****************************************************************************
>C O M P U T E R U N D E R G R O U N D<
>D I G E S T<
*** Volume 1, Issue #1.23 (July 18, 1990) **
****************************************************************************
MODERATORS: Jim Thomas / Gordon Meyer
ARCHIVISTS: Bob Krause / Alex Smith
REPLY TO: TK0JUT2@NIU.bitnet
COMPUTER UNDERGROUND DIGEST is an open forum dedicated to sharing
information among computerists and to the presentation and debate of
diverse views.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
DISCLAIMER: The views represented herein do not necessarily represent the
views of the moderators. Contributors assume all responsibility
for assuring that articles submitted do not violate copyright
protections.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
CONTENTS:
File 1: Moderators' Comments
File 2: FTPing Thru Bitnet: BITFTP Help
File 3: Phrack as "Evidence?"
File 4: CU in the News
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
----------------------------------------------------------------------
********************************************************************
*** CuD #1.23, File 1 of 4: Moderators' Comments ***
********************************************************************
++++++++++
In this file:
1) Craig Neidorf's Trial
2) Law Enforcement Contributions
3) Berserker BBS
4) The Well in Sausalito
5) LoD/H Technical Journal, #4
+++++++++++++++++++++++++++++
CRAIG NEIDORF'S TRIAL
+++++++++++++++++++++++++++++
Craig Neidorf's trial begins Monday, July 23, in Chicago's Federal Court
building at 220 S. Dearborn in Judge Nicholas Bua's court. For those
planning to attend, the Federal Court is on the south edge of The Loop,
about a 10 minute walk from commuter trains. Jury selection begins in the
morning. The trial, originally expected to be fairly short, perhaps because
the prosecutor expected no opposition, could run for at least
two-and-a-half weeks. Judge Bua refused the prosecutor's request for a
postponement apparently intended to dig up more "dirt" and witnesses. Some
sources indicate that the prosecution has been attempting to amass
information intended to discredit the Craig's character that has nothing to
do with the charges, but might create an unfavorable imagery to persuade a
jury that he must be guilty of *something*! Looks from this side like the
politics of desperation. Dorothy Denning will attend the entire trial, and
the CuD moderators will be on the scene as time allows.
******************
LAW ENFORCEMENT CONTRIBUTORS
******************
We have invited two high-level prosecutors to contribute their views of the
problems of evidence, defining computer crime, separating "real" criminals
from CU types, and other issues to CuD. One has agreed when time allows,
the other is considering it. We believe it is crucial to develop dialogue
between competing groups in order to address the complexity of the various
issues. Unless this happens, it will be more difficult to assure
Constitutional protections, to enact or change legislation, or to generally
establish some sort of peaceful co-existence. So, we again encourage
contributions from all sides.
******************
BERSERKER BBS
******************
We have heard that Berserker BBS, one of the elite boards in the country,
went down. Does anybody have any information on this?
***************
THE WELL
***************
We have come across THE WELL (an acronym for Whole Earth 'Lectronic Link)
in Sausalito. It's more than a BBS, and offers files, net links, and
informed message sections. Anybody interested in the computer underground
should participate in the "Hacker's Conference," where a variety of
interesting topics are discussed by lawyers, journalists, hackers, and
many, many others. The hacker's conference was the source of HARPER'S Forum
on hacking this past March. It's a bit expensive (a sign-up fee, monthly
fee, and user fee), but more than worth it for the price. THE WELL'S data
phone: (415)-332-6106; Voice: (415)-332-4335.
***************************
LOD/H TECHNICAL JOURNAL, #4
***************************
LoD/H #4 came out in May and is available from the CuD archives. The
introductory statement warned of confusion and potential imposters, so we
thought we'd reprint it. The issue also includes a history of the LoD from
the perspective of one participant that supplements the history found in
Phrack 31. Here's an excerpt from the introduction:
***************************************************************************
We are still alive. This publication is not released on any schedule. Past
attempts at scheduling issues have failed miserably. The editors refuse to
release issues which are not up to our self-defined standards. We have in the
past, and will continue in the future, to accept articles from anyone (e.g.
non LOD) as long as the articles adhere to our basic format and style. The
editors review all articles to verify accuracy and integrity however it may
not be possible in all cases to check every fact. Plagiarized material is not
acceptable and we make every attempt to verify an article's originality. When
referenced material is used, the source for that material must be clearly
stated. The more articles we receive the sooner each issue is released. There
is a minimum 2 month review and editing period for each article. If you want
to contribute articles contact any member and they will forward articles to
the editors.
There seems to be some confusion as to what writers are (or were) in LOD/H and
what ones aren't. JUST BECAUSE SOMEONE WRITES FOR THIS PUBLICATION DOES NOT
MEAN THEY ARE AN LOD/H MEMBER! Just to clear up any confusion, a current
member list follows:
Erik Bloodaxe
Lex Luthor
Prime Suspect
Phase Jitter
Professor Falken
(End excerpt from LoD/H #4)
********************************************************************
>> END OF THIS FILE <<
***************************************************************************
------------------------------
********************************************************************
*** CuD #1.23: File 2 of 4: FTPing thru Bitnet ***
********************************************************************
++++++++++++++++
Lang Zerner reminds us that bitnet users may be able to access FTP sites,
and has sent along the following instructions.
++++++++++++++++
BITFTP -- Princeton BITNET FTP Server
BITFTP provides a mail interface to the FTP portion of the IBM TCP/IP
product ("FAL") running on the Princeton VM system, to allow
BITNET/NetNorth/EARN users to ftp files from sites on the Internet.
BITFTP currently accepts requests only via RFC822-format mail, IBM
NOTE-format mail, PROFS-format messages, or files with no headers at all.
BITFTP currently returns the requested files as NETDATA-format files or as
mail files containing UUENCODED data. If you specify "UUENCODE" or
"NETDATA" on your "FTP" command, BITFTP will attempt to use that format.
If you do not specify the format, BITFTP will attempt to select the
appropriate format for your node. BITFTP attempts to send NETDATA-format
files through the gateway from EARN into Janet via the NIFTP facility at
Rutherford Lab.
If BITFTP sends you a file you cannot read, THE FIRST THING TO DO is to
make sure that you specified ASCII if the file should contain textual
material or that you specified BINARY if the file should contain binary
data, executable programs, tar files, or the like. VMS users should
specify BINARY F 512 and should use RECEIVE/BINARY to receive the
NETDATA-format binary files BITFTP sends them.
If BITFTP sends you a uuencoded file that you cannot uudecode, the first
thing to do is to translate all occurrences of 0x7E in the file to 0x5E and
then try uudecoding again. (Some gateways are changing 5Es to 7Es when the
files pass through them.)
To use BITFTP, send mail containing your ftp commands to "BITFTP@PUCC".
The first command to BITFTP must be "FTP" or "HELP".
The recommended syntax for ftp requests is:
FTP hostname NETDATA --or-- FTP hostname UUENCODE
USER username password
<other ftp subcommands>
QUIT
After the hostname on the FTP command, you may specify "UUENCODE" or
"NETDATA" to tell BITFTP the format in which you wish to receive files.
(If the username is "anonymous", no password is required; BITFTP will use
your userid and nodeid as the password.)
Note that on many systems passwords are case-sensitive; that is, the
password may be required to be in lower case or mixed case or upper case.
(The same is true of directory and file names.)
The following is an example of an ftp request:
FTP f.ms.uky.edu NETDATA
USER anonymous
CD /pub/msdos/Games
DIR
BINARY
GET robotron.arc msdos.robotron
QUIT
To request a list of some of the hosts that allow anonymous ftp, send
BITFTP mail or a message containing only the command "FTPLIST". Note that
there is no guarantee that BITFTP can access all the hosts in this list.
BITFTP implements a subset of the ftp subcommands provided in the IBM
TCP/IP and uses the same syntax. Therefore, you may find it useful to
obtain the "IBM TCP/IP for VM Command Reference Manual", IBM order number
GC09-1204.
The currently supported subcommands are:
ACCT -- to send host-dependent account information.
format: ACCT account-information
ASCII -- to change the file transfer type to ASCII.
format: ASCII
BINARY -- to change the file transfer type to image.
format: BINARY <FIXED record-len> <VARIABLE>
CD -- to change the working directory.
format: CD directory
CLOSE -- to disconnect from the foreign host.
format: CLOSE
DIR -- to get a list of directory entries.
format: DIR
EBCDIC -- to change the file transfer type to EBCDIC
format: EBCDIC
GET -- to get a file from the foreign host.
format: GET foreignfile <localfile>
If you specify "localfile", it must be in
the forms "filename.filetype" or "filename",
and the filename and filetype may each be no
more than 8 characters long and may not contain
periods.
LOCSTAT -- to display local status information.
format: LOCSTAT
LS -- to list the files in a directory.
format: LS <name>
PWD -- to print the working directory.
format: PWD
QUIT -- to disconnect from the foreign host.
format: QUIT
STATUS -- to retrieve status information from a foreign host.
format: STATUS <name>
SYSTEM -- to get the name of the foreign host's operating system.
format: SYSTEM
TYPE -- to specify Image, ASCII, or EBCDIC file transfer.
format: TYPE <I|A|E>
The files you request will be sent to you in NETDATA format or UUENCODED
inside mail files.
You will also receive a mail file containing a log of your ftp session. In
that mail file, entries prefixed by ">" are your original commands; those
prefixed by ">>" are your commands as interpreted by BITFTP and passed to
TCPIP; those prefixed by ">>>" are your commands as interpreted by TCPIP
and passed to the remote host; those prefixed by "<<<" are messages from
the remote host; and those prefixed by ">>>>" are completion messages from
BITFTP.
If BITFTP is unable to connect to the host you specify, it will send you
mail after the first attempt, but will keep trying at intervals over three
days. The only additional mail files you will receive will be when the
connection is made successfully or when BITFTP gives up after three days.
The load on BITFTP is often very heavy, and network backlogs are often so
great that it may take several days for a file to get to you once BITFTP
sends it, so please be patient and don't send multiple requests for the
same file. If your system allows you to send interactive messages, you can
inquire about BITFTP's backlog by sending the query "How are you?", e.g.,
on a VM system:
TELL BITFTP AT PUCC How are you?
This service is currently under development and is far from complete.
Current plans for improvements include:
1. Acknowledgments via MSG when mail is received and when
processing has been completed.
2. A much more complete HELP facility.
Questions about BITFTP and suggestions for improvements should be directed
to Melinda Varian, MAINT@PUCC on BITNET or MAINT@pucc.princeton.edu on the
Internet.
The author gratefully acknowledges the use of the FTP SUBCOM interface
written by David Nessl, the SENDJANI EXEC written by Alan Flavell, the
uuencoding utility written by John Fisher, and the RFC822 parsing routine
written by Eric Thomas. NOTE: If you have any complaints or suggestions
about the way any of these routines work in BITFTP, please send them to
MAINT@PUCC (Melinda Varian), not to the authors.
********************************************************************
>> END OF THIS FILE <<
***************************************************************************
------------------------------
********************************************************************
*** CuD #1.23: File 3 of 4: Phrack as Evidence??? ***
********************************************************************
If a clever prosecutor wanted to introduce evidence that "proved" how dangerous
a defendant was, and if that evidence included something like what follows,
what would this evidence actually show? Hypothetically, if the following
were evidence, would Bill Cook think it so dangerous as to have it sealed?
Can't blame him, though. It's well known throughout the modem community
that PHRACK took its orders directly from the Kremlin, and secret codes and
meanings are incrypted in vowels. Rumor also has it that if you change the
ascii to hex, stick it in the oven for 23 minutes at 420 degrees, dry it,
grind it up in the food processer and smoke it, it's better than crack.
Sometimes it seems like the prosecution has tried it--and found that it
works! What else could explain their actions?
_______________________________________________________________________________
==Phrack Inc.==
Volume Two, Issue 23, File 3 of 12
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
<> <>
<> Subdivisions <>
<> %%%%%%%%%%%% <>
<> Part Three Of The Vicious Circle Trilogy <>
<> <>
<> A Study On The Occurrence Of Groups Within The Community <>
<> <>
<> Presented by Knight Lightning <>
<> August 8, 1988 <>
<> <>
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
A Rose By Any Other Name... Would Smell As Sweet
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
The Administration % Advanced Telecommunications, Inc./ATI
ALIAS % American Tone Travelers % Anarchy Inc. % Apple Mafia
The Association % Atlantic Pirates Guild/APG % Bad Ass Mother Fuckers/BAMF
Bellcore % Bell Shock Force/BSF % Black Bag % Camorra % C&M Productions
Catholics Anonymous % Chaos Computer Club % Chief Executive Officers/CEO
Circle Of Death % Circle Of Deneb % Club X % Coalition of Hi-Tech Pirates/CHP
Coast-To-Coast % Corrupt Computing % Cult Of The Dead Cow/-cDc-
Custom Retaliations % Damage Inc. % D&B Communications % The Dange Gang
Dec Hunters % Digital Gang/DG % DPAK % Eastern Alliance
The Elite Hackers Guild % Elite Phreakers and Hackers Club
The Elite Society Of America % EPG % Executives Of Crime % Extasyy (Elite)
Fargo 4A % Farmers Of Doom/FOD % The Federation % Feds R Us % First Class
Five O % Five Star % Force Hackers % The 414s % Hack-A-Trip
Hackers Of America/HOA % High Mountain Hackers % High Society % The Hitchhikers
IBM Syndicate % The Ice Pirates Imperial Warlords % Inner Circle
Inner Circle II % Insanity Inc.
International Computer Underground Bandits/ICUB % Justice League of America/JLA
Kaos Inc. % Knights Of Shadow/KOS % Knights Of The Round Table/KOTRT
League Of Adepts/LOA % Legion Of Doom/LOD % Legion Of Hackers/LOH
Lords Of Chaos % Lunatic Labs, Unlimited % Master Hackers % MAD!
The Marauders % MD/PhD % Metal Communications, Inc./MCI
MetalliBashers, Inc./MBI % Metro Communications % Midwest Pirates Guild/MPG
NASA Elite % The NATO Association % Neon Knights % Nihilist Order
Order Of The Rose % OSS % Pacific Pirates Guild/PPG % Phantom Access Associates
PHido PHreaks % Phlash % PhoneLine Phantoms/PLP
Phone Phreakers Of America/PPOA % Phortune 500/P500
Phreak Hack Delinquents % Phreak Hack Destroyers
Phreakers, Hackers, And Laundromat Employees Gang/PHALSE Gang
Phreaks Against Geeks/PAG % Phreaks Against Phreaks Against Geeks/PAP
Phreaks and Hackers of America % Phreaks Anonymous World Wide/PAWW
Project Genesis % The Punk Mafia/TPM % The Racketeers
Red Dawn Text Files/RDTF % Roscoe Gang % SABRE % Secret Circle of Pirates/SCP
Secret Service % 707 Club % Shadow Brotherhood % Sharp Inc. % 65C02 Elite
Spectral Force % Star League % Stowaways % Strata-Crackers % The Phrim
Team Hackers '86 % Team Hackers '87 % TeleComputist Newsletter Staff
Tribunal Of Knowledge/TOK % Triple Entente % Turn Over And Die Syndrome/TOADS
300 Club % 1200 Club % 2300 Club % 2600 Club % 2601 Club % 2AF % Ware Brigade
The Warelords % WASP % The United Soft WareZ Force/TuSwF
United Technical Underground/UTU
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Its literally unbelievable just how many different groups and organizations
there are or have been in the phreak/hack/pirate community. The list of 130
groups displayed above is probably still just a fraction of the actual amount
of groups that there have been, but those are the only ones I am aware of at
this time.
In the past John Maxfield has estimated that there are about 50,000
hackers/phreaks/pirates operating in the United States today. That figure has
multiplied to to a point where it probably comes close to 500,000. Believe it
or not, almost everyone has been a member of one of the above groups (or
perhaps a group not mentioned) at one time or another.
Today's telecom security consultants and law enforcement agencies know this too
and that is how group affiliations can be turned against us.
What does being in a group mean? In the modem community being in a group is
supposed to mean that the people in the group work on projects together and
trade specific information that people outside of the group are not allowed to
access and by the same token, have no way to get it. However, obviously the
people in the group all feel that the other people with whom they are sharing
information, can be trusted and are worthy of associating with them to begin
with. So when you stop and think about it, if there was no group, the people
in question would still be trading information and would still trust each other
because they would not have formed the group unless this criteria was met in
the first place. So in truth, being in a group really means nothing on the
basis previously mentioned.
You see in the modem community, being in a group really is more like a power
trip or a "security blanket" for people who feel that they need to let people
know that they associate with a specific clique in the hopes that the
popularity of some of the other members will lend popularity to themselves.
Many groups form in such a way that they try to make it look otherwise and thus
begins the real problem. Some groups are formed by a person who tries to get a
lot of guys together that he feels knows a lot or seems to post a lot of good
information - Bad Move; If you are going to form a group at all, stick with
people who you know can be trusted (can you really ever "know" who can be
trusted?) and then out of those people form your group or choose who you feel
should be in it.
Anyway, to prove that they are elite, most groups begin to gather specific data
for giving to group members, and this includes handing out their own names and
phone numbers with other members of the group. They feel a false loyalty and
psychologically create such utter faith in all the members that the faith is
ultimately blind and based on hopes and aspirations of greatness.
What is the best way for a security agent or informant to blend in with the
modem community? Join as many groups as possible, start gathering data on
the members, and spread your handle throughout the community to become "well
known."
Example: Taken From Phrack World News Issue XV;
[This article has been edited for this presentation. -KL]
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Mad Hatter; Informant? July 31, 1987
%%%%%%%%%%%%%%%%%%%%%%
We at Phrack Inc. have uncovered a significant amount of information that has
led us to the belief that Mad Hatter is an informant for some law enforcement
organization.
When Taran King, Cheap Shades, Forest Ranger, and Knight Lightning arrived at
Control C's in Chicago, Illinois, Mad Hatter had already searched the place and
had found some papers that could only have done ^C harm. We destroyed this
information and thought everything was ok. However, as it turns out, we
searched Mad Hatter's bags and found a duplicate set of this information and
the general hypothesis was they he intended to leave it behind as incriminating
evidence.
Mad Hatter had also brought down several disks for the purpose of copying
Phantasie Realm. Please note; PR was an IBM program and MH has an apple.
Control C told us that when he went to pick Mad Hatter up at the bus terminal,
he watched the bus pull in and saw everyone who disembarked. Suddenly Mad
Hatter was there, but not from the bus he was supposed to have come in on. In
addition to this, he had baking soda wrapped in a five dollar bill that he
tried to pass off as cocaine. Perhaps to make us think he was cool or
something.
Mad Hatter constantly tried to get left behind at ^C's apartment for unknown
reasons. He also was seen at a neighbor's apartment making unauthorized calls
into the city of Chicago. When asked who he called, his reply was "Don't worry
about it." Mad Hatter had absolutely no money with him during PartyCon (and
incidentally he ate everything in ^C's refrigerator) and yet he insisted that
although he had taken the bus down and had return trip tickets for the bus,
that he would fly back home. How was this going to be achieved? He had no
money and even if he could get a refund for the bus tickets, he would still be
over $200 short. When asked how he was going to do this, his reply was "Don't
worry about it."
On Saturday night while on the way to the Hard Rock Cafe, Mad Hatter asked
Control C for the location of his computer system and other items 4 times.
This is information that Hatter did not need to know, but perhaps a SS agent or
someone could use very nicely.
When Phrack Inc. discovered that Dan The Operator was an FBI informant and made
the news public, several people were criticizing him on Free World II Private.
Mad Hatter on the other hand, stood up for Noah and said that he was still his
friend despite what had happened. Then later when he realized that people were
questioning his legitimacy, his original posts were deleted and he started
saying how much he wanted to kill Dan The Operator and that he hated him.
Mad Hatter already has admitted to knowing that Dan The Operator was an FBI
informant prior to SummerCon '87. He says the reason he didn't tell anyone is
because he assumed we already knew.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
When Mad Hatter first entered the phreak/hack world, he joined;
Phreaks Anonymous World Wide (PAWW),
MetalliBashers, Inc (MBI),
Order of The Rose, and
Cult of The Dead Cow (-cDc-).
If you were a security agent or a loser hacker turned informant and you wanted
to mix in with the phreak/hack community, wouldn't you try to join as many
groups as possible to spread your name?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Phreaks Anonymous World Wide, MetalliBashers, Inc., Order of The Rose, and
Cult of The Dead Cow, not exactly the toughest groups to join and once there is
one security person in the group, he is bound to vouch for others, etc. So
while he spreads his name as an elite modem user throughout the community, he
is busy gathering information on group members who are foolish enough to trust
him.
Its not bad enough that some groups are easy enough to infiltrate as it is, but
does anyone remember this?
Taken From Phrack World News Issue XI;
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Phortune 500: Phreakdom's Newest Organization February 16, 1987
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
For those of you who are in the least bit interested, Phortune 500 is a group
of telecommunication hobbyists who's goal is to spread information as well as
further their own knowledge in the world of telecommunications. This new
group was formed by:
Brew Associates / Handsomest One / Lord Lawless / The Renegade Chemist
Quinton J. Miranda / Striker / The Mad Hacker / The Spiker
These eight members are also known as Board Of Directors (BOD). They don't
claim to be *Elite* in the sense that they are they world's greatest hacker,
but they ARE somewhat picky about their members. They prefer someone who knows
a bit about everything and has talents exclusive to him/herself.
One of the projects that Phortune 500 has completed is an individual password
AE type system. It's called TransPhor. It was written and created by Brew
Associates. It has been Beta tested on The Undergraduate Lounge (Sysoped by
Quinton J. Miranda). It is due to be released to the public throughout the
next few months.
Phortune 500 has been in operation for about 4 months, and has released two
newsletters of their own. The Phortune 500 Newsletter is quite like the
"People" of contemporary magazines. While some magazines cover the deep
technical aspects of the world in which we communicate, their newsletter tries
to cover the lighter side while throwing in information that they feel is "of
technical nature." The third issue is due to be released by the end of this
month.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
*>=-> The Phortune 500 Membership Questionnaire <-=<*
Note: The following information is of a totally confidential nature. The
reason you may find this so lengthy and in depth is for our knowledge of
you. We, with Phortune 500, feel as though we should know prospective
members well before we allow them into our organization. Pending the
answers you supply us, you will be admitted to Phortune 500 as a charter
member. Please answer the following completely...
...............................................................................
Handle :
First Name :
Voice Phone Number :
Data Phone Number :
City & State :
Age :
Occupation (If Applicable) :
Place of Employment (Optional) :
Work Phone Number (Optional) :
Computer Type :
Modem Type :
Interests :
Areas Of Expertise :
References (No More Than Three) :
Major Accomplishments (If Any) :
...............................................................................
Answer In 50 Words Or Less;
^*^ What Is Phortune 500 in Your Opinion?
^*^ Why Do You Want To Be Involved With Phortune 500?
^*^ How Can You Contribute to Phortune 500?
...............................................................................
Please answer each question to the best of your ability and then return to any
Phortune 500 Board of Directors Member Or a Phortune 500 BBS:
The Private Connection (Limited Membership) 219-322-7266
The Undergraduate AE (Private Files Only) 602-990-1573
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
An actual application form for joining a group. Perhaps the concept was a good
one, perhaps not, but from a standpoint of publicity and security, this was a
complete and utter catastrophe.
Basically we are all here to learn in one way or another. Groups and clubs
in our community only seem to segregate it and at a time when everyone should
be pulling together, this is not such a good idea. Privacy and security are
important factors that motivate these sects within the society, but ultimately
are the final consequences worth the trouble of creating a group?
If groups had not been created, there would not be as much attention on the
phreak/hack community as there is right now. When group names start spreading,
it starts the law enforcement agencies into a panic that its big time organized
crime. This allows them to justify more time and money into the apprehension
of computer criminals and usually they go after the big names; the people in
the most "elite" groups.
Now before you, a member of a group, start criticizing this file, please
understand, I am not referring to any particular groups here, just groups in
general. Any and all comments made about MBI, -cDc-, PAWW, OOTR, and P500
should not be taken personally and were used only as examples of how groups can
be potential security problems.
There are some groups that are worthwhile organizations and its obvious because
that have existed through the years and been productive. However, the only way
to keep this community alive is for everyone to work together to protect and
learn from each other.
:Knight Lightning
"The Future Is Now"
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
********************************************************************
>> END OF THIS FILE <<
***************************************************************************
------------------------------
********************************************************************
*** CuD #1.23: File 4 of 4: The CU in the News ***
********************************************************************
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-
From: ekrell@ulysses.att.com
Date: Mon, 9 Jul 90 16:14:38 EDT
Subject: Legion of Doom Members Plead Guilty
Extracts from an AP news wire:
Three members of the Legion of Doom group pleaded guilty to federal
conspiracy charges Monday. U.S. Attorney Joe Whitley said the group
disrupted telecommunications, stole computer source codes and information,
stole credit card information and fraudulently obtained money and property.
In May, authorities in Indiana prosecuted a juvenile who pleaded guilty
to 11 counts of fraud and agreed to testify against the three Atlanta men,
in a trial scheduled to start today.
Instead, the three pleaded guilty. They are E. Grant, 22 and Robert
Riggs, 22 (both from Atlanta) and Franklin E. Darden Jr, 24 of Norcross.
Whitley said in a statement that they illegally accessed various
BellSouth computers between Sept. 10, 1987 and July 21, 1989. Grant and
Darden also monitored private telephone conversations. They were carged
with conspiracy to commit computer fraud, wire fraud, access code fraud and
interstate transportation of stolen property.
Darden and Riggs pleaded guilty to one count of conspiracy each and face
a maximum of 5 years in prison and a $ 250,000 fine. Grant pleaded guilty
to possessing 15 or more BellSouth access devices with intent to defraud
and faces up to 10 years in prison and a $ 250,000 fine.
Eduardo Krell AT&T Bell Laboratories, Murray Hill, NJ
UUCP: %att,decvax,ucbvax%!ulysses!ekrell Internet: ekrell@ulysses.att.com
++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
And here's another little article from Computerworld, July 2, 1990 issue,
p. 78, in the column "Inside Lines," no definite author given, only the
Assistant News Editor Jim Connolly (a phone number is given for news tips,
800-343-6474):
"That old hack magic The infamous Internet worm, created by ex-Cornell
graduate student and hacker Robert T. Morris, still rears its head from
time to time, according to one security expert. "It's taken on a life of
its own," he said. Admirers of Morris' handiwork have added names to the
worm's built-in password-cracking dictionary to make it more effective.
One estimate puts the dictionary at 560 passwords, up from the original
430, the expert said. Morris, meanwhile, is still trying to work out a
deal with his probation officer on how he will spend his 400 hours of
community service -- part of his sentence for writing the untamed program,
according to his lawyer. A decision will come next week, he added."
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
COMPUTER TRANSFER OF STOLEN DATA RULED A FEDERAL CRIME
By Janan Hanna
(From Chicago Daily Law Bulletin, June 13, 1990, pp 1, 14)
The transfer of confidential information from one computer to another
constitutes a violation of the federal law prohibiting the interstate
transportation of stolen property, a federal judge has ruled.
U.S. District Judge Nicholas Bua made this first-impression ruling in a
criminal computer "hacker" case brought against two young men.
Attorney Sheldon T. Zenner, representing one of the defendants, said the
ruling improperly broadens the federal statue against interstate
transportation of stolen property--18 U.S.C. %section% 1343.
Under the ruling, Zenner argued, simple communications between persons or
news organizations could be construed as illegal.
Bua denied a motion to dismiss by defendant Craig Neidorf, who was indicted
along with Robert J. Riggs for allegedly breaking into Bell South Telephone
Co.'s computer system, copying its emergency 911 system and publishing the
information on a computer bulletin board.
Riggs allegedly gained acess to Bell South's computer, downloaded the
system into his home computer and sent it to Neidorf who allegedly
published it in a computer newsletter known as "PHRACK," according to Bua's
decision.
Neidorf, who was charged with violating the wire fraud and interstate
transport statutes, argued that the government's allegation did not fall
within the definition of those statutes because no goods, wares, or
merchandise was transferred. The original indictment also charged Neidorf
with violations of the Computer Fraud and Abuse Act of 1986, but government
prosecutors dropped those charges in a superseding indictment and added
additional wire fraud charges.
18 U.S.C. %section% 2314 provides, in part, that "whoever transports,
transmits, or transfers in interstate or foreign commerce any goods, wares,
merchandise, securities or money, of the value of $5,000 or more, knowing
the same to have been stolen, converted or taken by fraud...shall be fined
not more than $10,000 or imprisoned not more than 10 years or both."
"The question is, where what takes place is merely a telephone call, where
information is transported and the property never leaves Bell, because they
still have it, is that interstate transportation of stolen property?"
Zenner asked. "Other cases have held that property must be tangible
property. If a kid...had stolen a computer disk, gotten in his car and
drove it %to another person% or mailed it, that's ITSP %interstate
transportation of stolen property%."
But Bua disagreed.
"This court is unpersuaded by Neidorf's disingenuous argument that he
merely transferred electronic impulses across state lines," Bua said.
"Several courts have upheld section 2314 charges based on the wire transfer
of fraudulently obtained money, rejecting the arguments of the defendants
in those cases that only electronic impulses, not actual money, crossed
state lines. " Bua noted that no other court has ever held that the
electronic transfer of confidential, proprietary business information from
one computer to another across state lines constitutes a violation of
section 2314, but he added that no other court has addressed the issue.
"Over the course of the past decade, advances in technology and growing
respect and acceptance for the powers of computers have created a true
explosion in the computer industry," Bua said. "Quite naturally, the
growth of computer availability and application has spawned a host of new
legal issues.
"This case requires the court to wrestle with some of these novel legal
issues which are a product of the marriage between law and computers."
Drawing a parallel between this case and cases involving the wire transfer
of funds, Bua characterized Neidorf's alleged conduct not merely as the
transmission of electronic impulses, but as the transfer of properitary
%sic% business information.
"The question this case presents, then, is not whether electronic impulses
are 'goods, wares or merchandise' within the meaning of %page break%
section 2314, but whether the proprietary information contained in Bell
South's E911 file constitutes a 'good, ware, or merchandise' within the
purview of the statute," Bua said. "This court answers that question
affirmatively."
The case is schedule to be tried July 23. U.S. v. ROBERT J. RIGGS AND CRAIG
NEIDORF, No. 90 CR 0070.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
"U.S. Raid Stirs Drive for Computer Rights"
By Linda P. Campbell, The Chicago Tribune, 7/11/90: Page 6.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Washington--Steve Jackson says he still doesn't know exactly why Secret
Service agents raided his computer-game business last March in Austin,
Texas, and confiscated computers, software, vital business data and a game
book that was soon to be published.
But at a Washington news conference Tuesday, Jackson suggested that it may
be because the book described a "totally imaginary" futuristic fantasy game
involving computer intrusion that government agents saw as "a handbook for
computer crime." The raid, Jackson claimed, nearly ruined his business.
Now a group of computer pioneers has championed Jackon's case as an example
of overzealous law-enforcement officials trampling an individual's rights
in the pursuit of computer criminals.
Mitchell Kapor, who founded the software giant Lotus Development Corp., has
teamed with Apple Computer Inc. co-founder Steven Wozniak and an anonymous
Silicon Valley entrepreneur to fund the Electronic Frontier Foundation,
dedicated to protecting a kind of "keyboard freedom."
The group is seeking 1st Amendment protections for electronic communication
such as computer bulletin boards and newsletters, and wants to halt
intrusive law-enforcement techniques.
"Speech is speech. It doesn't really matter whether it's formulated on
paper or in bits nd bytes," said John Perry Barlow, a writer who helped put
together the foundation.
The group, which was formaly announced Tuesday, has focused debate on the
difficult balance between securing computer systems from intruders, known
as "hackers," and protecting rights to get information and communicate
through electronic media.
But Kapor denied that was simply a "hackers' defense fund." "We don't see
our mission as defending people who illegally enter the computer systems,"
he said.
He and others involved with the group argued that the government has gone
too far, partly because ignorance about rapidly advancing computer
technology has generated widespread anxiety.
They cited the case of Craig Neidorf, a University of Missouri student
indicted on federal charges of wire fraud and interstate transportation of
stolen property. Neidorf published in his electronic magazine, Phrack, a
telephone company document about 911 emergency phone services that someone
else allegedly stole from the BellSouth computer system.
New York Lawyer Terry Gross, who represents Neidorf, called the prosecution
"an unprecedented threat to the free press." And Kapor argued that computer
news networks should have the same protections as print or broadcast media.
But Secret Service Special Agent Rich Adams said that legitimate computer
bulletin board users were not at risk. The agency, he said, is cracking
down on hackers who "are maliciously trying to get into" hospital records
and 911 systems or stealing credit card information and telephone access
codes "for personal gain."
Earlier this year, a 2-year anti-hacker investigation dubbed Operation
Sundevil led to the seizure of more than 40 computers and 23,000 disks in
13 cities.
Adams said that Jackson, who was not arrested in the raid on his business,
got caught in the Sundevil net because one of his employees was accused of
a computer crime.
On Monday three men belonging to a hackers group known as the Legion of
Doom pleaded guilty to charges of conspiring to defraud BellSouth, which
oversees telephone service in nine Southern States.
----END ARTICLE----
********************************************************************
------------------------------
**END OF CuD #1.23**
********************************************************************