Long Prison Sentence for Man Who Hacked Jail Computer System To Bust Out Friend (bleepingcomputer.com)
A judge sentenced a Michigan man to 87 months -- 7 years 3 months -- in prison for hacking into a county jail's computer system and modifying prisoner records in an attempt to get an inmate released early. From a report: The man, Konrads Voits, 27, of Ypsilanti, will also serve three years of supervised release and will have to pay $235,488 in restitution to Washtenaw County, the cost of investigating and addressing the hack. Voits prison sentence stems from his actions in the spring of last year. According to his guilty plea, Voits admitted that between January and March 2017, he engaged in a social engineering campaign to hack into the Washtenaw County Jail's computer system. Initially, he engaged in a spear-phishing campaign. He sent emails to county jail employees, luring them on the "ewashtenavv.org" domain, a carbon copy of the county's official website of "ewashtenaw.org."
He won't last seven DAYS. Have you ever seen what happens to nerds in prison? He'll become a human toilet and a rape puppet in hours. Serves him right. He's better of pulling a swartz before the inmates get to him.
Let's see how he does it.
He had gotten into trouble before. Looks like there is a probation violation involved as well. So, he didn't just get the long jail term for hacking, he got it for hacking while already on probation for stalking drug charges, and prior hacking charges.
to blather about haxxz and haxx0rz.
$235K sounds like piling on
outraged? Good for him
Then he could just pardon all his criminal buddies. But no roasts! Thats just too much man!!
He gets to pay to have their shitty software fixed just because he found a problem with it?
They should give him a job in prison to lessen his sentence, like when Tom Hanks caught Leonardo DiCaprio and got Leo to teach him about check forging.
The difference between the domain names is that the latter ends in double-ewe dot org, the former in two vees dot org.
You are not alone. This is not normal. None of this is normal.
>a carbon copy of the county's official website of "ewashtenaw.org."
Is it just me or does anyone else think the rule about putting the final full-stop inside a set of quotation-marks needs to be changed? it looks like the website has an extra '.' after the '.org'.
"will have to pay $235,488 in restitution to Washtenaw County, the cost of investigating and addressing the hack."
This is concerning that if convicted, a 'defendant' would then have to pay for the State's cost of investigating them (and possibly prosecuting them). As good as that may feel for some severe cases, that just seems wrong in principle!!!
.
Seems like the threat of huge fines might be used to intimidate a defendant into pleading guilty to a lesser charge and fine (just like plea bargaining) even if the defendant is not guilty.
A Corporation is not supposed to be fined 'too much', not enough to put it out of business (nor significantly disrupt the business). So why should an individual be fined so much that after they get out of jail/prison there is no hope they could pay if off within 10 years?
Since Washtenaw County has now fined someone to address the hack, there should never ever be another person improperly released from prison???
They may as well hire the poor b@$4@4d and knock a year off his sentence for his efforts. Clearly they're doing it wrong and need a re-edge-oo-macation.
... it looks like the website has an extra '.' after the '.org'.
Actually, placing a trailing got at the end of a domain name is not "extra". It is the correct way to specify a fully-qualified name. The final dot refers to the root DNS zone. In practice, however, applications usually let one omit the final dot.