Slashdot Mirror
Man To Pay $300,000 In Damages For Hacking Employer (bbc.com)
An anonymous reader writes: A former private security officer in California must pay nearly $319,000 in damages for attacking his employer's computer systems. Yovan Garcia accessed payroll records at Security Specialists, which provides private security patrols, to inflate the number of hours he had worked. He later hacked the firm's servers to steal data and defaced its website. District Judge Michael Fitzgerald said Garcia had used the stolen data to help set up a rival business. Security Specialists first noticed issues with Mr Garcia's pay records in July 2014, about two years after he joined. In one example, they showed he had worked 12 hours per day over a two-week period and was owed 40 hours of overtime pay, when in fact he only worked eight hours per day.
That reminds me of the time I read a comment on a comment on an online forum about someone who had a CS Prof that told him a story about the early mainframe days at his university. When he was a student, they gave free computer time as a reward for filing bug reports.
Him and his friends found that the payroll system had no security whatsoever and that any user could alter the records. So they reported the problem but a week later nothing changed, so they reported it again. Later, still no change.
So they wrote themselves each a check for minus one million dollars. They were all called in the next day to explain how the payroll system made nearly three million dollars.
And then when he posted that story online, some jerk told him that most of those stories are complete bullshit.
And then, someone commented on the commented comment and it was good.