TK0JUT2%NIU.BITNET@UICVM.uic.edu (08/20/90)
**************************************************************************** >C O M P U T E R U N D E R G R O U N D< >D I G E S T< *** Volume 1, Issue #1.29 (Aug 19, 1990) ** **************************************************************************** MODERATORS: Jim Thomas / Gordon Meyer (TK0JUT2@NIU.bitnet) ARCHIVISTS: Bob Krause / Alex Smith USENET readers can currently receive CuD as alt.society.cu-digest. COMPUTER UNDERGROUND DIGEST is an open forum dedicated to sharing information among computerists and to the presentation and debate of diverse views. CuD material may be reprinted as long as the source is cited. It is assumed that non-personal mail to the moderators may be reprinted, unless otherwise specified. Readers are encouraged to submit reasoned articles relating to the Computer Underground. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ DISCLAIMER: The views represented herein do not necessarily represent the views of the moderators. Contributors assume all responsibility for assuring that articles submitted do not violate copyright protections. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CONTENTS: File 1:: Moderators' Corner File 2:: From the Mailbag File 3:: Direction of CuD File 4:: Password checking programs and trojan horses File 5:: What is "CYBERSPACE?" File 6:: The CU in the News ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ---------------------------------------------------------------------- ******************************************************************** *** CuD #1.29, File 1 of 6: Moderators' Comments *** ******************************************************************** Date: August 19, 1990 From: Moderators Subject: Moderators' Corner ++++++++++ In this file: 1) CRAIG NEIDORF DEFENSE FUND 2) COMPUSERVE AND CuD BACK ISSUES 3) BLOCKING OF LONG DISTANCE NUMBERS 4) PAT TOWNSON AND TELECOM DIGEST +++++++++++++++++++++++++++++ CRAIG NEIDORF DEFENSE FUND +++++++++++++++++++++++++++++ Those interested in contributing the Craig Neidorf's defense fund to help reduce his legal costs, which exceeded $100,000, should do so soon. Checks should be made out to the law firm of KATTEN, MUCHIN AND ZAVIS, and sent directly to his defense attorney: Sheldon Zenner c/o Katten, Muchin and Zavis 525 W. Monroe, Suite 1600 Chicago, IL 60606 ++++++++++++++++++++++++++++ COMPUSERVE AND CuD BACK ISSUES ++++++++++++++++++++++++++++ A limited number of CuD back issues are available for downloading in the Legal Forum of CompuServe. (GO LAWSIG) The files, called CUD1NN.ARC, are found in Library 1 (computers and law). Also available is Gordon Meyer's thesis, "The Social Organization of the Computer Underground" as CUTHESIS.ARC. Eventually we hope to have all CuD back issues available in this Forum, but the limited number of daily uploads the Forum will accept is an obstacle to accomplishing this goal in a timely fashion. We are also in the process of uploading CuD material to GEnie (General Electric Network for Information Exchange). The files will be available in the Legal SIG of that network as well. CIS and GEnie specific questions, concerning CuD availability, can be directed to Gordon at 72307,1502 (Compuserve) and GRMEYER (GEnie). Volunteers to help upload files are most welcome. +++++++++++++++++++++ LONG DISTANCE BLOCKING +++++++++++++++++++++ Last year, both PHRACK and PIRATE printed stories about the blocking of long distance numbers by Teleconnect, and included information about at least one law suit in Iowa. Since then, we have heard little about blocking long distance numbers by carriers. If anybody has information on current blocking practices or can provide evidence of continued blocking, please pass it along. Does the current dearth of information on blocking reflect a reduction of the practice? +++++++++++++++++++++++ PAT TOWNSON AND TELECOM DIGEST +++++++++++++++++++++++ Pat Townson, moderator of TELECOM Digest, has been largely responsible for the initial e-mail discussions of the CU. CuD began by publishing articles Pat was unable to include in TCD, and he was always willing to answer technical and other questions and offer advice. Whatever his own views on the the CU, Pat has been willing to air articles from all perspectives. Some of us have disagreed with his views and responded to his comments with vigor. He occasionally devoted special issues to attacks on his comments, and has never hesitated to provide others a forum for their views. Pat, we just want to say "Thanks!" ******************************************************************** >> END OF THIS FILE << *************************************************************************** ------------------------------ Date: August 19, 1990 From: Various Subject: From the Mailbag ******************************************************************** *** CuD #1.29: File 2 of 6: From the Mailbag *** ******************************************************************** Date: Wed, 15 Aug 90 07:13 EDT From: lsicom2!len@cdscom.cds.com(Len Rose) Subject: Request for INTERNET site by Len Rose I would like to request an internet account on any system (east coast preferable) since it seems ames can no longer provide such a favor. Most important is ftp access without quotas. Peter Yee can be contacted at (yee@ames.arc.nasa.gov) to vouch whether or not I was a considerate guest. I haven't asked him to vouch for me beforehand,and won't so as to make sure whoever contacts him gets his real opinion. Having an Internet account is crucial to my defense at this time. Voice phone information will be provided upon request. Thanks. Len Rose ------------------------------ Date: Thu, 16 Aug 90 17:50:00 -0500 From: Anonymous Subject: BBS virus alert (PC) This message was found on a WWIV bulletin board in Lawrence, KS alerting BBS users to avoid a file WWIVGA.ZIP which contains the Vienna Virus and was aimed at discrediting a local programmer. The "General" WWIV-Sub <WWIVnet> 100/100: ************** WARNING ****************** Name: Gary Martin #1 @9354 Date: Wed Aug 15 20:32:40 1990 ***************** WARNING *************************** Someone has created a .ZIP called WWIVGA.ZIP It claims to be a useful utility to put your computer in 43 or 50 line mode for running the BBS. THIS .ZIP CONTAINS THE VIENNA VIRUS!!!!!!!!!!!!!!!!!! The .DOC file that goes with it says that it was written by Carceris Dominus #1@9354 Castle RavenLoft. That is total bullshit. Carceris Dominus was my old handle. I've changed it since all this ^%$$@^% happened. BEWARE OF THIS FILE! DO NOT RUN IT!!! A user on my board uploaded this file and asked my why it doesn't work right. That user turned out to be a fake account. However I also got a call from a Sysop back east who found the virus using SCAN 66. After I read the docs I knew that some jerk had doctored up this thing to try and discredit me. (I am the author of Trade Wars 2002) I have since been working hard to tell everyone to avoid this file. ++++++++ Please pass this message along to others in the WWIV community The "General" WWIV-Sub <WWIVnet> ******************************************************************** >> END OF THIS FILE << *************************************************************************** ------------------------------ Date: August 19, 1990 From: Moderators Subject: Direction of CuD ******************************************************************** *** CuD #1.29: File 3 of 6: The Direction of CuD *** ******************************************************************** "Never trust anyone over thirty" leapt to my mind as soon as Jim pointed out that this would be our 30th issue of C-u-D. I brought this up to a friend (and C-u-D reader) on the way to work one morning. "Hey, great", he replied. "You know Jesus Christ didn't begin his evangelism until he was thirty, think of all the great things that could lie ahead for you!" Hmmm...I was just starting to agree with him when he added that three years later He was crucified. The digest was begun as an experiment, the long and heated discussion about CU issues had worn out its welcome on Telecom Digest so Pat Townsen suggested we form our own discussion forum. Jim took up the challenge and drafted (literally) me to help. Neither of us actually believed that it would last longer than three or four issues but we hoped it would. Now the digest has grown into a huge job and has a direct mailing list of over 400 readers (which doesn't begin to count those who get it from secondary sources and news echos). Our intent was to provide a free exchange of ideas and research into the Computer Underground. At the time the view (which has since been categorized as "hack symp") that the illegalization of "hacking" should be approached with caution was, well, not very well represented in the press, courts, law enforcement, and elsewhere. But with the efforts of the readers of C-u-D and 2600, the mainstream press and computer industry has picked up the cause and there is some hope that the "problem" of the Computer Underground will be addressed with accuracy and fairness. There are many issues and angles to be discussed and debated. The "Phrack Inc" case, which was our initial rallying point, has been settled. The other "LoD" busts are either in stasis or are being addressed by the professionals. It's time for the town criers, C-u-D, to take a breather and return to our academic research into the CU and other areas of personal interest. The C-u-D experience has given us much to work on. Many thanks to our readers, our friends, and even our critics. This, our 30th issue, will close volume one. The first issue of volume two will appear sometime in the future. Illegitimis Non Carborundum! GRM ******************************************************************** We are not sure if CuD has outlived its purpose. If so, it will be appearing less frequently, serving primarily update functions. If not, we must now reflect on goals and future direction. As Gordon observed, we began as an "overflow conduit" for TELECOM Digest for articles relating to the Phrack situation, and the goal was to stimulate discussion of issues and provide an alternative view to the one presented by the media and law enforcement. We believe we have had several major successes, especially in making visible the questionable tactics of law enforcement in some of the alleged computer abuse cases. We focused only on those in which the targets of federal agents seemed to exceed the alleged "crime" and in which, from the knowledge we obtained, the charges (or lack of them) seemed far beyond what evidence would show. We did not claim any to be innocent. Rather, we suggested that the "official picture" was out of focus, and something was not quite right. We have not, nor will we, condone predatory behavior, and our concern has been for the broader issue of civil liberties rather than for a "right to hack." We have been accused of being "mean-spirited," "non-objective," and poor journalists. Perhaps all are true. But, we never pretended to be journalists: We are gadflies attempting to raise issues, and we feel our facts were generally accurate. We have learned from both critics and advocates, and we have come to appreciate the grey area in high tech crimes between legitimate enforcement and over-zealousness. We have apologized for some excesses, modified our views on others. That seems to be the primary difference between CU types and the "other side." We have no wish to polarize, but "sides" were thrust upon us. That "other side" does not have "apology" in its vocabulary, nor, judging by continued public statements, has it benefited from the dialogues occuring in and among CuD, the EFF, The Well, 2600 Magazine, TELECOM Digest, or the many other forums. Their hyperbole remains strident, and then others are faulted for responding. It is not CU supporters who have confiscated some equipment without strong justification, hidden behind "privacy protections," misled the public, foamed to the media, engaged in initial ad hominem attacks, engaged in disinformation, or nearly ruined a young man's life. As long as "I'm sorry," or "we were wrong" isn't in the vocabulary of some, as long as there seems to be no reflection on legitimate Constitutional issues, and as long as the view that "professional image" supercedes "doing the right thing," there is probably a role for CuD. We will be rethinking our direction, and we hope to continue combining general-interest information with more structured analyses of the relationship between computer technology and the social, legal, and ethical issues that arise. We hope readers will provide us with some feedback to guide us. We begin a new series of CuD with Volume II beginning next issue to symbolize the closing of one set of issues and the beginning a new set. Jim Thomas ******************************************************************** >> END OF THIS FILE << *************************************************************************** ------------------------------ Date: Tue, 14 Aug 90 00:11:38 EDT From: tmsoft!moore!gompa!rca@gpu.utcs.toronto.edu(Robert Ames) Subject: Password checking programs and trojan horses ******************************************************************** *** CuD #1.29: File 4 of 6: Password Checkers and Public Domain *** ******************************************************************** To the CUD people: Again, I find I must write as a result of an article in CUD. Last time, I had read the indictment of C. Neidorf, alleging, for example, that the software documentation in question was worth thousands of dollars, and that it was closely held and proprietary. My research, which is done for technical reasons only, indicated the truth to be entirely different - thus I had to speak up. So it is in the Len Rose indictment. There are two points I'd like to address: firstly, Ken Thomson, Bell Labs employee and author of UNIX, publicly admitted that he had installed a trojan horse in both the LOGIN.C program and in the C compiler. His paper to the ACM, presented while accepting a programming award, describes this trojan horse. The paper is, "Reflections on Trusting Trust", published in Communications of the ACM. Secondly, there are several password checking programs in circulation of the type described in CUD #128. The one I have here was obtained from ROGUE.LLNL.GOV by ftp. This is a U.S. government VAX computer. Here is an excerpt: =================================================================== >From CHECKPASS documentation: =================================================================== This program checks users passwords against some common words and names that are often used as passwords and against an on-line dictionary. The "idea" for this is based on the Arpa Internet Worm that made the news this past year. A report on the INFO-VAX Mailing list (see WORM.MES) talked about how the worm broke into accounts. The idea of checking passwords, for security reasons, came from that report. To run the programs you need to have enough privilige to read the information on the users to be checked from the UAF file using SYS$GETUAF functions. Both primary and secondary passwords are checked if they exist. The users to be checked are listed in the file USERS.DAT. The first line in USERS.DAT is the minimum password length for a password (read from the various source files) to be tested. The program allows up to 500 users to be listed. All the usernames are read in at th start of the program and the appropriate data read from the UAF. If a password is found it is stored in a data array and written out in a report after all the words in the dictionary and passwords files have been tested for all users. PLEASE NOTE that the LEXIC files are not supplied here. These files are part of the VASSAR Spelling checker program and make up the dictionary for that program. Those files need to obtained or that part of the program commented out before using this program. =============================================================== I encourage you to retrieve the entire package, to see for yourselves how similar this program is to Rose's. Robert Ames rca@gompa.UUCP P.O. Box 724, Station 'A', Toronto, CANADA ******************************************************************** >> END OF THIS FILE << *************************************************************************** ------------------------------ Date: August 19, 1990 From: Reprint Subject: What is "CYBERSPACE?" ******************************************************************** *** CuD #1.29: File 5 of 6: What is CYBERSPACE? *** ******************************************************************** ++++++++++++++++++++++++++ Three "cyber-articles" appeared in the last few issues of CuD, prompting some to ask what it all means. The following article is old, but remains a nice overview, so we reprint it here. +++++++++++++++++++++++++++ "Viewpoint", by Paul Saffo _Communications of the ACM_, June 1989, volume 32 number 6, page 664-665 Copyright 1989 by the Association for Computing Machinery. Posted with permission. "Consensual Realities in Cyberspace" More often than we realize, reality conspires to imitate art. In the case of the computer virus reality, the art is "cyberpunk," a strangely compelling genre of science fiction that has gained a cult following among hackers operating on both sides of the law. Books with titles like _True Names_, _Shockwave Rider_, _Neuromancer_, _Hard-wired_, _Wetware_, and _Mona Lisa Overdrive_ are shaping the realities of many would-be viral adepts. Anyone trying to make sense of the social culture surrounding viruses should add the books to their reading list as well. Cyberpunk got its name only a few years ago, but the genre can be traced back to publication of John Brunner's _Shockwave Rider_ in 1975. Inspired by Alvin Toffler's 1970 best-seller _Future Shock_, Brunner paints a dystopian world of the early 21st Century in which Toffler's most pessimistic visions have come to pass. Crime, pollution and poverty are rampant in overpopulated urban arcologies. An inconclusive nuclear exchange at the turn of the century has turned the arms race into a brain race. The novel's hero, Nickie Haflinger, is rescued from a poor and parentless childhood and enrolled in a top secret government think tank charged with training geniuses to work for a military-industrial Big Brother locked in a struggle for global political dominance. It is also a world certain to fulfill the wildest fantasies of a 1970s phone "phreak." A massive computerized data-net blankets North America, an electronic super highway leading to every computer and every last bit of data on every citizen and corporation in the country. Privacy is a thing of the past, and one's power and status is determined by his or her level of identity code. Haflinger turns out to be the ultimate phone phreak: he discovers the immorality of his governmental employers and escapes into society, relying on virtuoso computer skills (and a stolen transcendental access code) to rewrite his identity at will. After six years on the run and on the verge of a breakdown from input overload, he discovers a lost band of academic techno-libertarians who shelter him in their ecologically sound California commune and... well, you can guess the rest. Brunner's book became a best-seller and remains in print. It inspired a whole generation of hackers including, apparently, Robert Morris, Jr. of Cornell virus fame. The _Los Angeles Times_ reported that Morris' mother identified _Shockwave Rider_ as "her teen-age son's primer on computer viruses and one of the most tattered books in young Morris' room." Though _Shockwave Rider_ does not use the term "virus," Haflinger's key skill was the ability to write "tapeworms" - autonomous programs capable of infiltrating systems and surviving eradication attempts by reassembling themselves from viral bits of code hidden about in larger programs. Parallels between Morris' reality and Brunner's art is not lost on fans of cyberpunk: one junior high student I spoke with has both a dog-eared copy of the book, and a picture of Morris taped next to his computer. For him, Morris is at once something of a folk hero and a role model. In _Shockwave Rider_, computer/human interactions occurred much as they do today: one logged in and relied on some combination of keyboard and screen to interact with the machines. In contrast, second generation cyberpunk offers more exotic and direct forms of interaction. Vernor Vinge's _True Names_ was the first novel to hint at something deeper. In his story, and small band of hackers manage to transcend the limitations of keyboard and screen, and actually meet as presences in the network system. Vinge's work found an enthusiastic audience (including Marvin Minsky who wrote the afterword), but never achieved the sort of circulation enjoyed by Brunner. It would be another author, a virtual computer illiterate, who would put cyberpunk on the map. The author was William Gibson, who wrote _Neuromancer_ in 1984 on a 1937 Hermes portable typewriter. Gone are keyboards; Gibson's characters jack directly into Cyberspace, "a consensual hallucination experienced daily by billions of legitimate operators ... a graphic representation of data abstracted from the banks of every computer in the human system. Unthinkable complexity. Lines of light ranged in the nonspace of the mind, clusters and constellations of data..." Just as Brunner offered us a future of the 1970s run riot, Gibson's _Neuromancer_ serves up the 1980s taken to their cultural and technological extreme. World power is in the hands of multinational "zaibatsu", battling for power much as mafia and yakuza gangs struggle for turf today. It is a world of organ transplants, biological computers and artificial intelligences. Like Brunner, it is a dystopian vision of the future, but while Brunner evoked the hardness of technology, Gibson calls up the gritty decadence evoked in the movie _Bladerunner_, or of the William Burroughs novel, _Naked Lunch_ (alleged similarities between that novel and _Neuromancer_ have triggered rumors that Gibson plagiarized Burroughs). Gibson's hero, Case, is a "deck cowboy," a freelance corporate thief-for-hire who projects his disembodied consciousness into the cyberspace matrix, penetrating corporate systems to steal data for his employers. It is a world that Ivan Boesky would understand: corporate espionage and double-dealing has become so much the norm that Cases's acts seem less illegal than profoundly ambiguous. This ambiguity offers an interesting counterpoint to current events. Much of the controversy over the Cornell virus swirls around the legal and ethical ambiguity of Morris' act. For every computer professional calling for Morris' head, another can be found praising him. It is an ambiguity that makes the very meaning of the word "hacker" a subject of frequent debate. Morris' apparently innocent error in no way matches the actions of Gibson's characters, but a whole new generation of aspiring hackers may be learning their code of ethics from Gibson's novels. _Neuromancer_ won three of science fiction's most prestigious awards - the Hugo, the Nebula and the Philip K. Dick Memorial Award - and continues to be a best-seller today. Unambiguously illegal and harmful acts of computer piracy such as those alleged against David Mitnick (arrested after a long and aggressive penetration of DEC's computers) would fit right into the _Neuromancer_ story line. _Neuromancer_ is the first book in a trilogy. In the second volume, _Count Zero_ - so-called after the code name of a character - the cyberspace matrix becomes sentient. Typical of Gibson's literary elegance, this becomes apparent through an artist's version of the Turing test. Instead of holding an intelligent conversation with a human, a node of the matrix on an abandoned orbital factory begins making achingly beautiful and mysterious boxes - a 21st Century version of the work of the late artist, Joseph Cornell. These works of art begin appearing in the terrestrial marketplace, and a young woman art dealer is hired by an unknown patron to track down the source. Her search intertwines with the fates of other characters, building to a conclusion equal to the vividness and suspense of _Neuromancer_. The third book, _Mona Lisa Overdrive_ answers many of the questions left hanging in the first book and further completes the details of the world created by Gibson including an adoption by the network of the personae of the pantheon of voodoo gods and goddesses, worshipped by 21st Century Rastafarian hackers. Hard core science fiction fans are notorious for identifying with the worlds portrayed in their favorite books. Visit any science fiction convention and you can encounter amidst the majority of quite normal participants, small minority of individuals who seem just a bit, well, strange. The stereotypes of individuals living out science fiction fantasies in introverted solitude has more than a slight basis in fact. Closet Dr. Whos or Warrior Monks from _Star Wars_ are not uncommon in Silicon Valley; I was once startled to discover over lunch that a programmer holding a significant position in a prominent company considered herself to be a Wizardess in the literal sense of the term. Identification with cyberpunk at this sort of level seems to be becoming more and more common. Warrior Monks may have trouble conjuring up Imperial Stormtroopers to do battle with, but aspiring deck jockeys can log into a variety of computer systems as invited or (if they are good enough) uninvited guests. One individual I spoke with explained that viruses held a special appeal to him because it offered a means of "leaving an active alter ego presence on the system even when I wasn't logged in." In short, it was the first step toward experiencing cyberspace. Gibson apparently is leaving cyberpunk behind, but the number of books in the genre continues to grow. Not mentioned here are a number of other authors such as Rudy Rucker (considered by many to be the father of cyberpunk) and Walter John Williams who offer similar visions of a future networked world inhabited by human/computer symbionts. In addition, at least one magazine, "Reality Hackers" (formerly "High Frontiers Magazine" of drug fame) is exploring the same general territory with a Chinese menu offering of tongue-in-cheek paranoia, ambient music reviews, cyberdelia (contributor Timothy Leary's term) and new age philosophy. The growing body of material is by no means inspiration for every aspiring digital alchemist. I am particularly struck by the "generation gap" in the computer community when it comes to _Neuromancer_: virtually every teenage hacker I spoke with has the book, but almost none of my friends over 30 have picked it up. Similarly, not every cyberpunk fan is a potential network criminal; plenty of people read detective thrillers without indulging in the desire to rob banks. But there is little doubt that a small minority of computer artists are finding cyberpunk an important inspiration in their efforts to create an exceedingly strange computer reality. Anyone seeking to understand how that reality is likely to come to pass would do well to pick up a cyberpunk novel or two. Paul Saffo is a research fellow at Institute for the Future in Menlo Park, California, and a columnist for Personal Computing magazine. ******************************************************************** >> END OF THIS FILE << *************************************************************************** ------------------------------ Date: August 19, 1990 From: Various Subject: The CU in the News ******************************************************************** *** CuD #1.29: File 6 of 6: The CU in the News *** ******************************************************************** ------------------------------ Date: Fri, 17 Aug 90 18:05:08 EDT From: Michael Rosen <CM193C@GWUVM> Subject: Airforce airman pleads guilty to computer fraud Computerworld, August 6, 1990, pg. 8: TOO MUCH ACCESS Pensacola, Fla. - A former U.S. Air Force airman, alleged to be a member of the Legion of Doom, pleaded guilty last week in U.S. District Court to possession of at least 15 access codes with intent to defraud. Peter J. Salzman, 19, an airman at Elgin Air Force Base, used an Apple Computer, Inc. IIE to enter telephone systems operated by Bellsouth Corp., Bell Atlantic Corp. and other carriers, said Stephen Preisser, assistant U.S. attorney for the Northern District of Florida. A device that logs outgoing calls indicated that Salzman was "burning the wires" without paying for the telephone calls, Preisser said. The airman is alleged to be a member of the Legion of Doom, a group of hackers under investigation by federal and state authorities. Authorities searching Salzman's home uncovered correspondence that indicated Salzman was a member of the group, Preisser said. Salzman will be sentenced on Oct. 5 and could receive a maximum of 10 years imprisonment and a $250,000 fine. MICHAEL ALEXANDER ------------------------------ Date: Fri, 17 Aug 90 17:04:44 MDT From: siegel@spot.Colorado.EDU Subject: New York youths charged with "hacking" BOY, 14, ONE OF 13 HELD IN HACKER BUST From: The New York Times NEW YORK - Thirteen people, including a 14-year-old boy who is a suspect in a computer break-in at the office of the Air Force secretary, were arrested Thursday and charged with breaking into and stealing information from a variety of computers. Eight are juveniles, New York State Police said. Police spokesmen said warrants had been issued for two other people and as many as 40 people may have been involved in the computer hacker ring. The name of the 14-year-old who was arrested - he went by the computer handle of "Zod" - was not released because of his age. The boy was specifically charged with breaking into and stealing software from the mainframe computer at City University in Bellevue, Wash. School officials said Zod had either stolen or used about $15,000 worth of computer time and software. State police Maj. Peter J. Brennan said Zod is also a suspect in the November break-in of the secretary of the Air Force computer in the Pentagon. At the houses of those arrested, police seized computers and other electronic equipment reportedly used in the break-ins. The police identified the adults arrested as Bruce Monroe, 32, of Astoria, N.Y.; Jeff Miller, 21, of Franklin Square, N.Y.; Chai Hung Ling, 17, of Bayside, N.Y.; Anhtu Nguyen, 21, of Brooklyn, N.Y.; and Teerawee Unchalipongse, 19, of Staten Island, N.Y. They were charged with computer tampering, computer trespassing and theft of services. ------------------------------ Date: Fri, 17 Aug 90 18:05:08 EDT From: Michael Rosen <CM193C@GWUVM> Subject: Robert Morris and Craig Neidorf blurbs (Computerworld) Computerworld, August 6, 1990, pg. 114, Inside Lines: Convalescent time Robert T. Morris, convicted earlier this year for creating a worm program that shut down thousands of computers on the Internet network in November 1988, is "at a local hospital pushing a broom" to fulfill his court-ordered 400 hours of community services, according to his lawyer, Thomas Guidoboni. Morris also has a programming job at an unnamed Cambridge, Mass.-based software company. Guidoboni said he plans to file a brief in the court of appeals but has been waiting for the court reporter in Syracuse federal district court to turn over court transcripts of the trial. ...Craig Neidorf - the electronic newsletter editor whose publication of a "secret" Bellsouth file wasn't such a federal case after all (see page 8) - apparently had at least a partial electronic alibi. U.S. Secret Service agents attended Summercon, a hacker convention held in July 1988, to surreptitiously videotape Neidorf drinking beer and eating a pizza with his alleged co-schemers on the same date that the government alleged he was carrying out the scheme. Before the trial abruptly concluded, prosecutors succeeded in preventing use of the tape as evidence. If you've got facts that shouldn't be quashed, contact News Editor Pete Bartolik at 800-343-6474, fax the incriminating lingo to 508-875-8931, or address concerns to COMPUTERWORLD on MCIMail. ------------------------------ Date: Sat, 18 Aug 90 19:32:08 CDT From: TELECOM Moderator <telecom@eecs.nwu.edu> Subject: Phreak Pleads Guilty, Gets Two Years in Prison An interesting case in federal court here in Chicago Friday involved the sentencing of a woman who Judge Milton Shadur referred to as 'the mastermind behind 152 hackers and phreaks nationally ...' Judge Shadur sentenced her on Friday to two years in the custody of the Attorney General, based on her plea of guilty to one count of a seventeen count indictment. Leslie Lynn Douchette, 36, and mother of two small children was referred to by Secret Service investigators as 'the head of the largest ring of hackers and phreaks ever uncovered in the United States'. In TELECOM Digest, notice was made of Ms. Douchette at the time of her indictment and arrest, but unlike other high-profile cases, little more was noted about her in the media over the past few months. Ms. Douchette, of 6748 North Ashland Avenue in Chicago, along with her ring of phreaks and crackers (the term I prefer) allegedly cost various telephone companies in excess of one million dollars. In addition, Ms. Douchette and associates are alleged to have obtained over $600,000 from illicitly obtained Western Union money orders and merchandise acquired with fraudulent credit cards using the computer. Many members of her ring were juveniles, and many were associated with or considered themselves active in the Legion of Doom, although there is no evidence Ms. Douchette was a member of, or associated with the Legion. Six juveniles in four other states have been convicted as part of the ring operated by Ms. Douchette, and investigations of other ring members is continuing. Some of the pending investigations center around phreaks and crackers already under investigation for Legion of Doom activities, according to US Attorney William J. Cook, who prosecuted the case with attorney Colleen Coughlin. As part of her plea-bargained sentence, Ms. Douchette is cooperating fully with the government on pending investigations. She has given *additional names* and details to Secret Service investigators. Although Ms. Douchette said she once worked as a day care employee in Canada, Mr. Cook said she had been unemployed for some time, and appeared to be 'completely unskilled, unable to obtain any gainful and legitimate employment.' He continued, "her only skill seems to be her ability to use the telephone to manipulate people and computers." The sentence (actually two years and three months) is believed to be the stiffest ever given out to a phreak, and Mr. Cook noted this was given to her *despite* her plea of guilty. At the time of her sentencing, Judge Shadur remarked that he thought Ms. Douchette also needed psychiatric help, and his order calls for her to receive therapy while in prison. Ms. Douchette was represented by attorney Robert Seeder of the Federal Defender's Office here. At the time of sentencing, Mr. Seeder noted that Ms. Douchette's activities have now cost her the custody of her two children (both were taken from her and are now cared for elsewhere), and that by her plea, she had recognized and acknowledged responsibility for her actions. He asked Judge Shadur to show mercy upon the defendant and impose probation, with therapy as a condition. Judge Shadur refused, calling her 'the control center for phreaks and hackers everywhere.' Her motive, according to Mr. Cook, was the 'ego boost' she received as leader of the ring. Judge Shadur said 'phreaks and hackers need an example of what to expect when they are caught', and that Ms. Douchette's punishment and loss of custody of her children would serve that purpose. Patrick Townson ------------------------------ Date: 29 Jul 90 19:29:22 EDT From: Anonymous Subject: US Army virus research From: TIME, June 25, 1990, p. 5 "Grapevine" by Paul Gray, reported by David Ellis QUICK, THE RAID. Everyone knows that the computer industry is fighting against viruses, malicious programs that can infect whole networks and crash them. So it stands to perverse reason that hush-hush agencies like the CIA and NSA are trying to create such bugs as offensive weapons. The latest entrant in this quest is the U.S. Army, which is soliciting bids on a half-million dollar contract to develop tactical virus weapons capable of disabling enemy computers on the battlefield. The proposal has raised eyebrows among the military's hackers. Says one Army computer-security officer: "Many of my colleagues are quite surprised that something of this nature would be put o the streets for research rather than using the expertise internally available." ------------------------------ ******************************************************************** **END OF CuD #1.29** ********************************************************************