Feeds

Son of state lawmaker charged with Palin email hack

'No interwebs for you!'

Protecting against web application threats using SSL

The son of a Democratic Tennessee state lawmaker pleaded not guilty on Wednesday after being indicted for breaking into the email account of US vice presidential candidate Sarah Palin.

David C. Kernell, 20, of Knoxville, entered the plea in federal court in Knoxville. He was released without posting bond, but the court forbid the economics student at the University of Tennessee from using the internet except to check email and do class work. He was led into court wearing handcuffs and shackles on his ankles, the Associated Press reported.

Trial is set for December 16. Kernell faces a maximum of five years in prison and a $250,000 fine. He turned himself in to law enforcement authorities.

The son of Tennessee Representative Mike Kernell, David Kernell was indicted Tuesday by a federal grand jury in Knoxville for intentionally accessing Palin's Yahoo email account without authorization. Last month, the Alaska governor came under scrutiny for using private email accounts to conduct official state business. If true, the allegations could amount to violations of open government laws requiring communications be carried out on state-issued accounts.

Representative Kernell has said he had nothing to do with the incident.

According to the three-page indictment, David Kernell gained access to gov.palin@yahoo.com on September 16 by exploiting weaknesses in Yahoo's password reset feature. He then read the contents, made screenshots of the email directory, individual messages, and other personal information, and posted selected information to the 4chan website.

The account - right down to Kernell's decision to reset the password to "popcorn" - largely matches a narrative left on 4chan by a user calling himself Rubico. Bloggers quickly tracked the user to an email address belonging to David Kernell. At least one other person used the reset features to access Palin's account, according to the indictment.

After posting the password on 4chan and realizing investigators were probably closing in on him, David Kernell "removed, altered, concealed, and covered up files on his laptop computer," the indictment alleges.

Federal investigators had at least one other lucky break in the case. Screenshots posted to Wikileaks contained a whole string of random-looking characters generated by the proxy service used by the person accessing Palin's account. That was enough for Ctunnel.com owner Gabriel Ramuglia to identify the perpetrator. Within two days of the intrusion, FBI officials were on the case. ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
TOR users become FBI's No.1 hacking target after legal power grab
Be afeared, me hearties, these scoundrels be spying our signals
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Home Depot: 56 million bank cards pwned by malware in our tills
That's about 50 per cent bigger than the Target tills mega-hack
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
UK.gov lobs another fistful of change at SME infosec nightmares
Senior Lib Dem in 'trying to be relevant' shocker. It's only taxpayers' money, after all
Critical Adobe Reader and Acrobat patches FINALLY make it out
Eight vulns healed, including XSS and DoS paths
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.