Slashdot Mirror
Prison Time For Manager Who Hacked Ex-Employer's FTP Server, Email Account (bleepingcomputer.com)
Catalin Cimpanu, writing for BleepingComputer: Jason Needham, 45, of Arlington, Tennessee was sentenced last week to 18 months in prison and two years of supervised release for hacking his former company's FTP server and the email account of one of his former colleagues. Needham did all the hacking after he left his former employer, Allen & Hoshall (A&H), a design and engineering firm for which he worked until 2013. Needham left to create his own company named HNA Engineering together with a business partner. HNA is also a design and engineering firm. According to court documents obtained by Bleeping Computer, between May 2014 and March 2016, Needham hacked into the email account of one of his former co-workers. From this account, the FBI says Needham took sensitive business information, company fee structures, marketing plans, project proposals, and lists of credentials for A&H's FTP server. A&H rotated its FTP credentials every six months, but Needham acquired new logins from his former colleague's email account.
Or "using a password you picked up while still at the firm"?
"I don't know, therefore Aliens" Wafflebox1
"Using access credentials that you shouldn't have had, after you left" equals "hacking" now.
Right. That word really doesn't mean squat any longer. Thus we have:
Anything can be hacking and anyone can be a hacker, as the prosecutor likes it.
May you live in Shakespearean times, good sir.
Have to plan ahead.
The kind of stuff he wanted gets stale very fast. That's why he had to keep "hacking".
"I don't know, therefore Aliens" Wafflebox1
Have to plan ahead.
And use a service account or root if it is unix naming it after something sounding technical and legit.
http://saveie6.com/
This must be fake news because 45 is too old for hacking. Old man was framed. Find the real hackers.
Talent will always make more money than educated skill.
before you leave.
I am fanatical about it. As you are training your replacement remove all your access. Last thing I do is change my password to something like "N[Sf+JbQ*"X5ReXL54DwUp5>%&{lU3`yP^9T>Bumh~N"L"N9CB,Fu58", with me having no record of it. Then have my replacement disable my account. (Since most places I have worked we used Jira, accounts are really difficult to delete.)
This insures that I am never even tempted to see if I have access, and if some ID10T reactivates my account in the future, the chance of someone hacking it is basically NIL.
I do the same thing with password on every account I ever disable.
First law of people: People are generally stupid.
So just because the article contains the word "hacking" (regardless of how aptly it was used), this is now News for Nerds / Stuff that Matters?
Unless there are some mitigating factors here to discuss, it looks like this is a very open and shut case of "Idiot knowingly accessed a system without authorization and stole his previous company's data to use in direct competition."
In other news, everyone's local police forces arrested a number of people for various offenses which they allegedly committed.
Take it to the limit, everybody to the limit, come on, everybody fhqwhgads.
"Using access credentials that you shouldn't have had, after you left" equals "hacking" now.
Right. That word really doesn't mean squat any longer. Thus we have:
Anything can be hacking and anyone can be a hacker, as the prosecutor likes it.
May you live in Shakespearean times, good sir.
English language usage tip:
hacker = someone who uses a computer against its owner's usage policy
hacking = any action someone takes to use a computer against its owner's usage policy
The sense of "hacker" as describing a person with great computer skills is now an archaic usage.
toor
Education is a scam to give false hope to the poor. You're either rich or you're not.
Guy shouldn't have accessed it without permission... although going into a former colleague's email seems like a bigger deal to me. He deserves whatever he gets.
But, man, if they're running an FTP server in this day and age, this is likely not their only issue.
#DeleteChrome
Ha Ha!
FTP supports TLS and Kerberos. Why was it not a requirement that to use FTP, you need a Kerberos Ticket from the KDC?
Did he cause any damage except make a company feel bad the hard way for having bad security policy?
Somewhere TV producers started applauding in unison.
I do not believe in karma. "Funny"=-6. Do good and forbid evil. Yours, Oft-Offtopic Flamebaiting Troll.
Have to plan ahead.
You'd think so...
I do support for clients in the finance sector. You'd be surprised how many people think that if they move these files a few months in advance, they wont get caught. Hell, I'm surprised how many of them still use email to do it. Finance company == log fucking everything.
Calling someone a "hater" only means you can not rationally rebut their argument.