Slashdot Mirror


Long Prison Sentence for Man Who Hacked Jail Computer System To Bust Out Friend (bleepingcomputer.com)

A judge sentenced a Michigan man to 87 months -- 7 years 3 months -- in prison for hacking into a county jail's computer system and modifying prisoner records in an attempt to get an inmate released early. From a report: The man, Konrads Voits, 27, of Ypsilanti, will also serve three years of supervised release and will have to pay $235,488 in restitution to Washtenaw County, the cost of investigating and addressing the hack. Voits prison sentence stems from his actions in the spring of last year. According to his guilty plea, Voits admitted that between January and March 2017, he engaged in a social engineering campaign to hack into the Washtenaw County Jail's computer system. Initially, he engaged in a spear-phishing campaign. He sent emails to county jail employees, luring them on the "ewashtenavv.org" domain, a carbon copy of the county's official website of "ewashtenaw.org."

46 comments

  1. He can hack himself out. by Anonymous Coward · · Score: 1

    Let's see how he does it.

    1. Re: He can hack himself out. by Anonymous Coward · · Score: 0

      The best comment.

    2. Re: He can hack himself out. by Anonymous Coward · · Score: 0

      Mad street credit if he can escape again...

    3. Re:He can hack himself out. by Anonymous Coward · · Score: 0

      With a hatchet. He'll then throw the pieces out of the windows. Reassembly is the tricky part.

  2. second offense, probation by ooloorie · · Score: 4, Informative

    He had gotten into trouble before. Looks like there is a probation violation involved as well. So, he didn't just get the long jail term for hacking, he got it for hacking while already on probation for stalking drug charges, and prior hacking charges.

    1. Re:second offense, probation by Zontar+The+Mindless · · Score: 1

      There's also being an accessory to an escape from prison. Even if the escape attempt fails, that's still a crime, no?

      --
      Il n'y a pas de Planet B.
  3. Trust bleepingcomputer by Anonymous Coward · · Score: 0

    to blather about haxxz and haxx0rz.

    1. Re: Trust bleepingcomputer by Anonymous Coward · · Score: 0

      ima krad ereet haxxor, u Fqn troll..!!!

  4. Watch out for your cornhole, Konrad by Anonymous Coward · · Score: 0

    $235K sounds like piling on

  5. so? am i supposed tp be by Anonymous Coward · · Score: 0

    outraged? Good for him

  6. He should be President by Anonymous Coward · · Score: 2, Informative

    Then he could just pardon all his criminal buddies. But no roasts! Thats just too much man!!

    1. Re:He should be President by Anonymous Coward · · Score: 0

      "President Criminal Pussy, I like the sound of that!"

    2. Re:He should be President by Anonymous Coward · · Score: 0

      PopeRatzo, is that you??

    3. Re:He should be President by Anonymous Coward · · Score: 0

      nah, i only post when i'm logged in.

  7. "addressing the hack"? WTF! by Anonymous Coward · · Score: 0

    He gets to pay to have their shitty software fixed just because he found a problem with it?

    1. Re: "addressing the hack"? WTF! by Anonymous Coward · · Score: 0

      just like borrowing the landlords keys doesnâ(TM)t make me a locksmith, social engineering doesnâ(TM)t mean you uncovered a software problem.

  8. Decent hacker by Anonymous Coward · · Score: 0

    They should give him a job in prison to lessen his sentence, like when Tom Hanks caught Leonardo DiCaprio and got Leo to teach him about check forging.

  9. Re:Seven years? LOL by tripleevenfall · · Score: 4, Insightful

    Meh. He may be a nerd but he's hardly a 'hacker'.

    Can we stop calling phishers and social engineers 'hackers' already?

  10. Re:Seven years? LOL by Joe_Dragon · · Score: 0

    In oz beecher did not have That bad

  11. For those wondering by squiggleslash · · Score: 1

    He sent emails to county jail employees, luring them on the "ewashtenavv.org" domain, a carbon copy of the county's official website of "ewashtenaw.org."

    The difference between the domain names is that the latter ends in double-ewe dot org, the former in two vees dot org.

    --
    You are not alone. This is not normal. None of this is normal.
    1. Re:For those wondering by Nidi62 · · Score: 1

      He sent emails to county jail employees, luring them on the "ewashtenavv.org" domain, a carbon copy of the county's official website of "ewashtenaw.org."

      The difference between the domain names is that the latter ends in double-ewe dot org, the former in two vees dot org.

      Is it possible for browsers to by default (with the default font) automatically insert just a little more room when 2 "v"s are typed consecutively? Not enough to be seen as a space between the characters but just enough to distinguish "vv" from "w". Do the same with "cl" or add the top and bottom lines to a capital "I" to distinguish it from a lower case "l". Seems like a small change to the default font would make a lot of these attacks go away.

      --
      The only thing necessary for evil to triumph is for it to be pitted against a slightly greater evil
    2. Re:For those wondering by Anonymous Coward · · Score: 0

      The pool of victims won't suddenly dry up from a change in browser font. The criminals would just find new look-alikes or continue using websites like ewashtenaw.county.org or washenaw.org etc. They're out to catch people who aren't paying attention, not to fool those who do due diligence. Putting serious effort into the font is just a big waste of time.

      Technological solutions aren't going to save people who don't engage their brain before clicking links.

    3. Re:For those wondering by Anonymous Coward · · Score: 0

      Maybe it'd make a difference if you were actually looking for it but let's be honest about end users, they can't be bothered to read an entire error message before clicking on a button and then expect the support people to understand what exactly happened. "What were you doing when this error came up?" "Nothing"

    4. Re:For those wondering by The-Ixian · · Score: 1

      "What were you doing when this error came up?" "Nothing"

      Users definitely are fond of their "nothing" statements:

      - Nothing works = I got an error message in a single program and everything else is ok
      - Nothing ever works = I get an error every day but I don't report it until I am having a bad day
      - I did nothing to cause this = I did something to cause this
      - I saw nothing that could indicate a problem = I saw several warnings like I do every day. I just click on whatever it takes to get it out of my sight... but today WITHOUT WARNING my system won't boot!
      - I store nothing on my local hard drive = I store all my most important stuff on my single point of failure laptop hard drive

      --
      My eyes reflect the stars and a smile lights up my face.
    5. Re:For those wondering by Khashishi · · Score: 1

      But you can do much worse with unicode urls. For example visit this (safe) page which appears as https://www.apple.com/ in the Firefox address bar:
      https://www.xn--80ak6aa92e.com...
      If Slashdot could support unicode, then the link here could also look like https://www.apple.com/ . Of course, slashdot doesn't.

    6. Re:For those wondering by apoc.famine · · Score: 1

      This is well known in the typography field. The space between letters is known as keming, and various fonts do it better or worse. This doesn't really have anything to do with the browser - it's font-specific.

      --
      Velociraptor = Distiraptor / Timeraptor
    7. Re:For those wondering by Anonymous Coward · · Score: 0

      Pom

  12. Re:Seven years? LOL by Anonymous Coward · · Score: 0

    Recommending prison rape and suicide, total moral bankruptcy. This lack of basic moral standards permeates current US society.

  13. Re:Seven years? LOL by Anonymous Coward · · Score: 0

    ...He'll become a human toilet ...

    On one hand he say this and on the other he'll complain about male sexual assault not being taken seriously. Yet when we try to say prison rape shouldn't be funny he says we have no sense of humor.

  14. Re:Seven years? LOL by PPH · · Score: 1

    nerds in prison?

    How do you know he's a stereotypical nerd? Just because he knows his way around a computer? We've got a pretty good developer on staff that could pass for Vin Diesel.

    --
    Have gnu, will travel.
  15. Re:Seven years? LOL by Anonymous Coward · · Score: 0

    Recommending prison rape and suicide, total moral bankruptcy. This lack of basic moral standards permeates current US society.

    Good thing the US is a Christian Country.

  16. Convicted now PAY for investigations??? by Anonymous Coward · · Score: 0

    "will have to pay $235,488 in restitution to Washtenaw County, the cost of investigating and addressing the hack."
    This is concerning that if convicted, a 'defendant' would then have to pay for the State's cost of investigating them (and possibly prosecuting them). As good as that may feel for some severe cases, that just seems wrong in principle!!!
    .
    Seems like the threat of huge fines might be used to intimidate a defendant into pleading guilty to a lesser charge and fine (just like plea bargaining) even if the defendant is not guilty.
    A Corporation is not supposed to be fined 'too much', not enough to put it out of business (nor significantly disrupt the business). So why should an individual be fined so much that after they get out of jail/prison there is no hope they could pay if off within 10 years?
    Since Washtenaw County has now fined someone to address the hack, there should never ever be another person improperly released from prison???

    1. Re:Convicted now PAY for investigations??? by Zontar+The+Mindless · · Score: 0

      "will have to pay $235,488 in restitution to Washtenaw County, the cost of investigating and addressing the hack."
      This is concerning that if convicted, a 'defendant' would then have to pay for the State's cost of investigating them (and possibly prosecuting them). As good as that may feel for some severe cases, that just seems wrong in principle!!!

      Had it not been for Voit's actions, there'd have been no need for an investigation costing $200K+.

      Since Washtenaw County has now fined someone to address the hack, there should never ever be another person improperly released from prison???

      <sarcasm>No, because obviously there can be only one way, ever, to hack a system.</sarcasm>

      Logic. You and it should consider making friends sometime.

      --
      Il n'y a pas de Planet B.
  17. Re:Full stops inside quotation-marks. by Zontar+The+Mindless · · Score: 0

    I think only Americans do that. I got switched to outside-the-quotes while living in Australia, and have never looked back.

    --
    Il n'y a pas de Planet B.
  18. Why extend his sentence...use him. by Anonymous Coward · · Score: 0

    They may as well hire the poor b@$4@4d and knock a year off his sentence for his efforts. Clearly they're doing it wrong and need a re-edge-oo-macation.

    1. Re:Why extend his sentence...use him. by Anonymous Coward · · Score: 0

      His "skills" are laughable, as are those of all the so called "hackers". We don't need to hire people for their abilities to break the law, and we should not anyway. Let the inmates have their way with him, in less than a week he'll be either dead or broken forever anyway. The brutalizations he will be subjected to cannot even be described. The horror stories about what happens to computer crime convicts in prison are true, I have seen the effects. I will not suggest or advocate suicide but I would do anything to escape that fate. Grow up, this is the 21st century, we do not need or want any "hackers". You do not exist in a legislative void anymore. There are penalties and they will be applied. Give up.

  19. Re:Seven years? LOL by MasterThis · · Score: 1

    Do they not see the irony in this sentence?

  20. Trailing Dot by nuckfuts · · Score: 2

    ... it looks like the website has an extra '.' after the '.org'.

    Actually, placing a trailing got at the end of a domain name is not "extra". It is the correct way to specify a fully-qualified name. The final dot refers to the root DNS zone. In practice, however, applications usually let one omit the final dot.

  21. Re:Seven years? LOL by Anonymous Coward · · Score: 0

    You misunderstand, I do not recommend it. I just look forward to either conclusion. The world does not need any more of those so-called "hackers". The legislative vacuum has long been filled, and examples must be made. Give up.

  22. Re:Seven years? LOL by rahvin112 · · Score: 1

    Phreaking is the original hacking and it often involved a as much social engineering as it did technical knowledge.

  23. Re:Seven years? LOL by Anonymous Coward · · Score: 0

    > examples must be made

    When have unrealistically high punishments ever deterred people? It only proves that the judicial branch doesn't know what the fuck its purpose is or how to do its job.

    Hint: It's not about throwing people in jail for a long time to scare everyone else. It's about maintaining a healthy society. $100 says they won't bother to ask about his motivations to get to the root cause of the crime. They never do. Why is that? Why do they not care about the human side of the law?

    Because it's a racket designed to take money and rights from people. They do not serve us at all.

  24. Re:Seven years? LOL by Anonymous Coward · · Score: 0

    Vin Diesel is a nerd: https://www.independent.co.uk/arts-entertainment/films/news/vin-diesel-nerding-out-over-dungeons-and-dragons-is-an-amazing-slice-of-internet-a6687521.html

  25. Re:Seven years? LOL by Anonymous Coward · · Score: 0

    > examples must be made

    When have unrealistically high punishments ever deterred people? It only proves that the judicial branch doesn't know what the fuck its purpose is or how to do its job.

    I can tell you that I would murder quite a few absolutely idiotic people who post comments like this online if there was no significant punishment for it.

  26. Re:Seven years? LOL by Anonymous Coward · · Score: 0

    Waah waah waah. And what are you going to do about it? Nothing, because there is nothing anyone can do about it and even if there were you're too chicken to act. Go jerk off in your own shit.