Feeds

Memo to US Secret Service: Net proxy may pinpoint Palin email hackers

Not quite Anonymous

Reducing security risks from open source software

Updated Memo to law enforcement investigators tracking down who broke into Sarah Palin's Yahoo email account: Gabriel Ramuglia might be a good place to start.

The 25-year-old webmaster and entrepreneur is the operator of Ctunnel.com, the browsing proxy service used by the group that hacked into the vice presidential candidate's personal email account and exposed its contents to the world. While he has yet to examine his logs, he says there's a good chance they will lead to those responsible, thanks to some carelessness on their part.

"Usually, this sort of thing would be hard to track down because it's Yahoo email, and a lot of people use my service for that," he told El Reg in a phone interview. "Since they were dumb enough to post a full screenshot that showed most of the [Ctunnel.com] URL, I should be able to find that in my log."

Ramuglia got into the proxy business a few years ago, after schools began blocking access to an online game site he used to co-own. Pretty soon, people began using the proxy service to access YouTube, Gmail, MySpace, and dozens of other sites that are routinely blocked by IT departments.

To prevent abuse of the service - such as the occasional bomb threat or other illegal act that's been known to happen - Ramuglia logs each user's IP address, along with the time and web destination. That often isn't enough to track down people who access extremely popular websites. But in this case, the perpetrators included a whole string of random-looking characters when posting screenshots of Palin's hacked account. That will probably be enough for him to pinpoint the proverbial needle in the haystack.

The information at the moment is on a server at a Chicago colocation site owned by FDC Servers. Logs are automatically flushed after seven days, so the clock is ticking for law enforcement, who presumably are under intense pressure to protect the privacy of a candidate for the White House. Of course, there's always the possibility that Ctunnel.com was only one of multiple anonymization services the email hackers used to cover their tracks, but there's only one way to find out.

Ramuglia said if he is contacted by law enforcement officials he will probably give them the information they seek. At time of writing, he's received no inquiries from any law enforcement agencies, he said.

The breach of Palin's account "is pretty clearly against my terms of service," he said. "As exciting as it is to be in the news, this is not the type of activity I can encourage by any means."

Update

Within hours of this story posting, Ramuglia received a phone call from an FBI special agent from the Anchorage, Alaska, field office.

"He just wanted to make sure I wasn't losing the logs," Ramuglia said, referring to the special agent. The two are scheduled to speak again soon to coordinate the turning over the logged information.

What's more, Wired.com has a story here detailing a now-removed post to the 4chan website in which a person claiming to the hacker who accessed Palin's email "used only a single proxy service to hide his IP address." Oops. ®

Mobile application security vulnerability report

More from The Register

next story
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Microsoft: You NEED bad passwords and should re-use them a lot
Dirty QWERTY a perfect P@ssword1 for garbage websites
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
NUDE SNAPS AGENCY: NSA bods love 'showing off your saucy selfies'
Swapping other people's sexts is a fringe benefit, says Snowden
Own a Cisco modem or wireless gateway? It might be owned by someone else, too
Remote code exec in HTTP server hands kit to bad guys
British data cops: We need greater powers and more money
You want data butt kicking, we need bigger boots - ICO
Crooks fling banking Trojan at Japanese smut site fans
Wait - they're doing online banking with an unpatched Windows PC?
NIST told to grow a pair and kick NSA to the curb
Lrn2crypto, oversight panel tells US govt's algorithm bods
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Mobile application security vulnerability report
The alarming realities regarding the sheer number of applications vulnerable to attack, and the most common and easily addressable vulnerability errors.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.