Feeds

MySpace hackers avoid extortion rap

Blackmail charges dropped against tracking software duo

Beginner's guide to SSL certificates

Blackmail charges have been dropped against a pair of hackers accused of mounting an extortion scam against MySpace as part of a plea-bargaining agreement.

Shaun Harrison, 19, and Saverio Mondelli, 20, of Suffolk County, New York, pleaded guilty to developing code that tracked MySpace users in exchange for an agreement by prosecution lawyers to drop charges that they attempted to extort $150,000 from MySpace.

An illegal access charge was also withdrawn as part of an agreement that saw the duo agree to three years' probation instead of facing charges punishable by up to four years' imprisonment.

Harrison and Mondelli also agreed to pay $13,500 in damages to MySpace and to serve 160 hours of community service as part of the agreement, AP reports. The duo further agreed to limits on their use of the internet, such as restricting themselves to one email address each, in order to avoid possible imprisonment.

Superior Court Commissioner Kristi Lousteau told the duo they will be subject to computer searches without notice and that they were both banned from accessing MySpace for any reason. Violation of their probation would result in imprisonment, she warned.

MySpace is supposed to offer anonymity to visitors, but Harrison and Mondelli developed software designed to allow users to track the email and IP addresses of surfers who visited their profile. MySpace blocked early versions of the traffic monitoring software, which was offered for sale on the web at $30 a pop, but the pair claimed to have developed an unbreakable version which they allegedly threatened to release unless MySpace paid them "consultancy fees".

Harrison and Mondelli were arrested in May 2006 when they flew to LA to "collect" these fees by undercover Secret Service and district attorney's investigators posing as representatives of MySpace.

Hemanshu Nigam, chief security officer for MySpace, welcomed the successful prosecution of Harrison and Mondelli. "We are pleased with outcome of this case and hope that it sends a message to anyone thinking about causing harm to the MySpace community," Nigam told AP, adding that MySpace will continue to oppose firms offering tracking software that violates user privacy. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Hackers thrash Bash Shellshock bug: World races to cover hole
Update your gear now to avoid early attacks hitting the web
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
Ello? ello? ello?: Facebook challenger in DDoS KNOCKOUT
Gets back up again after half an hour though
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.