Original URL: http://www.theregister.co.uk/2007/12/20/tuscon_police_website_defacement/

Indonesian hacker touches souls by bringing down police website

Transmigration of the SQL

By Dan Goodin

Posted in Security, 20th December 2007 01:36 GMT

The path to enlightenment got a little shorter for the citizens of Tucson, Arizona and they have a hacker half-way around the world to thank.

An Indonesian man who goes by the handle Hmei7 bypassed the city's firewall and executed a SQL injection on the website of the Tucson Police Department. That gave him access to the media section of the department's site, where he changed the titles of all the media releases to "Hmei7 has touched your soul."

A quick web search suggests the city isn't the first group to be blessed by the web defacer. Indeed, he's also kissed the souls of people in Okaloosa County, Florida, if this press release is to be believed.

Tucson police officials were alerted to the hack two weeks ago, after a website visitor spotted the messages. They took the site down immediately and only managed to bring it back up in the last 24 hours.

No doubt, the two-week disruption came as an inconvenience to some. But we'd argue it was a small price to pay if it leads the way toward Nirvana. ®