TK0JUT2%NIU.BITNET@UICVM.uic.edu (11/25/90)
**************************************************************************** >C O M P U T E R U N D E R G R O U N D< >D I G E S T< *** Volume 2, Issue #2.13 (November 25 1990) ** **************************************************************************** MODERATORS: Jim Thomas / Gordon Meyer (TK0JUT2@NIU.bitnet) ARCHIVISTS: Bob Krause / Alex Smith / Brendan Kehoe USENET readers can currently receive CuD as alt.society.cu-digest. COMPUTER UNDERGROUND DIGEST is an open forum dedicated to sharing information among computerists and to the presentation and debate of diverse views. CuD material may be reprinted as long as the source is cited. Some authors, however, do copyright their material, and those authors should be contacted for reprint permission. It is assumed that non-personal mail to the moderators may be reprinted unless otherwise specified. Readers are encouraged to submit reasoned articles relating to the Computer Underground. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ DISCLAIMER: The views represented herein do not necessarily represent the views of the moderators. Contributors assume all responsibility for assuring that articles submitted do not violate copyright protections. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CONTENTS: File 1: Moderators' Corner File 2: EPIC (Effective Performance in Candidates) File 3: The Riggs Sentencing (reprint from Newsbytes) File 4: First Conference on Computers, Freedom & Privacy File 5: Hackers Break into DEA Lines ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ---------------------------------------------------------------------- ******************************************************************** *** CuD #2.13: File 1 of 5: Moderator's corner *** ******************************************************************** From: Moderators Subject: Moderators' Corner Date: November 25 1990 ++++++++++ In this file: 1. CORRECTION ON SJG AFFIDAVIT 2. LEN ROSE UPDATE 3. NEW FTP SITE ++++++++++ +++++++++++++++++++++ Correction of SJG Affidavit +++++++++++++++++++++ In CuD 2.11, we reprinted the search affidavit used for the Steve Jackson Games raid. We included several pages of logs from The Phoenix Project. These logs *WERE NOT* originally attached to the affidavit, but were sent to us independently of that document as background. The judge apparently never saw the logs. Having read them, one wonders if the investigator did either, because it defies all sane logic to impute involvement in a criminal "scheme" merely by explaining that Kermit is a 7-byte transfer protocol used primarily on mainframes. If you have not read the document, we recommend it. ++++++++++++ Len Rose Update ++++++++++++ As of this week, Len Rose had not yet been indicted for the Illinois charges. Len was arrested in late October on state charges alleging computer tampering a few days after taking a job in Naperville, Ill. The original indictment date was postponed by the state. His legal difficulties, which some of us find the result of overzealous federal prosecution, continue to hamper his employment possibilities. Sheldon Zenner, the attorney who successfully defended Craig Neidorf, has agreed to channel donations to Len for those wishing to support him. *THIS IS NOT* a legal defense fund, but humanitarian assistance to provide food, rent, and utilities for wife and family. Len Rose Donation c/o Sheldon Zenner Katten, Muchin and Zavis 525 W. Monroe, Suite 1600 Chicago, IL 60606 +++++++++++++++++ New FTP Site +++++++++++++++++ Another ftp site has been added from which CuD back issues and other archives may be obtained. The hours are limited from 6 pm to 6 am. The following should get you on it: % ftp cs.widener.edu or % ftp 192.55.239.110 Connected to cs.widener.edu. 220 titan FTP server (SunOS 4.1) ready. Name (cs.widener.edu:): <enter 'anonymous'> Password (cs.widener.edu:anonymous): <enter your email address> 331 Guest login ok, send ident as password. 230 Guest login ok, access restrictions apply. ftp> cd pub/cud ftp> dir ... blah blah blah ... ftp> quit 221 Goodbye. fingers! NOTE: Be sure to use your e-mail address for the password or it not let you on. ******************************************************************** >> END OF THIS FILE << *************************************************************************** ------------------------------ From: Jeffery Aldrich <well!jefrich@APPLE.COM> Subject: EPIC (Effective Performance in Candidates) Date: Tue, 20 Nov 90 16:37:51 pst ******************************************************************** *** CuD #2.13: File 2 of 5: EPIC Project (by Jeff Aldrich) *** ******************************************************************** Constitutional Rights and the Electronic Community (Copyright, 1990) Even if you're on the right track, you'll get run over if you just sit there. Will Rogers CPSR (Computer Professionals for Social Responsibility) and the EFF (Electronic Frontier Foundation) have done a great deal in a very short time to awaken the political consciousness of the electronic community. The EFF managed to take some of the steam from the enforcement train railroading members of the CU and gave this community its first taste of political victory. No doubt these victories will continue to strengthen individual rights in the virtual world. As a student of electronic democracy, I am an ardent supporter of the goals expressed by the EFF. the goals expressed by the EFF. With six years devoted to personal and professional interest in the civil rights and political issues facing the electronic community. Jim Thomas has asked on several occasions that I write something for CuD about The EPIC (Effective Performance in Candidates) Project, a nonprofit group I founded last year. A description of The EPIC Project is included in this article as background information. Political action by a nonprofit is limited by law. Most of what we learn about electronic politicking in the nonprofit must be used elsewhere. I was hired earlier this year to help qualify a citizen initiative for the November elections in California. The measure included a provision making public use of computer telecommunications a state constitutional right. This article focuses on that effort and concludes with a notice of plans underway for 1992. The EPIC Project This project is an extension of research conducted at Sacramento State University focusing on the impact of electronic democracy in American politics. We *may* have created a back-door link of computer telecommunication technology to the U.S. Constitution (Campaign Industry News, Feb. 1990). We're years away from solving the dependent variable dilemma of a Supreme Court test. Board members include Dave Hughes (the founding father of electronic democracy) and Dr. Gene Shoemaker, constitutional scholar and author of the War Powers Act (1974). Projects include R&D of software to insure text data integrity from a network distribution source via end user verification software; research into the development of national electronic political party organizations (Communications Daily, 2-2-90), and; research compiled on the Sundevil raids assisted Ohio Supreme Court Justice William McMahon, ABA Technology and the Courts Committee chairman, in opening a Sundevil subcommittee looking into federal court rule changes. This subcommittee and Judge McMahon are now working closely with the EFF. Political Action and Electronic Rights With all the consternation over abused constitutional rights in the online community this year, Californians missed an opportunity to vote themselves a Constitutional Right to telecommunicate. Below is part of the opening text from a file containing a print, sign and snail mail ballot initiative signature petition to qualify a proposed California Constitutional Amendment for the November 1990 general election (Western Edition WSJ 4-20-90; Middlesex News 4-23-90). I directed the statewide electronic file distribution and speech forums: CALIFORNIANS FOR RESPONSIBLE REPRESENTATION INFORMATION TECHNOLOGY -- ELECTRONIC CITIZENS and THE CALIFORNIA CONSTITUTION are linked by THE FAIR REDISTRICTING INITIATIVE What your signature and signatures which you gather can do for you and your family (and your business), is provide a Constitutional Right to electronic citizen oversight of Legislative redistricting plans -- right in your home computer --if you like! There are now NO RULES for drawing voting district lines to establish a competitive election process. The FAIR REDISTRICTING INITIATIVE lays out specific rules to PREVENT REPETITION OF PAST ABUSES BY INCUMBENT POLITICIANS and eliminates the possibility of gerrymandering -- the drawing of electoral district lines to protect incumbents and deny fair representation. One of the most important SECTIONS included in this Initiative creates electronic citizen oversight of redistricting or reapportionment plans drafted by the Legislature before any legislative action: SECTION 5: The Legislature shall DISSEMINATE and make PUBLICLY available, in hard copy and COMPUTER-READABLE FORMAT, any data base or other information submitted or developed for its use in establishing and redistricting or reapportionment plans... NO PLANS WILL BE DRAWN BEHIND CLOSED DOORS TO PROTECT INCUMBENT POWER THAT DESTROYS YOUR RIGHT TO REPRESENTATIVE GOVERNMENT. THE INITIATIVE PROVIDES A CONSTITUTIONAL RIGHT TO KNOW PLANS BEFORE ANY ACTION IS TAKEN -- IN COMPUTER-READABLE FORMAT WITH ELECTRONIC CITIZEN OVERSIGHT. IT'S ABOUT TIME FOR THE BEGINNING OF INFORMATION AGE DEMOCRACY IN CALIFORNIA Are you ready to join other people of the world in this era our politicians praise as the "Decade of Democracy?" Are you tired of cheering the democratic victories of others? Your opportunity to take action in the name of DEMOCRACY is right in front of you. The Revolutionary Power of the Information Age is at your fingertips. THE FAIR REDISTRICTING INITIATIVE lets you put that power to work for you!! *** end *** In addition to the first effort at state level constitutional rights to telecommunicate, and to access government data in electronic form, this was the first statewide electronic distribution of print and sign political action material. In April and May of this year, issues about constitutional rights were still considered boring as dirt to most of the online community. The discussions that follow are excerpts from a WELL conference on the initiative. It is not presented as a representative sample and is reprinted with permission. Topic 333: Californians seek Information Age Democracy -- print Jeff Aldrich (jefrich) Mon, Apr 23, '90 (22:35) 18 One item I've noticed absent from this discussion is any reference to the fact that this initiative, if passed, will link this technology to the Ca Constitution by creating a constitutionally mandated right of public access to specific info in "computer-readable" format. With the volume of discussion I've seen in the Well on Electronic Citizenship and the need for same, I find it rather odd there has yet been commentary posted on this aspect of the initiative. And what about the fact that for the first time in Ca history an initiative is being distributed, in complete form, electronically -- giving people an opportunity to make an informed decision prior to signing a petition to qualify a measure for statewide ballot? Instead of some fellow pushing a pen at you to sign something on an ironing board when you leave the grocery store. Topic 333: Californians seek Information Age Democracy -- print # 26: Daniel A. Murphy (murphy) Tue, Apr 24, '90 (21:39) Jeff: I think you're looking at Fenno's paradox. Look at what people think of *their* representative, not Congress as a whole. For the most part, people support their representative, and where they don't (e.g. Cranston) it's clear they aren't likely prospects for reelection. Topic 333: Californians seek Information Age Democracy -- print # 29: David Gans (tnf) Wed, Apr 25, '90 (10:49) 4 In the long run, information access would tend to produce a better informed electorate. If you don't think the GOP takes public apathy and stupidity to the bank and the ballot box year after year, you haven't been paying attention! Topic 333: Californians seek Information Age Democracy -- print # 31: harry henderson (hrh) Wed, Apr 25, '90 (17:39) The GOP don't have a monopoly on taking voter stupidity to the bank. The Democrats also have a specialty: economic shell games that take advantage of voters' lack of knowledge of basic economic principles like supply and demand, incentive, etc. Topic 333: Californians seek Information Age Democracy -- print # 32: Jeff Aldrich (jefrich) Wed, Apr 25, '90 (18:02) The fact is, while we sit around on our butt's chewing the finer points of who's doing what to who, we're all loosing the right to access government data information. I just got a report today from the firm in Sacramento counting signatures on petitions that have come in. The few we've received on computer printed paper are from sysop's I've been working with -- Zero from the Well. The point is we have an opportunity to open a door that is closed and being welded shut. I'm beginning to wonder if all the talk here in the Well about how great the concept of Electronic Citizenship is -- protect our future, power to those without power, etc. -- was little more than sanctimonious rubbish. Topic 333: Californians seek Information Age Democracy -- print # 33: Bob Jacobson (bluefire) Wed, Apr 25, '90 (18:34) I think an initiative targeted on open information would be clearer, easier to understand, less expensive to run, and more certain of passage. Topic 333: Californians seek Information Age Democracy -- print # 34: Daniel A. Murphy (murphy) Wed, Apr 25, '90 (18:54) I agree completely with Bob. Better information access would help the process; it shouldn't me mixed up with a reapportionment scheme. Topic 333: Californians seek Information Age Democracy -- print # 35: David Gans (tnf) Wed, Apr 25, '90 (20:02) 2 And phrases like "sanctimonious rubbish" aren't likely to inspire very many people around here. Topic 333: Californians seek Information Age Democracy -- print # 36: Jeff Aldrich (jefrich) Thu, Apr 26, '90 (01:53) Your right, David, that remark does not belong here. Bob's right on all four items. Such an initiative would be easier to understand and pass. But I don't have any problems with constitutional access tied to this initiative. Neither does the Rose Institute at Clairmont. My difficulty is understanding the inactivity from the Well. Topic 333: Californians seek Information Age Democracy -- print # 37: Robert Deward (bobd) Thu, Apr 26, '90 (13:37) 6 Are there any models for an initiative addressing open access to govt. information? I can check with Reference Point if no one has anything handy. This sounds to me like a perfect issue on which to test our beliefs about the efficacy of the on-line medium. What do you people think? Topic 333: Californians seek Information Age Democracy -- print # 38: Daniel A. Murphy (murphy) Thu, Apr 26, '90 (18:41) It will be interesting to see if electronically-circulated petitions become common, as part of conventional signature-gathering campaigns. Topic 333: Californians seek Information Age Democracy -- print # 39: Art (arb) Thu, Apr 26, '90 (19:29) 2 lines Gee, Bobd, sounds like this project would have been a perfect match for your Electronic Citizenship project with a Gateway! Topic 333: Californians seek Information Age Democracy -- print # 40: Dave Hughes (dave) Sun, Apr 29, '90 (07:08) 29 Any objection from posters so far to my copying this out for Colorado candidate for Secretary of State Aaron Harber (D)? (He is a Harvard grad, serious challenger, owned two computer companies, and forced the current incumbent to better automate the SecStates office last race. One of his main themes is better citizen access to government, and he is ready for fresh electronic communications ideas to show voters that the Repub Sec of State is not doing all she could to use modern technology to give people that access. He is mulling over my suggestion to use the state telecom network (sorry US West) which is little used nights and weekends to put terminals in county offices for free citizen access to state government in Denver across a wide range of info - including state laws, regs, voter lists, licensing data, candidate reports etc) He might find this useful to think how to break out of the traditional mind-set about where/how 'official' political information is stored/distributed. It seems to me that the objection above about individual citizens not being that interested in mountains of facts misses a point. There are always local activists who would scour such facts, extract useful info, and present to local people. If they had timely, cheap, and total access to publicly stored info. Media is supposed to be doing this 'for the voters' and up to a point, on hot 'mass interest' topics do. But news media are decliningly useful sources of information about government. Topic 333: Californians seek Information Age Democracy -- print # 42: Jeff Aldrich (jefrich) Tue, May 1, '90 (21:45) the latest signature count has too many printed petition forms from all over the state for me to trace back to the well. I suspect several came from Wellies...thanks for the effort Bob, my research has yet uncovered a 'model access' amendment. If we can't come up with one ready-made, anyone with ideas on using resources here in the Well to pull one together for Calif. in '92? Or failing that, what about ideas on our ability to pull the industry together to support such an effort? +-+-+-+-+-+ END OF WELL CONFERENCE +-+-+-+-+-+ Most of the discussion in the WELL conference focused on the politics behind the measure, rather than looking at benefits extended to the electronic community. It's said that timing in politics is everything. If concerns about Operation Sundevil had been two months earlier, or our filing deadlines two months later, The FAIR REDISTRICTING INITIATIVE would have collected enough signatures to qualify for the November General Election. Initiative '92 -- Computer Rights and Economic Impact on Business We learned a lot about the online community from distributing the ballot measure earlier this year -- from identifying politically active systems statewide, to distribution, to political issues considered palatable by the electronic community. Successful efforts to promote computer rights and industry growth utilizing the electronic distribution initiative process in California offer a range of policy issues including, but not limited to, the following: legislative info in data format dispensed at no cost to info service companies providing educational access; incentives for development of rural telecommuting centers, including a) increased rate of return on investment for rural telephone utilities, b) redirecting transportation funds to reduce site construction and development costs, c) business tax incentives for participation in rural telecommunicating centers; revision of computer crime statutes and enforcement procedures; association member access to, and use of, California State University computer systems for the purpose of increasing international trade in conjunction with the California State World Trade Commission, and; add telecommuting projects to the smart Freeway Corridor Telecommunications Demonstration Project by redirection of Federal Transportation Appropriations. There is no question all of these items will be considered in the drafting of a 1992 California ballot measure. The measure will also include language mandating that computer telecommunications become a state constitutional right. Many of the issues listed above have the potential to create positive economic impact for general business, trade associations and specific computer industries. As a focal point of the initiative, Rural telecommuting development cuts to a broad based, organized constituency. I've been retained by clients interested in forming a committee to sponsor development of this initiative. I have been asked to determine the support, if any, of others interested in forming a sponsor committee. And to determine if the level of this support is sufficient to justify further activity. Committee membership guidelines: Committee Member Sponsor $7,500.00 < per 1 vote > Total Committee Member Sponsors < ten > Minimum Committee Member Sponsors to vest < five > Committee will vest January 7, 1991. Letters of intent to fund are due and payable no latter than January 4, 1991. Failure to vest refunds are due and payable January 17, 1991. For more information concerning the formation of this ballot measure committee, contact: Jeff Aldrich jefrich@well.ca.us Aldrich & Associates, Voice: (707)426-1679 Political Consulting Fax: (707)425-9811 2791F North Texas, Suite 341 Fairfield, CA 94533 ******************************************************************** >> END OF THIS FILE << *************************************************************************** ------------------------------ From: John and Barbara McMullen Subject: The Riggs Sentencing (reprint from Newsbytes) Date: November 21, 1990 ******************************************************************** *** CuD #2.13: File 3 of 5: More on the Riggs Sentencing *** ******************************************************************** (The following articles, by John and Barbara McMullen, were originally published in Newsbytes. They are reprinted with permission. They corrects some errors in the original AP wire service story reported in the last issue of CuD). ======================================================================= (NEWS)(GOVT)(NYC)(00001) ATLANTA SENTENCING FOR COMPUTER CRIMES ATLANTA, GEORGIA, U.S.A., 1990 NOV 19 (NB) -- Robert J. Riggs, Adam E. Grant and Franklin Darden, who pleaded guilty in July to various charges relating to computer break-ins to systems of BellSouth, have been sentenced by U.S. District Judge Owen Forrester to prison sentences and ordered to make financial restitution of $233,000 to BellSouth. Riggs, who had pleaded guilty to one conspiracy count and could have received a maximum sentence of five years in prison and a $200,000 fine, was sentenced to a 21-month prison term and was ordered to begin serving the sentence on February 15th. Darden, who faced similar penalties, received 14 months as did Grant. Grant had pleaded guilty to possessing 15 or more BellSouth access devices with the intent to defraud and faced a maximum penalty of 10 years in prison and a $250,000 fine. In sentencing Grant and Darden, Judge Forrester stipulated that seven months of their sentences may be served in a halfway house. Grant and Darden are scheduled to report for confinement on January 4th. Craig Neidorf, who had been indicted for publishing an electronic document which Riggs admitting copying from BellSouth's files, expressed surprise at the sentence, telling Newsbytes "The sentence seems severe when one considers the lesser sentence given to Robert Morris who disrupted thousands of computers and caused untold financial expense to those who had to undo the damage that he caused. I am not saying that Morris should have received a harsher penalty; I'm saying rather that the Atlanta sentences seem disproportionate. I don't know much about all of the Atlanta charges but the testimony concerning them at my case did not indicate that there had been great financial damage to anyone because of the actions of these three." Neidorf also questioned the determination of damages in the case, saying "I hope that the damages claimed by BellSouth have been well scruitinized by the government. You may remember that, before the charges against me were dismissed, BellSouth had claimed that the value of the document in question was over $70,000. It turned out that the document was available in print for under $20. Riggs, Darden and Grant had already pleaded guilty when this gross overstatement came out. I hope, for justice's sake, that the restitution awarded actually relates to substantiated damages." Kent Alexander, Assistant U.S. Attorney, told Newsbytes that he "is comfortable with the method under which the damages were determined." He also clarified the order for restitution, saying that Riggs, Darden and Grant are jointly responsible for the $233,000 and that each of them is individually liable for the entire amount should the others default in payment. Alexander had, in July, told Newsbytes that the plea agreement entered into by the defendants "allows the United States Attorney's office to, in return for substantial assistance from the defendants, to ask for a downward departure from the sentencing guidelines. The substantial assistance referred to includes debriefing by the Secret Service and truthful testimony in other related computer cases." Alexander confirmed, in his current comments to Newsbytes, that the sentences given were, in fact, downward departures from the sentencing guidelines. New York State Police Senior Investigator Donald Delaney, who has been at the forefront of New York State investigations into computer crime, commented on the sentencing to Newsbytes, saying "I think that the sentence is significant and appropriate given the severity of the crimes. I hope that this sends a message to others engaged in telecommunications fraud that such actions can result in actual jail terms." (Barbara E. McMullen & John F. McMullen/19901119) ============================================================================= (EXCLUSIVE)(GOVT)(NYC)(00001) ATLANTA SENTENCING DESIGNED TO "SEND MESSAGE" ATLANTA, GEORGIA, U.S.A., 1990 NOV 20 (NB) -- In response to questions by Newsbytes concerning the rationale underlying the sentences received by Robert J. Riggs, Adam E. Grant and Franklin E. Darden, Jr. on November 16th for activities involving illegal access to computer systems of BellSouth, Assistant United States Attorney for the Northern District of Georgia Kent B. Alexander has released the "Government's Sentencing Memorandum And S.G. & 5K1.1 Motion". This 21 page document, prepared by Joe D. Whitney, United States Attorney for the Northern District of Georgia, and Alexander and sent to United States District Court Judge J. Owen Forrester, puts forth the factors which the prosecuting attorneys wish the judge to consider in determining sentence. The memorandum states "Although the government is going to recommend a downward departure from the Sentencing Guidelines, the three defendants are clearly criminals who have caused a significant amount of damage and should be punished accordingly. Moreover, the computer hacker world is watching this case very closely, and the Court should send a message that illegal computer activities will not be tolerated" (The word "hacker" is footnoted and explained by saying "The government uses the term 'hacker' to describe a person who uses computers for criminal activity. The Court should note, however, that the term 'hacker' can also be used to describe legitimate computer users. At one time all computer users were known as 'hackers' and some computer users still identify themselves as 'hackers'."). In explaining the gravity of the crimes, the memorandum states "In all, they stole approximately $233,800 worth of logins/passwords and connect addresses (i.e. access information) from BellSouth. BellSouth spent approximately $1.5 million in identifying the intruders into their system and has since spent roughly $3 million more to further secure their network." In explaining the perceived need to send a message to the "hacker community", the memorandum points out that the last federally prosecuted adult criminal hacker, Robert Morris, Jr. received probation and that that sentence was followed very closely by 'hackers' throughout the nation. The memorandum states "Any sentence that does not include incarceration would send the wrong message to the hacking community; that is, that breaking into computer systems is not really a crime." The document also states that "All three defendants have provided significant cooperation that has fueled further investigation into the activities of a number of computer hackers throughout the country." Because of this cooperation, the "government moves for this Court to make a downward departure pursuant to S.G. 5k1.1 in the amount of three levels for defendants Grant and Darden and two levels for defendant Riggs." The memorandum then details the cooperation of each of these defendants in cases involving Craig Neidorf in Chicago and an unnamed "fellow Legion of Doom member" in Detroit. The memorandum also explains why a lesser departure is recommended for Riggs - "Defendant Riggs strikes the undersigned counsel as an unusually quiet and pensive person. Throughout the investigation, he has been cooperative, but because of his nature, he sometimes comes across as uninterested and evasive. The bottom line is that he provided helpful information that furthered several investigations around the country, though his assistance was not as substantial as that of Grant and Darden; hence the recommendation of only a two-level departure." An earlier conviction for Riggs related to computer fraud was also mentioned. In the actual sentencing by Judge Forrester, Grant and Darden received 14 months incarceration of which 7 will be in a half-way house while Riggs received 21 months incarceration . Additionally, they were directed to make restitution payments to BellSouth of $233,000. In a conversation with Newsbytes, the aforementioned Craig Neidorf questioned the determination of damages in the case, saying "I hope that the damages claimed by BellSouth have been well scrutinized by the government. You may remember that, before the charges against me were dismissed, BellSouth had claimed that the value of the document in question was over $70,000. It turned out that the document was available in print for under $20. Riggs, Darden and Grant had already pleaded guilty when this gross overstatement came out. I hope, for justice's sake, that the restitution awarded actually relates to substantiated damages." An examination of the sentencing memorandum finds that the E911 file, "the subject of the Chicago indictment" was estimated by Bob Kibler of BellSouth Security to be valued, based on R&D costs, at $24,639. Kent Alexander, Assistant U.S. Attorney, told Newsbytes that he "is comfortable with the method under which the damages were determined." He also clarified the order for restitution, saying that Riggs, Darden and Grant are jointly responsible for the $233,000 and that each of them is individually liable for the entire amount should the others default in payment. The Department of Justice release also stated "The United States Attorney commented that most computer users engage in legal and constructive activities. Criminal hackers, however, who break into computer systems of others, are breaking the law and will be prosecuted accordingly." (Barbara E. McMullen & John F. McMullen/19901119) ******************************************************************** >> END OF THIS FILE << *************************************************************************** ------------------------------ From: Jim Warren (jwarren@well.sf.ca.us) Subject: First Conference on Computers, Freedom & Privacy Date: Undated ******************************************************************** *** CuD #2.13: File 4 of 5: Computers Freedom and Privacy Conf. *** ******************************************************************** {One good consequence of Operation Sun Devil has been the increased awareness of the need to address issues of ethics, computer rights, and computer abuse. The following conference is an attempt to bring a variety of individuals and groups together to exchange information and opinions--moderators}. FIRST CONFERENCE ON COMPUTERS, FREEDOM & PRIVACY ------------------------------------------------ March 25-28, 1991, Monday-Thursday SFO Marriott Hotel, reservations: 800-228-9290 San Francisco Airport, 1800 Old Bayshore Hwy, Burlingame CA 94010 COOPERATING ORGANIZATIONS ------------------------- Electronic Networking Association Videotex Industry Association Electronic Frontier Foundation The WELL, Portal Communications [as of 11/23/90, more expected shortly] Sponsor: Computer Professionals for Social Responsibility PLANNED CONFERENCE SESSIONS --------------------------- 1. The Constitution in the Information Age [opening session] coordinator: Jim Warren; Chair: Jim Warren Introductory remarks; then, major policy proposal regarding electronic communications and Constitutional rights. speaker: Professor Lawrence Tribe, Harvard Law School 2. Trends in Computers & Networks coordinator: Peter Denning; Chair: Peter Denning Overview and prognosis of computing capabilities and networking as they impact personal privacy, confidentiality, security, one-to-one & many-to-one communication, and access to information about government, business & society. 3. Public-Sector Information About Individuals coordinators: Les Earnest, Bruce Koball; Chair: Collection, verification, use, sharing and protection of, and access to and responsibility for personal information, by government agencies, such as census, voter, tax, license, permit and criminal records. 4. Private-Sector Information About Individuals coordinators: Les Earnest, Bruce Koball; Chair: Collection, marketing, verification, use and protection of, and access to and responsibility for personal information, by private organizations, such as banking, credit, health, consumer, employment, family & lifestyle information. 5. International Perspectives & Impacts coordinator: Mark Graham; Chair: Other nations' models for protecting personal information and communication, and granting access to government information; existing and developing laws; requirements on trans-national dataflow, personal expression & accountability. 6. Law Enforcement Practices and Problems coordinators: Dorothy Denning, Glenn Tenney; Chair: Issues relating to investigation, prosecution, due process and deterrence of computer crimes, now and in the future; using computers to aid law enforcement. 7. Law Enforcement and Civil Liberties coordinators: Dorothy Denning, Glenn Tenney; Chair: Interaction of computer crime, law enforcement, and civil liberties; issues of search and seizure, sanctions, and shared or networked equipment, software and information. 8. Legislation & Regulation coordinators: Marc Rotenberg, Elliot Fabric; Chair: Legislative and regulatory roles in protecting privacy and insuring access; legal problems posed by computing and computer networks; approaches to improving related government decision-making. 9. Computer-Based Surveillance of Individuals coordinators: Les Earnest, Bruce Koball; Chair: Monitoring electronic-mail, public & private teleconferences, electronic bulletin boards, publications and subscribers; tracking individuals' location, work performance, buying habits & lifestyles; pattern recognition & profiling 10. Ethics and Education coordinators: Dorothy Denning, Glenn Tenney; Chair: Ethical principles for individuals, system administrators, organizations, corporations, and government; copying data, copying software, distributing confidential information; relations to computer education and computer law. 11. Electronic Speech, Press and Assembly coordinators: Marc Rotenberg, Elliot Fabric; Chair: Freedoms and responsibilities regarding electronic speech, public and private electronic assembly, electronic publishing, prior restraint and chilling effects of monitoring. 12. Access to Government Information coordinator: Mark Graham; Chair: Implementing individual and corporate access to federal, state & local information about communities, corporations, legislation, administration, the courts and public figures; allowing access while protecting confidentiality. 13. Where Do We Go From Here? [closing session] coordinator: Jim Warren; Chair: Jim Warren Perspectives and recommendations of participating groups, proposed next steps to protect person privacy, protect fundamental freedoms and encourage responsible policies and action. ******************************************************************** >> END OF THIS FILE << *************************************************************************** ------------------------------ From: chron!magic322!edtjda@UUNET.UU.NET(Joe Abernathy) Subject: Hackers Break into DEA Lines Date: Wed, 21 Nov 90 17:32:59 CST ******************************************************************** *** CuD #2.13: File 5 of 5: Hackers & the DEA PBX (J. Abernathy *** ******************************************************************** " Hackers break into DEA lines: Long-distance Service the Target" From: Houston Chronicle, Saturday, Nov. 17, 1990 (p. 1A) By JOE ABERNATHY (Copyright 1990, Houston Chronicle) Computer hackers and others stole long distance service worth up to $1.8 million from the government through the Houston offices of the Drug Enforcement Administration, the agency acknowledged Friday. "We became aware of it last spring," said DEA spokesman Thomas Lentini. "Southwestern Bell telephone security told us that they suspected somebody was hacking into our FTS system. That's the Federal Telephone System." The agency cannot estimate the precise value of the long distance service since it used a dedicated line without per-call billing. But an Arizona prosecutor who specializes in computer fraud has estimated that such a breach can use service worth at least $100,000 a month. Self-described hackers told the Houston Chronicle that hundreds of people around the nation used the government phone lines over a period of 18 months. The DEA has taken measures to protect its system, Lentini said. The thefts were discovered during a nationwide, previously undisclosed Southwestern Bell investigation into the fraudulent use of phone credit cards. "There were some folks that were making unauthorized use of customers' credit cards," said Ken Brasel, Southwestern Bell spokesman. "In our investigation of these people we discovered that they had used these credit cards to call a local number which turned out to be the DEA." By punching in an access code after connecting with this number, callers could place outgoing calls using the federal government's dedicated, private phone lines. "You just had to dial 8 and you could go anywhere," said a hacker who brought the DEA system invasion to the Chronicle's attention. "Hundreds used it." "A guy even walked up to me in Safeway once and asked if I'd heard about the 221 PBX," said another hacker. These two and other hackers, identifying themselves by their computer system "handles" but declining to give their real names, discussed the matter with a Chronicle reporter in a series of late-night conference calls that they initiated. PBX, or private branch exchange, is the name given to the telephone switching systems used in medium to large companies, while 221 is the downtown prefix of the three DEA lines offering access into the federal phone system. "The way the system works is we call an access number that puts us into FTS, then we can call anywhere," Lentini said, explaining that the system was dedicated to upper management's use, typically for calls to Washington. "In effect, they have their own WATS line," Brasel said. "When they talk from here to Washington, they don't go through an AT&T operator." The phone lines were used both for normal calls and for computer data telecommunications, hackers said, and calls were placed around the world. According to the Arizona state attorney general's office, which has become renowned for its vigorous pursuit of hackers, PBXs are a prime source for overseas phone fraud, and give hackers a layer of security. If a call is traced,it is traced back to the company that owns the PBX, not to the hacker. "In the last two years it's just skyrocketed in terms of international" calls, said Gail Thackeray, an assistant attorney general in Arizona. "All of the long distance carriers are under siege." Thackeray estimated in a recent Chronicle interview that PBX abuse will cost industry $500 million this year. According to her formulas, the DEA hackers may have used service worth $100,000 or more during each of the 18 months in which the agency's phone system was compromised. "We have some anti-social, fairly dangerous hackers out there because of the size of tools they have," Thackeray said. Assisted by computers, the hackers find the PBX numbers through trial and error by calling all available numbers in a prefix. "Numbers get passed around like a stock commodity," said one. A breach can go undetected for a long time because the government doesn't render bills on its dedicated phone lines. "Once the break-in was discovered, we immediately changed the access number," Lentini said. "We worked with Southwestern Bell trying to determine who the culprit was and we just couldn't do it," he said. "They were getting into it from pay telephones" as well as from residences and places of employment. "Southwestern Bell is still monitoring our lines for indicators that they're hacking into it again." Referring to the larger investigation of credit card fraud, Brasel urged that consumers exercise caution. "What these guys were doing is calling up and saying 'We're from AT&T and we've had a computer failure' and they say 'We need your credit card number and your PIN (personal identification number),' " he said. "That's like giving someone the key to the bank vault. You just don't do that." ******************************************************************** ------------------------------ **END OF CuD #2.13** ********************************************************************