Feeds

‘Bill Gates’ hacker escapes jail

Psychiatric and community service order for teen cracker Curador

  • alert
  • submit to reddit

Security for virtualized datacentres

A Welsh cracker whose "campaign" to expose the insecurity of ecommerce sites led to an FBI investigation has escaped jail.

19 year-old Raphael Gray was sentenced to a psychiatric and community service rehabilitation order of three years, in a hearing before Judge Gareth Davies at Swansea Crown Court today.

Gray (whose handle is "Curador", or custodian in Welsh) obtained the credit card details of thousands of people from sites with flakey security and published those details on two sites, paid for with stolen credit card details.

Neil Barrett, technical director of Information Risk Management, and expert witness for the prosecution in the case, described Gray's offences as "very serious" because many people could have had their credit card details exploited.

That said, Gray himself did not commit widespread fraud, said Barrett, who added that no "collateral damage" was inflicted by the cracker to the sites he targeted.

Credulous news outlets continue to report that Gray published the credit card details and phone number of Bill Gates on his sites ecrackers.com and freecreditcards.com, and sent a consignment of Viagra to the Microsoft boss. In fact the details published were an obvious fake, as you can see on an archive of his site (minus credit card details) here.

Nonetheless the self-styled "saint of ecommerce" caused huge inconvenience to the American, British and Canadian dotcoms he targeted. His activities brought him to the attention of the FBI and, amid fears details of 26,000 credit cards had been compromised, his house in the sleepy hamlet of Clynderwen in west Wales was raided in March last year.

Gray pleaded guilty to theft and hacking offences which fall under the Computer Misuse Act when the case came to trial four months ago. He admitted two charges of obtaining services by deception and offences under the Theft Act in setting up the two Internet sites on which credit card information was published.

He also pleaded guilty to six charges of intentionally accessing sites containing credit card details, but without using this information for financial gain.

Prior to pleading guilty, Gray had argued in his defence the he hadn't hacked into the Web sites. His defence was that because there was no way for him to establish that his access was authorised, it couldn't be unauthorised. Because of his guilty plea these arguments, which have a wider significance beyond Gray's case and could have opened up a line of defence for hackers, were not tested in court.

"It was a shame that the interesting arguments about authorised versus unauthorised access on Web sites were not fully exposed in the case," said Barrett. ®

Related Stories:
Cracker in 'credit card Viagra sting on Gates'
Welsh hacker pleads guilty to deception and theft
FBI tracks Bill Gates credit card hackers to Welsh village
Hacking credit cards is preposterously easy
Identity Thefts from the Rich and Famous

External links:
Curador's web site (minus real credit card details) - as mirrored by Attrition

Beginner's guide to SSL certificates

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.