AOL Security Compromised by Teenager

Freaky_Friday wrote with a link to an InfoWorld article about a teenage kid accessing customer information at AOL. The alleged criminal trespass began late last year, and extended up through early April. According to the article, the guy used some 'off-the-shelf' hacking software he downloaded online to gain access to, and then transmit information from, AOL's systems. "The complaint states that Nieves admitted to investigators that he committed the alleged acts because AOL took away his accounts. 'I accessed their internal accounts and their network and used it to try to get my accounts back,' the defendant is quoted as saying in the complaint. He also admitted to posting photos of his exploits in a photo Web site, according to the complaint ... If the defendant was honest about his motivation in his reported confession, it's safe to assume that he wasn't interested in stealing data for financial gain, [Managing director of technology at FTI Consulting Mark] Rasch said. Still, it'll be interesting to find out what steps AOL is taking if customer data was in fact compromised, he said."

Comments

Curious....

[ScottKin]

I, for one, would like to know why he lost his original AOL accounts in the first place.

Hacking, maybe? ;)

ScottKin

Re:Some of us say why others say why not?

[dreamchaser]

No, we need kids who don't go getting their accounts cancelled then break the law trying to get them back. We need kids who think up positive creative solutions to problems and aren't malcontents. He *should* face criminal charges. If he was banned wrongly there are other avenues to pursue. Not punishing him would just encourage others to do the same type of thing.

Suuurrree

[FalleStar]

Among his alleged exploits:
* Accessing systems containing customer billing records, addresses, and credit card information
* Infecting machines at an AOL customer support call center in New Delhi, India, with a program to funnel information back to his PC
* Logging in without permission into 49 AIM instant message accounts of AOL customer support employees
* Attempting to break into an AOL customer support system containing sensitive customer information
* Engaging in a phishing attack against AOL staffers through which he gained access to more than 60 accounts from AOL employees and subcontractors

Yeah, sounds like he was JUST trying to get his account back alright.

Re:Suuurrree

[VirusEqualsVeryYes]

Engaging in a phishing attack against AOL staffers through which he gained access to more than 60 accounts from AOL employees and subcontractors

You'd think employees of an ISP, who routinely warns its customers about it, would be wise to rudimentary "attacks" like phishing scams.

This kid's a punk.

[Anonymous Coward]

He might have been ratted out by his hacking crew, but he deserved it. He is a jerk, special ed all his life for anger issues. And it wasn't just AOL, so that BS about "just trying to get my account" back doesn't fly. The jackass was so freaking high on himself that he would use social engineering to gain access to companies databases, then send screen caps to the FBI. Including his aim handle. Which he also had on his myspace page. Dumbass.

Re:Some of us say why others say why not?

[TubeSteak]

He *should* face criminal charges.

Yes

If he was banned wrongly there are other avenues to pursue.

This is AOL we're talking about.
In what bizarro world does AOL have good customer service, such that they'd investigate and remove a ban?

What are these other avenues?
A civil lawsuit?

Uh, "hacking crew"?

[Anonymous Coward]

You make it sound as if they had a clue. These are just a few k1dd13z doing the kind of shit which only k1dd3z do.

They believe that they're "special" because they did it, all the while not realising that anybody can do it, but it's just that only retarded k1ddi3z are actually bored enough, or have the time to waste to do something as lame and loserish as "hack" AOL.

Re:Some of us say why others say why not?

[golgoj4]

you know, if I had mod points I would throw some your way. Yeah he needs to be punished, but I think a fine line between punishment & use of his knowledge would be fine. Alienating people doesn't seem like such a good idea. Maybe put him in sort of community service type of position where he can see a benefit when actually contributing as opposed to just wreaking havok. But my whole opinion really hangs on his reasons for doing what he did. if his intent was as he says, why not try to bring him into the fold? Not without some penance of course...