Hacker Tries To Land IT Job At Marriott Via Extortion
wiredmikey writes "A tough global economy has certainly created challenges for many people looking for jobs, but one Hungarian man took things to another level in an effort to gain employment at hotel giant Marriott International. On Wednesday, the 26-year-old man pleaded guilty to charges that he hacked into Marriott computer systems and threatened to reveal confidential company information if Marriott didn't offer him a job. Assuming his efforts were working, with the possibility of a new job with Marriott in his sights, the hacker arrived at Washington Dulles Airport on Jan. 17, 2011, using an airline ticket purchased by Marriott for him. He thought he would be attending a job interview with Marriott personnel. Unbeknown to him, he was actually being 'interviewed' by a Secret Service agent posing as a Marriott employee."
He should've used Guru Meditation instead!
Why is the Secret Service involved? This doesn't seem to involve currency or protection of VIPs.
Quattuor res in hoc mundo sanctae sunt: libri, liberi, libertas et liberalitas.
I wonder if there is an equivalent of Darwin awards for IT/Geek/Nerd stuf...
He entered American soil, so American laws apply to him.
I dream of a nation where a man is not judged by his skin color but by an number assigned by a credit rating agency.
"I love stupid criminals" ...
One wonders what this guy had in mind as his best case scenario in this endeavor.
How did he think this was going to turn out, and in what world does he get to keep the job and his freedom and the money?
Sig Battery depleted. Reverting to safe mode.
He went to a country where he knew he had broken the law. He had to know that arrest and prosecution was one of the possible outcomes.
He gambled. He lost.
I won't join Slashcott. OTOH, If Beta goes live, I just won't be back until it's fixed. Sorry Dice.
Once up, the article woouldn't load, but gave:
Error 503 Service Unavailable
Service Unavailable
Guru Meditation:
XID: 0000000000 [true number changed]
Varnish cache server
I had never seen the Varnishcache server before. So, I use Google, and one of the first hits is a link to a Slashdot article, also detailing FBI work: http://www.dslreports.com/forum/remark,26358766 [dslreports.com]. Here is their discussion:
reply to antdude
Re: HideMyAss.com Doesn't Hide Logs From the FBI
said by antdude:
http://yro.slashdot.org/story/11/09/25/0415213/hidemyasscom-doesnt-hide-logs-from-the-fbi [slashdot.org]
Link doesn't work for me....
Error 503 Service Unavailable
Service Unavailable
Guru Meditation:
XID: 853827040
Varnish cache server --
GuruGuy
Ok, once is ok. Twice. Hmmm. Three would be a hit.
How do you submit a story that doesn't trigger anything human but only an automatic reconnaissance, or vice versa. It would be fun to see if this follows a pattern.
This sounds very familiar - http://news.slashdot.org/story/11/11/26/206252/china-to-cancel-college-majors-that-dont-pay
And a link within http://www.thedailybeast.com/newsweek/2010/06/19/smart-young-and-broke.html
"Guo and an estimated million others like him represent an unprecedented and troublesome development in China: a fast-growing white-collar underclass. Since the ’90s, Chinese universities have doubled their admissions, far outpacing the job market for college grads. This year China’s universities and tech institutes churned out roughly 6.3 million graduates. Many grew up in impoverished rural towns and villages and attended second- or third-tier schools in the provinces, trusting that studying hard would bring them better lives than their parents had. But when they move on and apply for jobs in Beijing or Shanghai or any of China’s other booming metropolises, they get a nasty shock."
So, this Hungarian man this article is about probably belonged to the same class, unemployed with a specialized degree.
Europe and the US have had this situation for thirty years, but for China it must be some shocking news. How many Chinese cyber-crimes more do we (or Chinese hotels) want? We have enough of the Hungarians.
It's been happening all over Slashdot, not just on FBI-related articles. The Slashdot administrators need a more reliable server. You need a qualified mental health professional.
I usually don't feed the trolls and the idiots, but I'm bored this morning...
On the most basic level, committing a crime in a foreign country puts you at odds with the justice system in that country; if you're a citizen of county A and commit a crime in country B and the police from country B catches (or extradites you) you will face court and possible jail time in country B, not in country A where you are from.
So while having the offended party (Marriott in this case) pay for his ticket to fly over might be considered entrapment in a number of jurisdictions, it's perfectly legal in the US. His crime was to hack the Marriott, his downfall was his stupidity to travel to the US afterwards.
Everything in the world is controlled by a small, evil group to which, unfortunately, no one you know belongs.
Smart enough to hack into an international company's network, but not smart enough to realize that an extortion attempt wouldn't have someone getting him arrested. Where is Darwin when we need him? :|
it is definitely an outta the box way to try to get a job but when you" threatened to reveal confidential company information". That is fire that you are playing with if that company just decides to file charges. But even finding a flaw and telling them about it can be bad like that one guy in Australia i think it was, he found a hole told the company about it, kept the info on the hole off the web. They turned around and sued him for the money it would cost them to fix it.
http://it.slashdot.org/story/11/10/14/2129228/security-researcher-threatened-with-vulnerability-repair-bill
Should have had a dead-man's switch somewhere. If nothing else, someone back in Hungary who publishes the info if anything bad happens to him.
What can I say... he pretty much deserves what he got.
http://articles.chicagotribune.com/2011-11-25/business/chi-state-lawmakers-poised-to-act-on-tax-breaks-for-sears-cme-20111125_1_income-tax-tax-credit-cme-group
So we know that the Hungarian guy was trying to use what he perceived as his individual power to force Marriott to give him a job. Now we see two large Illinois companies use their real power to skip out on their corporate responsibility to support the state. They consume a lot of state resources, and they use their political influence to be parasites and free loaders. Since they got away with it this time, what's to stop them from deciding that they are going to pay no taxes in the coming years, like GE did last year?
All I see is the rich and powerful get away with de-facto extortion, and the individual getting nailed for trying to extort. One set of laws for the rich, another set for the poor.
Why is Snark Required?
Do you count Greece as part of East Europe? If so, I agree with you.
that a person can be smart enough to commit a crime like this, but stupid enough to come to the very country where he can be held liable. Just goes to show that humans can have, and by the same token lack in many different types of intelligence.
In other news, sensitive information relating to Marriott International was release from a computer in Hungary about 24 hours later...
In still other news, the NSA just hired a Hungarian computer hacker.
Now just avaiting dead-hand trigger software to release said spicy details into the wild.
45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
I can see the HR person now;
"So, by hacking us and threatening to divulge confidential information you have shown that you are not trust worthy. You expect us to hire someone we can not trust to be on out premises and roam freely in secure areas? Get real."
You can be smart and yet incredibly dumb.
In Hungary, they send their unemployed to hard labor camps to get any government assist.
I believe the proposed legislation says that after six months of being on unemployment benefit, you must do 4 hours of public service a day to continue to receive said benefit. Hungary is a member of the European Union, there are no forced labour camps or any such Stalinist nonsense (which doesn't mean there isn't massive corruption etc., but that's another issue). Next time please inform yourself before posting idiotic shit.
This isn't entrapment.
He wasn't lured into comitting the crime. He was lured into getting himself arrested.
he got a home and something to eat for a longer time...
So while having the offended party (Marriott in this case) pay for his ticket to fly over might be considered entrapment in a number of jurisdictions, it's perfectly legal in the US.
Entrapment in the US law sense happens when someone persuades you to commit a crime that otherwise you wouldn't have committed. US authorities are not allowed to do that, and it is a decent defense if you can show that some US authoritiy did this. It's not a defense if a private company does it.
But that didn't happen here. The crime was already in progress (the hacking had happened, and the extortion was in progress), so even if the US police had concocted this plan, it would have been absolutely fair game to find and catch a criminal.
Doesn't that make all jobs hard labour camps?
It's not like hacking is legal in Hungary. Although I guess it would take longer to prosecute him in Hungary, knowing the glacial pace of the Hungarian justice system.
He entered American soil, so American laws apply to him.
And now he checked into another hotel...
When you are talking small purchases, no there is usually no room for negotiation. However turns out when purchases get large, you have some power. When I was getting a new A/C for my place I solicited multiple bids. After that I took the bids I liked best in terms of what I was getting, but not in terms of price, and talked to them again. When they found out I had other bids, all of a sudden the price went down. I wasn't "extorting" anyone. I was just giving them a change to be as competitive as possible. I'm not going to pay more than I need to.
Plus let's not pretend like Sears is making out like bandits. Their business has been hurting. Currently their profit margin is slightly negative, meaning they are losing money. In a situation like that, more taxes are not such an affordable thing.
Really don't know what else to say.
Join the Slashcott! Feb 10 thru Feb 17!
It's not a defense if a private company does it.
Off topic, but that makes you think twice about privatisation of everything and the effect of small government could have on individual liberty. If the police is using contractors like the army does for example, does that mean they can use entrapment ? Chilly sunday, I think I'll go back to bed.
Well, how about that. AC whooshes /. I bet that never happened before.
As always, all IMO. Insert "I think" everywhere grammatically possible.
You missed what the AC was trying to say, though one can certainly understand why. In another Slashdot article many were outraged that a non Thai citizen was subjected to Thai laws (actually, he turned out to have dual citizenship.) Those same people will likely, in many cases, argue the opposite here of course ;-)
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
I have seen a lot of inflated egos in IT. But this cretin beats them all.
Typically the real experts do not have them though. Those with very high opinions of themselves and advertising it are usually mediocre or worse. In fact it is a pretty reliable indicator. The Dunning–Kruger effect allies very much. It both explains the number of arrogant idiots and the number of incompetent people in IT.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
The cases aren't identical.
First, it's easier to sympathize with the Thai guy because I think that law is ridiculous. I understand that's an emotional reaction and not a basis for a rational argument, but I figured I'd put it out there instead of trying to pretend there's no bias in my thinking.
Second, and much more important for this argument, I'd be fairly surprised if what he did was legal at home. It's not like he traveled to the US and was suddenly surprised by the uniquely American distaste for extortion. His behavior was criminal in just about any place I'd care to travel to. He's being prosecuted by the US because he did it to a US company (and came onto US soil).
William of Ockham had no beard. The most likely explanation is that it was chewed off by squirrels every morning.
"So, by illegally downloading copyrighted content, then distributing it worldwide, then when called on it you defended the practice by stating it's all about 'bringing down the man' you've shown you can be trusted with access to our content? Get real!"
Everything you said is true. In addition there's also the fact that in the Thai case, everything the guy did that was against Thai law was done in the US. As far as I can tell, his visit to Thailand had nothing to do with the crime he was being charged with. However, in this case, the extortion didn't end it Hungary. When this guy set foot in the US, he was still the the act of extorting Marriott.
The 1930s were... well, I'll leave your state-provided education to calculate.
Godwin's much? Different states and polities, past and present, have provided for government-sanctioned work in exchange of (or as a way to compensate for) benefits without involving inhuman, cruel ideologies. I will leave your whoever-provided-by education to verify this.
To simply take the concept of working at a state-designated job as a condition to receive unemployment benefits after a certain period of receiving them without any questions asked is it really that inhuman? That cruel? I would actually argue that this has been the very premise of humanistic, state-sponsored well-fare since the times of Hammurabi. Heck, possibly it's been one of the threads of the very fabric of society since men formed the first hunter-gathered bands eons ago.
For you to mention the rise of Nazism as a counter-argument of my previous post would seem to suggest that indeed, there is an undeniable and unavoidable link between the two. That one is a sufficient and necessary antecedent, and that the other is an inevitable consequent, or that both are of a similar (if not equal) nature.
That is one hell of a supposition, one that does not hold water. More than a supposition, it is a premeditated amalgamation of a strawman with an attempt to paint guilt by (a yet to-be demonstrated) association. Your argument is not an argument of logic or reason or one based on historical precedence. It is not an argument of morality of ethics (normative or otherwise.)
Your argument is not one extracted out of reason, the exercise of logic, or a set of ethics. Instead, your argument is built on a fallacy, one that you built yourself to carry out an argument, a line of thought that is demonstrably false despite your insane primal need to pursue it. Your argument is nothing more than a matter of rhetorical convenience and mindless ideological posturing.
He didn't commit the crime at home. He traveled to the US over an IP link and committed it in the US.
No, he is being prosecuted by the US because he committed a crime in the US and when he physically traveled to the US the US authorities no longer had the hassle of extradition as a barrier.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
No, it isn't.
Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
i heard he threatened to release a sex-tape of the founder's great-granddaughter, but later found out everyone has already seen it.
"Well, good luck finding a judge that doesn't run a bestiality site."
This sounds exactly like that sketch from The Onion Movie. "I ain't askin' for no god-damn handout, I want a muthafuckin' job, bitch!"
Entrapment in the US law sense happens when someone persuades you to commit a crime that otherwise you wouldn't have committed. US authorities are not allowed to do that...
Wait, what?
https://encrypted.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=fbi+entrapment+cases
I bet he just use the Secret Service name due to complete ignorance of facts.
Secret Service is never use for this kind of things. Their job is to protect the President and other VIPs.
Everyone knows that you need a backup plan. This guy should of clearly communicated and had a dead man switch setup. If this guy doesn't click a button on a webpage everyday then that torrent gets seeded. This guy should of practiced negotiating with his family before trying to negotiate with a US company.
~/ Workin' on the chain gaaaang... /~
15 Years. Ouch. Too bad the prisons don't pay so well either.
Great Intellect...
Not it this sense. If the government uses a private contractor, either directly or through extension of policy. Any evidence gathered or action taken is considered an act by government.
You've probably heard of the 'fruit of the poisoned tree' concept that appears on police TV dramas all the time. This means that evidence obtained due to a previously illegal action, becomes itself inadmissible. ie. if a search is conducted without a warrant then anything found becomes inadmissible, but so can further legally obtained evidence that might have been discovered based on something uncovered during the first illegal search (even though the second search was legal).
The same applies (or at least is supposed to apply) to actions taken by the government. In some circumstances even just the knowledge of something happening can extend the action into government condoned action (e.g. certain types of entrapment followed by arrest when the officer knew in advance of the entrapping actions).
Slashdot, hire me immediately or I promise I will stop posting my +5 Funny one liners immediately.
Hello?
If my comment didn't sound as good in your head as it did in mine, then I guess we all know who's to blame
What he did isn't legal in Hungary. Under the Hungarian Penal Code - Criminal Conduct for Breaching Computer Systems and Computer Data Section 300/C they have a provision for illegal access.
The thing is that it often doesn't matter where a crime is committed, it is still often still illegal if done with the intent to break the law. The enforcement of the law depends on the will of the justice authority in that country. Even if there is an equivalent crime in the other country it is difficult to get that state's cooperation, as it would interfere with that state's right to enforce the law in their territory as they see fit. In this case it seems that is was easier/cheaper to entice the fellow into the country where the offense was committed and arrest him there.
Yes, but in this case the US justice system is only springing into expedient action, not because of the fact that hacking is illegal, but because the "victim" is a corporation.
Now he is going to be working for the government.