No Charges In UK For Gary McKinnon

clickclickdrone sends this news from the BBC: "Computer hacker Gary McKinnon, who is wanted in the U.S., will not face charges in the U.K., the Crown Prosecution Service has said. Director of Public Prosecutions Keir Starmer QC said the chances of a successful conviction were 'not high.' He announced the decision some three months after Home Secretary Theresa May stopped the extradition. Mr. McKinnon, 46, admits accessing U.S. government computers but says he was looking for evidence of UFOs. The U.S. authorities tried to extradite him to face charges of causing $800,000 (£487,000) to military computer systems and he would have faced up to 60 years in prison if convicted."

Comments

this:

[samjam]

The UK CPS declined to prosecute him originally and further decline to do so now.

This trumps all other arguments.

Re:this:

[Grumbleduke]

McKinnon even sued the CPS over their decision not to prosecute him, and lost (judgment here). The CPS really don't want to prosecute him.

Re:this:

[stephanruby]

The UK CPS declined to prosecute him originally and further decline to do so now.

And yet, McKinnon said he'd be willing to plead guilty if he was prosecuted in the UK.

By letter dated 5 June 2009, the Claimant made further representations and indicated that he would be willing to plead guilty to an offence under section 3 of the 1990 Act. Accordingly, the Director was invited to reconsider the decision not to prosecute, since the evidential test was now satisfied, having regard to the wider public interest which, it was asserted, pointed to a prosecution in the United Kingdom. The Director was further invited to "have full regard to Article 3 and Article 8 of the Convention".

Perhaps, it would have been too much of an embarrassment to the US if the guy had only received 6 months probation and a 1000 fine when what they really wanted was to set an example and have this autistic guy up-rooted from his own country/family, bullied and raped, and locked up in a Federal prison for the next 60 years.

caused $800,000...

[Hagaric]

Could he come & cause $800,000 to my computer system too? I could use the upgrade...

Re:caused $800,000...

[serviscope_minor]

He didn't of course.

It's an outright lie by the US prosecutors, since they appear to lack any kind of moral fiber.

It's equivalent to having a burglar walking in the front door then the homeowner claiming costs for upgrading all the locks are due to the burglar.

Sure, they needed to trash and reinstall all of the machines. But they would have needed to do exactly that anyway when an internal audit showed they were insecure.

Re:caused $800,000...

[Grumbleduke]

For the record, according to one of the court rulings he was accused of the following:

"Between February 2001 and March 2002 he gained unauthorised access to 97 computers belonging to and used by the US Government... From those computers, he extracted the identities of certain administrative accounts and associated passwords. Having gained access to those administrative accounts, he installed unauthorised remote access and administrative software called "remotely anywhere" that enabled him to access and alter data upon the American computers at any time and without detection by virtue of the programme masquerading as a Windows operating system.

Once "remotely anywhere" was installed, Mr McKinnon proceeded to install his "suite of hacking tools" – software that he used to facilitate further compromises to the computers which also facilitated the concealment of his activities. Using this software, he was able to scan over 73,000 US Government computers for other computers and networks susceptible to compromise in a similar fashion. He was thus able to lever himself from network to network and into a number of significant Government computers in different parts of the USA. The relevant ones were:

1. 53 Army computers, including computers based in Virginia and Washington that controlled the Army's Military District of Washington network and are used in furtherance of national defence and security [charges 1 to 2]
2. 26 Navy computers, including US Naval Weapons Station Earle, New Jersey. This was responsible for replenishing munitions and supplies for the deployed Atlantic Fleet [charges 6 to 8]
3. 16 NASA computers [charges 12 to 15]
4. 1 Department of Defense computer [charges 17 to 18].

Once the computers were accessible by Mr McKinnon, he deleted data including:

1. Critical operating system files from nine computers, the deletion of which shut down the entire US Army's Military District of Washington network of over 2000 computers for 24 hours, significantly disrupting Governmental functions
2. 2,455 user accounts on a US Army computer that controlled access to an Army computer network, causing those computers to reboot and become inoperable
3. Critical Operating system files and logs from computers at US Naval Weapons Station Earle, one of which was used for monitoring the identity, location, physical condition, staffing and battle readiness of Navy ships. Deletion of these files rendered the Base's entire network of over 300 computers inoperable at a critical time immediately following 11 September 2001 and thereafter left the network vulnerable to other intruders.

He also copied data and files onto his own computers, including operating system files containing account names and encrypted passwords from 22 computers. These comprised:

1. 189 files from US Army computers
2. 35 files from US Navy computers, including approximately 950 passwords from server computers at Naval Weapons Station Earle
3. 6 files from NASA computers

Mr McKinnon's conduct was intentional and calculated to influence and affect the US Government by intimidation and coercion. As a result of his conduct, damage was caused to computers by impairing their integrity, availability and operation of programmes, systems, information and data on the computers, rendering them unreliable. The cost of repair totalled over $700,000."

Slightly more than a burglar walking in the front door and claiming the costs of upgrading the locks. More like breaking in (maybe through a weak door), completely trashing the place and leaving.

Re:proofread a few lines only?

[halfEvilTech]

Damages they are claiming though come from having to fix the vulnerabilites that let him in in the first place. That and the money spent on the legal bills for embarassing them.

Re:Is he free?

[Baloroth]

So long as he stays in the UK, yes. The US still has an extradition warrant against him, so if he travels to another country he could be extradited from there (although it would depend on the judgment of those courts). Traveling to the US would obviously get him arrested.

Reverse the charges

[FrostedWheat]

Right, so the real people responsible will be charged now? The ones who left seriously insecure military computers connected to the internet?

Re:Is he free?

[geekoid]

Maybe he will be abducted~

Re:proofread a few lines only?

[serviscope_minor]

They wouldn't have had to fix all of that without his interference.

Please NEVER EVER get a job in security.

Ever

Ever

Ever.

Once such important systems had even been found potentially compromised, they become entirely untrustworthy and cannot be used.

They noticed McKinnon by sheer blind luck.

If it had been a competent agent of Mossad or something they would never have noticed. Or by someone as competent as the guys that made Flame.

But the fact that they were wildly insecure meant that they would have had to shut down the entire system basically instantly and repair it.

They were bloody lucky it was McKinnon and not someone else.

Re:Loony

[wild_quinine]

No, he has Asperger's syndrome, which, from what I can gather, is way for IT guys like us to behave like absolutely fucking pricks, and we just have to hold up the card "Asperger's" and everyone is supposed to accept our miserable attitude. Apserger also apparently extends to hacking into systems we have no business being in. Apparently, providing we have this wonderful social ineptitude disease, we don't face the consequences of any of our online actions.

I don't know about the rest of you, but I think I'm going to go out at lunch and kick some little old lady in the ass. "Asperger's!"

Did you really just have an uncalled for, violent, frothing rage at people with "social ineptitude disease"? You know, it pays to look both ways before crossing Irony Street.