Hacker Trashes U.S. Army PCs; Faces 70 Years

By Devin Connors, published on February 26, 2009 at 6:30 PM
Source: Tom's Guide US | Keywords: , , ,
Syndication: Add to your Google homepage Add to My Yahoo!

British computer hacker Gary McKinnon is one step closer to standing trial in the United States.

In 2002, Gary McKinnon was arrested by British police after the U.S. Department of Justice accused the man of breaking into American government computer systems. All in all, McKinnon is accused of hacking into computers belonging to the Pentagon, NASA, and the U.S. Army and Navy, amounting to USD $700,000 in damages. Now, after the British Director of Public Prosecutions (DPP) has decided not to press any charges against McKinnon, he will likely be extradited to the United States to stand trial.

According to Reuters, McKinnon and his legal team wanted to stand trial in Britain because he would probably face a shorter sentence. If tried and convicted in America, McKinnon will face up to 70 years behind bars. After review by the Crown Prosecution Service (CPS), the British government decided McKinnon needed to face his accusers in the country where his actions took place. "These were not random experiments in computer hacking," said Alison Saunders, head of the CPS Organized Crime Division, "but a deliberate effort to breach U.S. defense systems at a critical time which caused well documented damage."

Throughout his ordeal, McKinnon has maintained that he is just a simple computer enthusiast who became curious about extraterrestrial life on Earth. He claimed his journeys through U.S. government computer systems were only an attempt to satisfy that curiosity. In reality, McKinnon is being accused of bringing down the U.S. Army's Military District of Washington network for 24 hours, which includes over 2,000 computers.

While the DPP decision brings McKinnon one step closer to trial in the U.S., he does have one last shot at staying in Britain. McKinnon has Asperger's Syndrome, and a review of his case involving Britain’s State Department regarding that illness could keep him at home. "Mr. McKinnon will still remain in the United Kingdom as the judicial review proceedings against the (U.K.) Secretary of State remain outstanding and we are hopeful that those proceedings will be successful," said Kaim Todner, one of McKinnon's lawyers.

Despite his illness, breaking into government computer systems is a serious crime. To do it not once, but at least four times makes it hard to believe that McKinnon’s actions were to satiate his curiosity about aliens instead of malicious acts against a foreign government. We'll be sure to keep you posted on Gary McKinnon and his legal battle in the coming months.

Comments | Print | Send to a friend

Sponsored links

Comments

grieve 02/27/2009 12:38 PM
Hide
-0+

Interesting, this is the first i have heard of this case.

Hacking Government PC's should carry a lofty punishment.

zild1221 02/27/2009 12:41 PM
Hide
-8+

If he was able to get into it, he deserves a job with the US government. Not jail time.

fonzy 02/27/2009 12:52 PM
Hide
-6+

"Hacker Trashes U.S. Army PCs"

He didn't thrash anything he just hacked into them to see if the government was covering up UFO's...if he wanted to damage them he could of did some serious damage.

aethm 02/27/2009 1:01 AM
Hide
-7+

I gotta agree with the above post. The US should hire him on in lieu of criminal punishment. Anybody who can hack those systems is seriously talented.

Tekkamanraiden 02/27/2009 1:14 AM
Hide
-9+

Instead of jail time how about a tour in Iraq.

TheCapulet 02/27/2009 1:15 AM
Hide
-12+

zild1221 :
If he was able to get into it, he deserves a job with the US government. Not jail time.


Hacking into the goverment PC's isnt hard. It's the not getting caught part that makes a good hacker.

darkguset 02/27/2009 1:44 AM
Show
Blessedman 02/27/2009 2:04 AM
Hide
-7+

Though... In his defense, if he was able to hack in and just look around there are others that could hack in and not just look around. He should actually be getting off a lot lighter as a thank you for showing how vulnerable they were. I am not saying what he did was right and that he should be let go, but because he helped show a flaw (in a messed up way, but hey if you wanted to know something and it was right there waiting for you to look...) in their security. Oh well...

ravenware 02/27/2009 2:05 AM
Hide
-6+

Quote :dial-up modem, not even broadband


I would imaging tracking a hacker who is using a dial up connection would be a little more difficult given that the IP address would always be different.

Anonymous 02/27/2009 2:11 AM
Hide
-1+

Are you kidding me? This man broke into government systems. Whether he did any damage or not, it's still illegal!

darkguset 02/27/2009 2:18 AM
Hide
-3+

And that is why i said give him a hefty fine not jail time. Come on! There are serial killers that get 30 years or even less for good behaviour, and he will get 70!??? You must be out of your mind or something! Also tracking someone through dial-up or ISDN or broadband is exactly the same, the ISP ALWAYS know which telephone number dials in before they assign an IP address to it. I mentioned the dial-up modem because the hacking procedure would be so much more difficult due to the time it would take him through the connection to do whatever he was doing. Extremely small speed, especially from UK to US!

darkguset 02/27/2009 2:21 AM
Show
palladin9479 02/27/2009 3:21 AM
Hide
-7+

Ok darkguset you have no clue what your talking about. The unclass government PC's are behind hardened firewalls and subject to a pretty heavy GPO / security requirements. Passwords are not "four letter" but instead 16 with at least two upper, two lower, two numbers and two "special characters". The only way to "hack" into these systems would be some bot/script off a website run by someone with local admin rights or through deliberate phishing attempts to get login / system info. And the only way to "take down" a network like that is to screw with the firewalls / routers, or start shutting down the AD servers. All of which require a concerted effort and deliberate malicious intent. Dude probably thought he could get something worth a damn off those systems.

This guy should go to jail for awhile, if to do nothing else but to set a precedent / make an example to anyone else wanting to do something stupid. Don't screw with US Government / DoD computer systems -EVER-, its like playing Russian roulette when all six chambers have a round in them.

Claimintru 02/27/2009 3:23 AM
Hide
-5+

Except the information for national defense and military weapons/installations could endanger far more lives than someone speeding or drunk driving. Don't be stupid.

Though I am of the mindset they ought to put him on payroll just for being able to hack it.

doomsdaydave11 02/27/2009 3:36 AM
Show
Harby 02/27/2009 4:26 AM
Hide
-11+

doomsdaydave11 :
Hacking government computers, especially from another country, should = death imo.



You kidding me? Rapists and child molesters don't get death sentence and a hacker will?

NuclearShadow 02/27/2009 4:34 AM
Hide
-4+

doomsdaydave11 :
Hacking government computers, especially from another country, should = death imo.



I doubt you were be saying such if this was a American hacker who tarted North Korea or Iran. Then you would probably be praising him and find it absurd to hand him over to his certain death.

Besides if hacking government's is to much for you to handle do you think we should stop all of our intelligence programs that spy on other nations? Would our spies or even our whole intelligence agency be executed if it were up to you? They have a much larger effect than any lone hacker like this one on trial.

m3kt3k 02/27/2009 4:42 AM
Hide
--3+

He may have gotten a job offer and foolishly turned it down. Had a friend that hacked into a collage and they found him. He was given two choices. Trial or parttime Admin. He chose admin.

Anonymous 02/27/2009 5:01 AM
Hide
-1+

He hacked 4 times because he is an Asperger, not because he was a criminal. Aspergers are obsessive with some things, and he probably wanted to hack the place in different ways and compare results.

Also, what kind of damage did he cause? $700.000 damages to 2.000 computers equals to $350 for PC, so it's not like he destroyed them. I bet that most of the damage is actually the amount of money spent trying to identify him!!!

m3kt3k 02/27/2009 5:06 AM
Hide
--3+

He may have gotten a job offer and foolishly turned it down. Had a friend that hacked into a collage and they found him. He was given two choices. Trial or parttime Admin. He chose admin.

tricky trees 02/27/2009 6:22 AM
Hide
-0+

I bet most of the $700,000 dollars was spent on the pretty illustration to go into the classified file so Mr Bush could understand and follow the story.

fudgeboy 02/27/2009 7:08 AM
Hide
-3+

HAHA! if the US army had half a brain they would lock him in a laboratory and get him to help develop their security!
not saying that what he did was right, they COULD treat it like jail and not pay him or anything. but they should defiantly try to learn from the kid

oicw 02/27/2009 8:05 AM
Hide
-3+

The big question is, did he uncover the secret files showing where they keep the shot-down Marsian UFOs?

magicandy 02/27/2009 9:07 AM
Hide
-2+

There are no UFO files. It's all just a stupid ****ing distraction for the masses that are bored with their lives and need something ridiculous to keep their minds on instead of asking the many crucial questions people should be asking our government.

xrodney 02/27/2009 9:08 AM
Show
neiroatopelcc 02/27/2009 9:11 AM
Hide
-2+

Just because you can locate and possibly abuse security flaws doesn't mean that you can effectively fix them as well. He's just a petty criminal really. If he'd brought my company's network down for 24 hours I doubt he'd even get jail time, but then again we're not as dependant on computers as any nations standing army.

derek2006 02/27/2009 9:18 AM
Hide
--1+

I say we should make an example out of him and give him a very harsh punishment and let the public know. Then secretly hire him while everyone thinks he got life or something.

Curnel_D 02/27/2009 11:43 AM
Hide
-2+

I cant believe how many people are saying hire him. I can promise everyone that this douchebag would have no idea hwo to strengthen security, and sure as hell not even close as well as the guys that the DoD already hires. All he would be is another $100,000 of my money and a huge liability to the United States Government. They need to put him away for 10 years, and make sure that the country he is released to commits to revoking any access to the internet for life.

Just cause he can use a few prebuilt hacking tools doesnt make him a security professional. It just makes him a careless douchebag. Otherwise everyone in the world would be hacking the pentagon.

mrcheesle 02/27/2009 12:16 PM
Hide
-2+

Wow, so many ignorant comments from people that have no clue of US military procedures or resources. Believe me, when they estimate that $700K worth of damage was done that might have been an understatement. If HQ servers get shutdown, it can restrict access to some very critical information that is needed for quick decision making around the globe 24 hours a day, 7 days a week. Information such as intel reports that could have possibly saved lives, how much money do you think that is worth? The man may be gifted, but you can't say that he didn't know what he was doing was illegal.

jeroman 02/27/2009 1:35 PM
Hide
-0+

There have been several cases such as this in the past. Most of the time the estimated damage is greatly exaggerated. Most hackers do it as a challenge, not maliciously, and the term hacker used to be imbued with some sort of honour until crims started embezzling money, etc... Seriously, how could a simple trawl for info cause all those PCs to crash!? It would be counterproductive. They won't hire him because he isn't a US national. They ironically trusted Hussein more than they trust the British. And yes, their own intel and security services do this. But they are a group. In a world of Transnationals and "National Security" it is individuals who suffer.

Regected 02/27/2009 3:42 PM
Hide
-3+

Wow, so many people commenting without a real knowledge of what this guy did or didn't do. His $700,000 damages was from deleting the wrong log file while covering his tracks. He didn't shut any servers down nor harm any equipment. The bulk of the damages cost is from trying to figure out to what he gained access. He gained access to the network with a dialing bot with a range of known numbers for the base which housed the network. The terminal he gained access to should have been removed from the network years before this incident since it had minimal security and no firewall. He simply brute forced his way in once he had the direct phone number.

He went back several times because each time he gained information, it opened more questions. He got caught when he went back a final time to get evidence of what he found. Who knows where this story would be if he succeeded in gaining the evidence he was seeking.


Comments are closed on this page.

Sponsored links