Hacker Crackdown - Bruce Sterling (books for 9th graders .TXT) 📗
- Author: Bruce Sterling
- Performer: 055356370X
Book online «Hacker Crackdown - Bruce Sterling (books for 9th graders .TXT) 📗». Author Bruce Sterling
Besides, science fiction people are used to being misinterpreted. Science fiction is a colorful, disreputable, slipshod occupation, full of unlikely oddballs, which, of course, is why we like it. Weirdness can be an occupational hazard in our field. People who wear Halloween costumes are sometimes mistaken for monsters.
Once upon a time—back in 1939, in New York City—science fiction and the U.S. Secret Service collided in a comic case of mistaken identity. This weird incident involved a literary group quite famous in science fiction, known as “the Futurians,” whose membership included such future genre greats as Isaac Asimov, Frederik Pohl, and Damon Knight. The Futurians were every bit as offbeat and wacky as any of their spiritual descendants, including the cyberpunks, and were given to communal living, spontaneous group renditions of light opera, and midnight fencing exhibitions on the lawn. The Futurians didn’t have bulletin board systems, but they did have the technological equivalent in 1939—mimeographs and a private printing press. These were in steady use, producing a stream of science-fiction fan magazines, literary manifestos, and weird articles, which were picked up in ink-sticky bundles by a succession of strange, gangly, spotty young men in fedoras and overcoats.
The neighbors grew alarmed at the antics of the Futurians and reported them to the Secret Service as suspected counterfeiters. In the winter of 1939, a squad of USSS agents with drawn guns burst into “Futurian House,” prepared to confiscate the forged currency and illicit printing presses. There they discovered a slumbering science fiction fan named George Hahn, a guest of the Futurian commune who had just arrived in New York. George Hahn managed to explain himself and his group, and the Secret Service agents left the Futurians in peace henceforth. (Alas, Hahn died in 1991, just before I had discovered this astonishing historical parallel, and just before I could interview him for this book.)
But the Jackson case did not come to a swift and comic end. No quick answers came his way, or mine; no swift reassurances that all was right in the digital world, that matters were well in hand after all. Quite the opposite. In my alternate role as a sometime pop-science journalist, I interviewed Jackson and his staff for an article in a British magazine. The strange details of the raid left me more concerned than ever. Without its computers, the company had been financially and operationally crippled. Half the SJG workforce, a group of entirely innocent people, had been sorrowfully fired, deprived of their livelihoods by the seizure. It began to dawn on me that authors—American writers—might well have their computers seized, under sealed warrants, without any criminal charge; and that, as Steve Jackson had discovered, there was no immediate recourse for this. This was no joke; this wasn’t science fiction; this was real.
I determined to put science fiction aside until I had discovered what had happened and where this trouble had come from. It was time to enter the purportedly real world of electronic free expression and computer crime. Hence, this book. Hence, the world of the telcos; and the world of the digital underground; and next, the world of the police.
Of the various anti-hacker activities of 1990, “Operation Sundevil” had by far the highest public profile. The sweeping, nationwide computer seizures of May 8, 1990 were unprecedented in scope and highly, if rather selectively, publicized.
Unlike the efforts of the Chicago Computer Fraud and Abuse Task Force, “Operation Sundevil” was not intended to combat “hacking” in the sense of computer intrusion or sophisticated raids on telco switching stations. Nor did it have anything to do with hacker misdeeds with AT&T’s software, or with Southern Bell’s proprietary documents.
Instead, “Operation Sundevil” was a crackdown on those traditional scourges of the digital underground: credit-card theft and telephone code abuse. The ambitious activities out of Chicago, and the somewhat lesser-known but vigorous anti-hacker actions of the New York State Police in 1990, were never a part of “Operation Sundevil” per se, which was based in Arizona.
Nevertheless, after the spectacular May 8 raids, the public, misled by police secrecy, hacker panic, and a puzzled national press-corps, conflated all aspects of the nationwide crackdown in 1990 under the blanket term “Operation Sundevil.” “Sundevil” is still the best-known synonym for the crackdown of 1990. But the Arizona organizers of “Sundevil” did not really deserve this reputation—any more, for instance, than all hackers deserve a reputation as “hackers.”
There was some justice in this confused perception, though. For one thing, the confusion was abetted by the Washington office of the Secret Service, who responded to Freedom of Information Act requests on “Operation Sundevil” by referring investigators to the publicly known cases of Knight Lightning and the Atlanta Three. And “Sundevil” was certainly the largest aspect of the Crackdown, the most deliberate and the best-organized. As a crackdown on electronic fraud, “Sundevil” lacked the frantic pace of the war on the Legion of Doom; on the contrary, Sundevil’s targets were picked out with cool deliberation over an elaborate investigation lasting two full years.
And once again the targets were bulletin board systems.
Boards can be powerful aids to organized fraud. Underground boards carry lively, extensive, detailed, and often quite flagrant “discussions” of lawbreaking techniques and lawbreaking activities. “Discussing” crime in the abstract, or “discussing” the particulars of criminal cases, is not illegal— but there are stern state and federal laws against coldbloodedly conspiring in groups in order to commit crimes.
In the eyes of police, people who actively conspire to break the law are not regarded as “clubs,” “debating salons,” “users’ groups,” or “free speech advocates.” Rather, such people tend to find themselves formally indicted by prosecutors as “gangs,” “racketeers,” “corrupt organizations” and “organized crime figures.”
What’s more, the illicit data contained on outlaw boards goes well beyond mere acts of speech and/or possible criminal conspiracy. As we have seen, it was common practice in the digital underground to post purloined telephone codes on boards, for any phreak or hacker who cared to abuse them. Is posting digital booty of this sort supposed to be protected by the First Amendment? Hardly—though the issue, like most issues in cyberspace, is not entirely resolved. Some theorists argue that to merely RECITE a number publicly is not illegal—only its USE is illegal. But anti-hacker police point out that magazines and newspapers (more traditional forms of free expression) never publish stolen telephone codes (even though this might well raise their circulation).
Stolen credit card numbers, being riskier and more valuable, were less often publicly posted on boards—but there is no question that some underground boards carried “carding” traffic, generally exchanged through private mail.
Underground boards also carried handy programs for “scanning” telephone codes and raiding credit card companies, as well as the usual obnoxious galaxy of pirated software, cracked passwords, blue-box schematics, intrusion manuals, anarchy files, porn files, and so forth.
But besides their nuisance potential for the spread of illicit knowledge, bulletin boards have another vitally interesting aspect for the professional investigator. Bulletin boards are cram-full of EVIDENCE. All that busy trading of electronic mail, all those hacker boasts, brags and struts, even the stolen codes and cards, can be neat, electronic, realtime recordings of criminal activity.
As an investigator, when you seize a pirate board, you have scored a coup as effective as tapping phones or intercepting mail. However, you have not actually tapped a phone or intercepted a letter. The rules of evidence regarding phone-taps and mail interceptions are old, stern and well-understood by police, prosecutors and defense attorneys alike. The rules of evidence regarding boards are new, waffling, and understood by nobody at all.
Sundevil was the largest crackdown on boards in world history. On May 7, 8, and 9, 1990, about forty-two computer systems were seized. Of those forty-two computers, about twenty-five actually were running boards. (The vagueness of this estimate is attributable to the vagueness of (a) what a “computer system” is, and (b) what it actually means to “run a board” with one—or with two computers, or with three.)
About twenty-five boards vanished into police custody in May 1990. As we have seen, there are an estimated 30,000 boards in America today. If we assume that one board in a hundred is up to no good with codes and cards (which rather flatters the honesty of the board-using community), then that would leave 2,975 outlaw boards untouched by Sundevil. Sundevil seized about one tenth of one percent of all computer bulletin boards in America. Seen objectively, this is something less than a comprehensive assault. In 1990, Sundevil’s organizers—the team at the Phoenix Secret Service office, and the Arizona Attorney General’s office—had a list of at least THREE HUNDRED boards that they considered fully deserving of search and seizure warrants. The twenty-five boards actually seized were merely among the most obvious and egregious of this much larger list of candidates. All these boards had been examined beforehand— either by informants, who had passed printouts to the Secret Service, or by Secret Service agents themselves, who not only come equipped with modems but know how to use them.
There were a number of motives for Sundevil. First, it offered a chance to get ahead of the curve on wire-fraud crimes. Tracking back credit-card ripoffs to their perpetrators can be appallingly difficult. If these miscreants have any kind of electronic sophistication, they can snarl their tracks through the phone network into a mindboggling, untraceable mess, while still managing to “reach out and rob someone.” Boards, however, full of brags and boasts, codes and cards, offer evidence in the handy congealed form.
Seizures themselves—the mere physical removal of machines—tends to take the pressure off. During Sundevil, a large number of code kids, warez d00dz, and credit card thieves would be deprived of those boards—their means of community and conspiracy—in one swift blow. As for the sysops themselves (commonly among the boldest offenders) they would be directly stripped of their computer equipment, and rendered digitally mute and blind.
And this aspect of Sundevil was carried out with great success. Sundevil seems to have been a complete tactical surprise—unlike the fragmentary and continuing seizures of the war on the Legion of Doom, Sundevil was precisely timed and utterly overwhelming. At least forty “computers” were seized during May 7, 8 and 9, 1990, in Cincinnati, Detroit, Los Angeles, Miami, Newark, Phoenix, Tucson, Richmond, San Diego, San Jose, Pittsburgh and San Francisco. Some cities saw multiple raids, such as the five separate raids in the New York City environs. Plano, Texas (essentially a suburb of the Dallas/Fort Worth metroplex, and a hub of the telecommunications industry) saw four computer seizures. Chicago, ever in the forefront, saw its own local Sundevil raid, briskly carried out by Secret Service agents Timothy Foley and Barbara Golden.
Many of these raids occurred, not in the cities proper, but in associated white-middle class suburbs—places like Mount Lebanon, Pennsylvania and Clark Lake, Michigan. There were a few raids on offices; most took place in people’s homes, the classic hacker basements and bedrooms.
The Sundevil raids were searches and seizures, not a group of mass arrests. There were only four arrests during Sundevil. “Tony the Trashman,” a longtime teenage bete noire of the Arizona Racketeering unit, was arrested in Tucson on May 9. “Dr. Ripco,” sysop of an outlaw board with the misfortune to exist in Chicago itself, was also arrested—on illegal weapons charges. Local units also arrested a 19-year-old female phone phreak named “Electra” in Pennsylvania, and a male juvenile in California. Federal agents however were not seeking arrests, but computers.
Hackers are generally not indicted (if at all) until the evidence in their seized computers is evaluated—a process that can take weeks, months—even years. When hackers are arrested on
Comments (0)