Feeds

Register story inspires FBI raid on student

Subversive literature, yikes

  • alert
  • submit to reddit

The Essential Guide to IT Transformation

FBI agents raided the dormitory room of Rensselaer Polytechnic Institute computer science student Andres Salomon in Troy, New York on Saturday, after a Register story piqued his interest in the recent New York Yankees' Web site defacement. The agents searched his room and removed three computers, two books, and a collection of notes.

Salomon said he'd visited the defaced Yankees site after learning about it from a friend on line Friday morning. "During a conversation [in IRC] about Microsoft's break in, and how the stolen source code would affect things... a friend mentioned that Yankees.com had also just been hacked (I found out later that he got that information from The Register)," Salomon says in an essay posted at /dev/random.

"I went to the Web page, and discovered that it had, indeed, been cracked... I then began a post-mortem inspection," he explains.

After sniffing about for a while, "I returned to my IRC client, said 'Looks like a DNS hack....' and the conversation went elsewhere. The entire thing lasted possibly five minutes, and occupied no more than three or four lines on IRC."

It was because of this brief exploration, carried out to satisfy his curiosity, that the Feds became interested in him as a suspect.

Salomon had not merely viewed the Yankees.com site with a Web browser which would have connected him via port 80, as it would also have done for hundreds of other curious folks as soon as the story broke. He had connected to different ports, which the Feds interpreted as a possible return visit by the vandal.

"I did blind connects to, at most, five ports (meaning I just telnetted to them, without knowing if they were even open or not), and my session consisted of getting the banner, and possibly typing 'QUIT'. Far less than if I had gone to port 80 and done a couple of GETs... Either way, you're in the logs, and you're transferring data," he observes.

It's certainly not rational for the Feds to be interested in Salomon solely on the basis of his curiosity about the Yankees site defacement after it had become news. In the absence of any further evidence tying him to the site earlier, the FBI's urgent move against him smacks of overzealous law enforcement, and the incontinent issuing of search warrants by judges.

Salomon would hardly have been alone in sniffing around the Yankees' Web site this weekend past. "I bet the real cracker connected to port 80 and admired his work," he observes. "I bet people he told did as well. What about the ton of people that connected to the site after The Register posted the story? They trampled all OVER precious logs," he notes.

"Because I trampled over them in a different [manner], that somehow makes it akin to tampering with a murder scene?"

Salomon was clearly taken aback by the willingness of the US government in general, and Janet Reno's Justice Department in particular, to invade the lives of individuals on very scant evidence.

"The FBI managed to get a search warrant based on logs from a firewall, that showed my IP only connecting, not even logging in, hours after news of the cracking had appeared on news sites. If they can get a search warrant this easily, your data is not safe sitting on your hard drive," he warns. ®

HP ProLiant Gen8: Integrated lifecycle automation

More from The Register

next story
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
iPad? More like iFAD: We reveal why Apple fell into IBM's arms
But never fear fanbois, you're still lapping up iPhones, Macs
White? Male? You work in tech? Let us guess ... Twitter? We KNEW it!
Grim diversity numbers dumped alongside Facebook earnings
HP, Microsoft prove it again: Big Business doesn't create jobs
SMEs get lip service - what they need is dinner at the Club
Bose says today IS F*** With Dre Day: Beats sued in patent battle
Music gear giant seeks some of that sweet, sweet Apple pie
Amazon Reveals One Weird Trick: A Loss On Almost $20bn In Sales
Investors really hate it: Share price plunge as growth SLOWS in key AWS division
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.