet groups with trojan horses has made it a habit to hunt down pedophiles trolling the groups. The cases go back to 2000, with the mysterious good samaritan responsible for several arrests. The man now has tacit approval from the FBI for his actions." From the article: "At the urging of Montgomery Police Capt. Kevin Murphy, '1069' eventually turned over more and more information that led back to a computer owned by Bradley Joseph Steiger, who had worked as an emergency room physician in Alabama. The hacker's finds included information from Steiger's AT&T WorldNet account, records from his checking account, and a list of directories on his computer's hard drive where sexually explicit photographs were stored."
I say the ends don't justify the means.
I don't think the police should be allowed to use illicitly gained information or that they should be allowed to encourage private citizens to commit felonies.
>
>"we have not seen anything to indicate that this person is other than...a citizen of Turkey."
> That turned out not to be entirely true: The FBI actually had made contact with "1069"
>through a U.S. phone number
>
Where does it end?
If it is OK to do to catch pedophiles then it is OK to do the catch terrorists and I know I've read several accounts of where patriot and other anti terror acts have been used for entirely unrelated crimes.
Who will guard the guards?
To hack anyone as long as you say you are hacking to catch "pedophiles"? Sounds more like the FBI trying to side-step normal limitations of spying on people.
Great Intellect...
Next time a hacker will plant the images himself and then get brownie points with the FBI.
Patents Drive Free Software as Hurricanes Drive Construction Industry
Otherwise, anyone in
Oops. Sorry. Those credit card numbers were accidentally leaked, along with your Social Security Number and such.
But at least those Russian "hackers" know you weren't collecting kiddie porn.
This scares the crap out of me. Some third party "hacks" it to a computer of and idividual and claims he/she found child porn/terrist plots/cream cheese recipies....or whatever. Why isnt anyone yelling...... he/she might have just as well planted it themselves how are we to know? He/she had access to the computer. Seems like a real easy way to get someone in trouble they arent going to check. This is the reason the FBI and other "Gov" police agencies have rule that have to be followed. This is sick and very scary. I am not saying that they didnt do it but damn, talk about an easy way to railroad someone.
I've read that this is quite a common excuse used by people caught in posession of child pornography in the UK. They say "look my wi-fi connection isn't encrypted, it could have been a hacker that put those images there". Apparently it doesn't work as a defence because they are responsible for the security of their own computer.
Interestingly though, if they catch someone stealing an Internet connection via unsecured wi-fi, it's the person who is using the connection that is at fault, not the person who's failed to secure their Internet connection.
I find myself torn after reading the issue. Obviously, what hacker 1069 is doing is good and aiding the authorities by stopping the exploitation of children. However, his means are questionable as well as those of the authorities.
What if third party multinationals are allowed to hack into US systems to aid in the capture of terrorists? Obviously, there was a large amount of evidence provided that made sure the pedophiles being caught were definitely guilty, but couldn't evidence just as likely be planted?
What's even more concerning is that this person doesn't seem to be a third party hacker from Istanbul, but an American citizen (note the american telephone number). If this is the case, isn't this a message saying vigilantism (which strikes at the very base of authority, the fact that it is only the government that is allowed to use force against it's citizens) is accepted? If it is accepted in catching pedophiles, which is a pretty black and white case, what about when it enters the gray areas? What about when it starts being entangled with constitutional rights? (Due process of law seems to be a big one involved).
I believe the authorities involved might very easily have started on a slippery slope. Who knows where it will lead? How much do we value due process? How much do we value freedom? How much do we value results, irregardless of how they were gotten?
But remember:
"Any society that would give up a little liberty to gain a little security will deserve neither and lose both." - Benjamin Franklin
A quandry indeed.
This guy seeded alt.binaries.pictures.erotica.pre-teen, and clearly did it with the intention of catching paedophiles. I'd say it's justified.
I hate to be this guy, but I just have to remind everyone that being a paedophile, in and of itself, is not against the law. To do so, we would be making certain thoughts illegal. This seems to be often overlooked. Possessing underage erotica is certainly illegal, but just being a paedophile is not.
I am not yet a lawyer, and this is not legal advice, but I'd say there are two problems here. The first is that judges and juries don't understand technology the way we do, and all they will have to go on is expert witnesses, whom the prosecution would deliver as well as the defense. The second is that when the DA offers a deal, which they will given the desire for an easy conviction, the suspect have to ask himself if he wants to take a very big gamble.
In a more perfect world, plea bargaining wouldn't exist (nor be thought of as "necessary" by a system loaded with vice-crime offenses), our courts would allow scientific facts to be determined through inquisitorial "expert" judges rather than juries, and the FBI and law enforcement wouldn't be cooperating with self-confessed law breakers to catch innocent-until-proven-guilty suspects, who at worst are shown simply to possess an image of an act (not actually participated in the act) no more or less heinous than videotapes of the twin towers falling and killing 3,000 people. (i.e. the images themselves are just images, its the unprovable-without-confession arrousal that is the sick act.)
Anyways, G-d Save the Constitution.
The fact that the hacker was trying to catch pedophiles is the last concern when figuring out if this is lawful or not. First and foremost, he broke into people's computers and did unlawful things to illicit his information. On those grounds alone it should not be admissible in court. Imagine if you were a store owner and you arrive there one day and see that your place has been broken into and all your files have been gone through. Then you find out that it was just a rogue 'burglar' who breaks into businesses to see if they're legally filing their taxes correctly. The government sides with him and you're left with a hole in your store, thousands of dollars in damages and uncountable damages from the data he might have taken from you, etc... Is that fair or even close to legal? Sure there's lots of hatred towards pedophiles and it's VERY easy to step aside and cheer this because it's presumably dropping their numbers, but the bottom line is it's intirely immoral regardless of whether he's stopping pedophiles, rapists or tax evasion.
And no, a private third party coming up with incriminating stuff isn't evidence. That's what Police are for. Remember? Due process and such? You must have already heard it, although it's slowly getting rotted off over there.
Sometimes us civilized folk think you hillbillies never made it out of medieval times with witch hunts and all that. Exchange witches with pedophiles and you're right on track again. Yep, very civilized. *rolls eyes*
There was nobody involved in this story who touched kids, as far as I understand. The alleged crime in question was storing illegal images.
"Oppression and harassment is a small price to pay to live in the land of the free." -- Montgomery Burns.
Another point:
"This guy could be doing some real garbage cracking, screwing with legit business and good people, but, he didn't."
How do you know he didn't? There is nothing to stop him from doing both good *and* evil. In fact, the FBI seemed to give him a pass on his hacking activities for the good he was doing. What a great opportunity for someone who wanted to do a little evil on the side.
Computers are useless. They can only give you answers.
-- Pablo Picasso
Its not the "sick arousal" that's the problem.
The images are a problem if they encourage people to go catch kids to make those images.
If a guy is unlucky enough to be a pedophile, he is expected to avoid sexual satisfaction as to avoid harm to children. You can't expect something that's probably genetic or in any case not in the control of the person to be controlled (i.e aroused by child porn) but you can expect him to do whatever is necessary to not act upon those urges.
The pictures of the WTC are not the encouragement for such acts, and are not problematic - so you cannot compare them with the images that required child abuse and made only for those who seek to view them.
Thank you for being that guy. As a pedophile myself, it is very tiring to read of "pedophile-catchers" and how terribly evil pedophiles are. I did not choose to be a pedophile, and it is without my reach to change. Still, it is not hard for me to live a perfectly crimeless life. At 30, I have never had sex with anything but my palm (that statement may not have a very dramatical effect, considering this is Slashdot), and I am at peace with the prospect of dying as a virgin. Dying (and living) alone, however, is not as nice, but you make the best of the cards you've been dealt in life.
How very appropriate that the captcha Slash dealt me was "reject".
In this case, our heroic hacker has done his job, he's found the pedophile, now it's time for him join law enforcement, assume some responsibility and accountability for future actions, and go legit.
Vigilante justice is sometimes needed to fill the gaps, but society's the worse for it if the problem requiring vigilantes remains, or if the vigilantes remain unchecked.
--- Grow a pair, liberals... stop letting the Republicans bully you!
There's a reason why illegally gathered evidence should be disregarded. Maybe the hacker is the ex of his girlfriend? Maybe he doesn't like his political orientation? What some random guy (illegally) digs up should not count as evidence in any civilized society. There are always people with hidden agendas who abuse the system to get what they want. I don't think for a minute that this hacker isn't one of them.
1. Why are newsgroups such as this allowed to exist in the first place?
2. The hacker was putting trojans in a newsgroup that existed for the sole purpose of distributing child pornography, which;
3. The arrested went to on his own volition;
4. The FBI didn't contact 1069 and have him hack others' computers; he contacted the FBI with the information;
5. The FBI investigated the arrested person and discovered that not only was he in possession of child pornograph but;
6. He was involved in the manufacture of it by taking photos of himself with his victim, aged 4-6;
7. Let him rot in jail.
The level of hatred isn't really justified, considering that the crimes of rapists, murderers and slave owners(they exist), are far, far worse. People never seem to get to the same level of arousal unless pedophilia is involved in some way. It's not even that major of an issue, despite its oversell by the media.
It's the 21st century's Two Minute Hate, so we can all wax apoplectic at those evil, evil men, and gladly offer up our free society to do so.
May the Maths Be with you!
If the U.S. government is allowed to prosecute based on the fruits of information obtained by a circumvention of their laws (whether within or without their country), their laws become worthless. Absolute governmental power has the greatest potential for massive abuse, so we agree to give up some of their protection in exchange for protection from them. We take a couple negatives to mitigate the odds on huge negatives, in your language. A child molestor might abuse a couple children and scar them for life, but the government can frame an innocent man as a child pornographer, put his kids in foster homes, and lock him in jail for the rest of his life.
That's not interesting at all - it's simply an extension of the 'unlocked door' doctrine. I.E. just because you leave your door unlocked, that does not grant permission for someone to enter it univited. (Unless one is maintaining an 'attractive nuisance', like a pool for example - then the onus transfers back to the owner of the door.)
Your heart lies to you. It tells you about the good things that could be without pointing out their unlikelihood or the bad alternative outcomes.
If 1069 never went after non-pedophiles, and if he never presented false evidence, and if the FBI's use of that evidence didn't violate any rules and encourage the public to come to accept illegal activies from the police, then this could be a good thing. Break any of those ifs, though, and the result is a terrifying distopia that I want no part of.
My heart agrees with you: pedophiles are scum, and as a parent, their mass death wouldn't bother me one bit. However, my brain thinks that we need to step back and re-assess whether we want to revert to vigilante justice, and that due process and rules of evidence are far more important than any individual situation, regardless of how horrid it may be.
Dewey, what part of this looks like authorities should be involved?
Ah yes - anything for children, rights and due process be dammed.
And I should note in passing, that possession of pictures != abuse of a child by possessor. Except, that legally it is - which is thoughtcrime, which is a Bad Thing. By extending the same legal principle - all those pictures of murder victims in true crime books? Possession of one should make one also responsible for the murder. But it doesn't.
He didn't 'go after the scum', he happened across the scum in the course of committing a crime. I don't think for an instance it's either the first or the only crime he's comitted.
I can't believe they'd ask the guy to keep "investigating." It seems to break every basic rule of police procedure and preservation of evidence.
If this guy's defense lawyer isn't a total retard, or if he doesn't blow it and confess under interrogation, he's going to walk.
All he has to say is "hey, I don't know where the porn came from -- my computer was hacked! The police even have proof that some mysterious Turkish guy was in my computer!" And what are the police going to say, ask the judge and jury to take the word of some anonymous guy on IRC, that he didn't plant the evidence?
When you do your 'investigation' that way, they're creating a hole the size of the Titanic.
Look, I don't like defending kiddy pornographers, but it seems like a pretty good defense that there's a good possibility that you're being framed, when all the evidence came to the police by way of some mysterious, psuedonymous foreigner who had the opportunity to plant the material themselves; unless Mr. Turkish Hacker is willing to come and testify, that is.
"Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
The entire point of this article is that the information was gathered by committing a crime.
Yes, there are several ways to tell if and when files have been modified, NONE of which can't be subverted by a capable hacker.
If this guy is clever enough to deploy trojans, he's in the business of fooling people, and your typical "forensic specialist" would be a pushover to him. Your statement does not match reality... it may get more airplay because many expert witnesses, especially in the field of technology, are more politicians than technologists and the court doesn't know better, but it won't fly here.
This reminds me of the recent publicity over the VA laptop computer that was stolen, and the feds claimed they recovered it and the data was "untouched". 90% of everyone who routinely participates on Slashdot knows that's a total load of bullshit. The VA data, encrypted or not, could have been copied without anyone ever knowing. Save those lies for people who know better.
Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
Okay you got me on semantics. Argumentative much? I was trying to be concise! I thought the subject line made my point clear...
1069 is not a vigilante.
1 - 1069's action was arguably illegal but not immoral (considering intent)
2 - it was not violent
3 - it was appropriate, surgical even, use of expertise - no tampering
4 - no risk to any third parties or innocents by his hack
Oh yeah and did you read the part where the COPS TOLD HIM TO DO IT?
1069 did the right thing and he handled himself honorably. He could have just as easily broadcast the suspects' info all over the net, forcing them to turn themselves in to avoid inevitable 'sidewalk justice'.
Again, because he said so? Otherwise, breaking into a computer is as close to tampering as it can get.
Unless you assume the victim of the hack to be guilty in the first place, then yes, there were no innocents.
I can't think how this whole thing could be any more fishy. You jump to judging the guy and praising the hacker, because the subject is child porn; or to apply the meme: "Won't somebody think of the children!"
It's scary how you dismiss due process because the crime gets to you on a personal level or whatever.
Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
The NYT recently published a chilling study of Internet usage by pedophiles who did much worse than simply store dirty pictures on their hard drives.
I read the New York Times article, and it was far from "chilling". I think it would be more accurately described as sensationalistic. What exactly were the pedophiles doing on the internet that was worse than storing dirty pictures on their hard drives? Chatting with each other? Oh the horror!
A ten-year prison sentence for knowingly abetting a felony on the Internet could help
Please explain, Captain Think-of-the-children, what you mean by this statement. Are you suggesting there should be a 10 year sentence for approving of certain actions? If I say, "I approve of girls having sex at the age of 15," I should go to prison for 10 years? So much for freedom of speech.
If crime in the U.S. reaches the level it has in the former Soviet Union, there will be no Bill of Rights left to protect.
This type of statement is often used to argue, "In order to save the Bill of Rights, we have to ignore the Bill of Rights." Complete rubbish. If you want to abandon the Bill of Rights and everything the United States is supposed to stand for, just come out and say it.