No Charges In UK For Gary McKinnon

clickclickdrone sends this news from the BBC: "Computer hacker Gary McKinnon, who is wanted in the U.S., will not face charges in the U.K., the Crown Prosecution Service has said. Director of Public Prosecutions Keir Starmer QC said the chances of a successful conviction were 'not high.' He announced the decision some three months after Home Secretary Theresa May stopped the extradition. Mr. McKinnon, 46, admits accessing U.S. government computers but says he was looking for evidence of UFOs. The U.S. authorities tried to extradite him to face charges of causing $800,000 (£487,000) to military computer systems and he would have faced up to 60 years in prison if convicted."

Comments

caused $800,000...

[Hagaric]

Could he come & cause $800,000 to my computer system too? I could use the upgrade...

Re:caused $800,000...

[serviscope_minor]

He didn't of course.

It's an outright lie by the US prosecutors, since they appear to lack any kind of moral fiber.

It's equivalent to having a burglar walking in the front door then the homeowner claiming costs for upgrading all the locks are due to the burglar.

Sure, they needed to trash and reinstall all of the machines. But they would have needed to do exactly that anyway when an internal audit showed they were insecure.

Re:caused $800,000...

[Grumbleduke]

For the record, according to one of the court rulings he was accused of the following:

"Between February 2001 and March 2002 he gained unauthorised access to 97 computers belonging to and used by the US Government... From those computers, he extracted the identities of certain administrative accounts and associated passwords. Having gained access to those administrative accounts, he installed unauthorised remote access and administrative software called "remotely anywhere" that enabled him to access and alter data upon the American computers at any time and without detection by virtue of the programme masquerading as a Windows operating system.

Once "remotely anywhere" was installed, Mr McKinnon proceeded to install his "suite of hacking tools" – software that he used to facilitate further compromises to the computers which also facilitated the concealment of his activities. Using this software, he was able to scan over 73,000 US Government computers for other computers and networks susceptible to compromise in a similar fashion. He was thus able to lever himself from network to network and into a number of significant Government computers in different parts of the USA. The relevant ones were:

1. 53 Army computers, including computers based in Virginia and Washington that controlled the Army's Military District of Washington network and are used in furtherance of national defence and security [charges 1 to 2]
2. 26 Navy computers, including US Naval Weapons Station Earle, New Jersey. This was responsible for replenishing munitions and supplies for the deployed Atlantic Fleet [charges 6 to 8]
3. 16 NASA computers [charges 12 to 15]
4. 1 Department of Defense computer [charges 17 to 18].

Once the computers were accessible by Mr McKinnon, he deleted data including:

1. Critical operating system files from nine computers, the deletion of which shut down the entire US Army's Military District of Washington network of over 2000 computers for 24 hours, significantly disrupting Governmental functions
2. 2,455 user accounts on a US Army computer that controlled access to an Army computer network, causing those computers to reboot and become inoperable
3. Critical Operating system files and logs from computers at US Naval Weapons Station Earle, one of which was used for monitoring the identity, location, physical condition, staffing and battle readiness of Navy ships. Deletion of these files rendered the Base's entire network of over 300 computers inoperable at a critical time immediately following 11 September 2001 and thereafter left the network vulnerable to other intruders.

He also copied data and files onto his own computers, including operating system files containing account names and encrypted passwords from 22 computers. These comprised:

1. 189 files from US Army computers
2. 35 files from US Navy computers, including approximately 950 passwords from server computers at Naval Weapons Station Earle
3. 6 files from NASA computers

Mr McKinnon's conduct was intentional and calculated to influence and affect the US Government by intimidation and coercion. As a result of his conduct, damage was caused to computers by impairing their integrity, availability and operation of programmes, systems, information and data on the computers, rendering them unreliable. The cost of repair totalled over $700,000."

Slightly more than a burglar walking in the front door and claiming the costs of upgrading the locks. More like breaking in (maybe through a weak door), completely trashing the place and leaving.

Re:proofread a few lines only?

[serviscope_minor]

They wouldn't have had to fix all of that without his interference.

Please NEVER EVER get a job in security.

Ever

Ever

Ever.

Once such important systems had even been found potentially compromised, they become entirely untrustworthy and cannot be used.

They noticed McKinnon by sheer blind luck.

If it had been a competent agent of Mossad or something they would never have noticed. Or by someone as competent as the guys that made Flame.

But the fact that they were wildly insecure meant that they would have had to shut down the entire system basically instantly and repair it.

They were bloody lucky it was McKinnon and not someone else.