Adrian Lamo Wanted: Well known hacker or helper - Page 2

**Wyzcrak** · 09-08-2003, 02:33 AM

I stopped reading the first linked article when I came across this quote of Lamo's.

Quote:

"I have always said that actions have consequences, and this is something that I was always aware might happen," said Lamo. "I don't intend to deny anything that I have done, but I do intend to defend myself vigorously."

Accountability. The United States (and for god's sake don't get defensive.. maybe the rest of the world, too.. but sure as hell the US), simply, would be well advised to demand more of it.

I don't know anything about this guy. But if he stands before the legal system, pleads guilty to violating the standing laws which he obviously felt himself to be above, scrambles like hell to justify his actions, and then accepts peacefully the legally-allowed consequences for his DECISIONS, I'll be damned impressed.

Wyzcrak

dragon · 09-08-2003, 03:43 AM

Quote:

Originally Posted by DdogG

its like leaving a 3rd story window open at night, just cause its there and open, it doesnt make it right to "test" it to see if you can get in..... Its still wrong. he should have asked up front if they would allow him to seek out vulnerabilities and then abided by the answer either way...... to sneak into someones private belongings without their knowledge even if you do not do any harm is still wrong.

Good thing to point out DdogGbut I got one for you

Ok, say that your niebhor thinks they smell smoke coming from inside your house break a window out and go in and put out a fire. Is it still not breaking and entering?

Wyz..... I wanted to point out a fact to add to what you said. Lamo is a vagrant mostly. He lives from friend to friend car to car. mostly on the streets if he needs to. He has been running from the FBI for years and had no reason to now. So ofcourse he would hink he can put up a good fight in court.

**_Ender_** · 09-08-2003, 04:33 AM

Think about this, he could of hacked into their system and not even told them about it, at least this guy told them about it and told them what they needed to do to stop somebody else who might not of been so kind about it.

I dont think he should get a medal by any means, but being wanted? I dont think that either.

09-08-2003, 09:46 AM

Quote:

Originally Posted by dragon

.....................Good thing to point out DdogG but I got one for you

Ok, say that your niebhor thinks they smell smoke coming from inside your house break a window out and go in and put out a fire. Is it still not breaking and entering?....................

yes.... WAIT! hold on... I smell smoke........ BRB..........................

well, there was no fire, but I found a big screen tv that I thought might be a fire hazard so I brought it home with me...... don't want to put them in danger.

seriously jason, if you smell smoke, you call the freakin fire dept or the nieghbor, you don't just go in "cause..." . if you think there is a vulnerability in a defense, call the people in charge, not exploit it so you can say "look what I can do, and if I can do it, anyone can."

might as well say "I broke into the bank, but I didn't steal anything.... I just wanted to show you that it could be done.... you're welcome."

dragon · 09-08-2003, 05:46 PM

Quote:

Originally Posted by DdogG

seriously jason, if you smell smoke, you call the freakin fire dept or the nieghbor, you don't just go in "cause..." . if you think there is a vulnerability in a defense, call the people in charge, not exploit it so you can say "look what I can do, and if I can do it, anyone can."

might as well say "I broke into the bank, but I didn't steal anything.... I just wanted to show you that it could be done.... you're welcome."

Actually, it is the same thing. Have you never seen a little fire somewhere and put it out and then said to someone "I put out the fire". LOL ....

Plus it is not like he did it on purpose or for bragging rights. He was pinging ports ( Which is legal) and scanning ports (which is legal) found open ones and told the companies. If you would read they even called him a genius and now they want him in jail. What kind of lame a$$ backstabbing is that. That is all I want answered. Not stupid questions like , What if I fouund a wallet on the ground would I keep it LMAO

BTW DdogG I heard about work man. Sorry to hear that is messed up.

**Wolfie** · 09-08-2003, 06:37 PM

Quote:

Originally Posted by dragon

Plus it is not like he did it on purpose or for bragging rights. He was pinging ports ( Which is legal) and scanning ports (which is legal) found open ones and told the companies. If you would read they even called him a genius and now they want him in jail. What kind of lame a$$ backstabbing is that.

Actually, that is not all he did

Quote:

Lamo believes the arrest warrant is for his most high-profile hack. Early last year he penetrated the New York Times, after a two-minute scan turned up seven misconfigured proxy servers acting as doorways between the public Internet and the Times private intranet, making the latter accessible to anyone capable of properly configuring their Web browser.

Once inside, Lamo exploited weaknesses in the Times password policies to broaden his access, eventually browsing such disparate information as the names and Social Security numbers of the paper's employees, logs of home delivery customers' stop and start orders, instructions and computer dial-ups for stringers to file stories, lists of contacts used by the Metro and Business desks, and the "WireWatch" keywords particular reporters had selected for monitoring wire services.

He also accessed a database of 3,000 contributors to the Times op-ed page, containing such information as the social security numbers for former U.N. weapons inspector Richard Butler, Democratic operative James Carville, ex-NSA chief Bobby Inman, Nannygate veteran Zoe Baird, former secretary of state James Baker, Internet policy thinker Larry Lessig, and thespian activist Robert Redford. Entries with home telephone numbers include Lawrence Walsh, William F. Buckley Jr., Jeanne Kirkpatrick, Rush Limbaugh, Vint Cerf, Warren Beatty and former president Jimmy Carter.

In February, 2002, Lamo told the Times of their vulnerability through a SecurityFocus reporter. But this time, no one was grateful, and by May federal prosecutors in New York had begun an investigation.

That is a little more than just pinging ports......

09-08-2003, 07:18 PM

Quote:

Originally Posted by dragon

Quote:

Originally Posted by DdogG

seriously jason, if you smell smoke, you call the freakin fire dept or the nieghbor, you don't just go in "cause..." . if you think there is a vulnerability in a defense, call the people in charge, not exploit it so you can say "look what I can do, and if I can do it, anyone can."

might as well say "I broke into the bank, but I didn't steal anything.... I just wanted to show you that it could be done.... you're welcome."

Actually, it is the same thing. Have you never seen a little fire somewhere and put it out and then said to someone "I put out the fire". LOL ....

Plus it is not like he did it on purpose or for bragging rights. He was pinging ports ( Which is legal) and scanning ports (which is legal) found open ones and told the companies. If you would read they even called him a genius and now they want him in jail. What kind of lame a$$ backstabbing is that. That is all I want answered. Not stupid questions like , What if I fouund a wallet on the ground would I keep it LMAO

BTW DdogG I heard about work man. Sorry to hear that is messed up.

I never broke into someones house to put out a fire...... I called the fire dept.

and F*** work, I got a 28K/yr job 1 phone call and 1 hr later and have it on hold for me for 4 weeks, so in the mean time, I'm lookin' for something better, but I got a better job than that POS place regardless of my job search.....

That was the kick in the pants I needed to go get a real job..... believe me, Im not crying in my cheerios over it for a second....

I feel bad for you still having to say "Thank you for call bellsouth homenetworking helpdesk........" No, the PHONE cord.......No, not the usb..........OK, now we are going to have to uninstall everything to do with usb on this computer because you pulled out the wrong cable........Right click....NO RIGHT CLICK GOD**** it you stupid !@#$ @!##@$@# Peice of $%~!#@$!$^$GO TAKE A $%~!@#%OFF A ^!#$%#$% YOU &!#$ SONOFA%#^@%AHHHHHHHHHH!!!!!!!!!!!!!!!!!

dragon · 09-09-2003, 02:23 AM

Quote:

Originally Posted by DdogG

and F*** work, I got a 28K/yr job 1 phone call and 1 hr later and have it on hold for me for 4 weeks, so in the mean time, I'm lookin' for something better, but I got a better job than that POS place regardless of my job search.....

That was the kick in the pants I needed to go get a real job..... believe me, Im not crying in my cheerios over it for a second....

Good to hear it man

Quote:

Originally Posted by DdogG

I feel bad for you still having to say "Thank you for call bellsouth homenetworking helpdesk........" No, the PHONE cord.......No, not the usb..........OK, now we are going to have to uninstall everything to do with usb on this computer because you pulled out the wrong cable........Right click....NO RIGHT CLICK GOD**** it you stupid !@#$ @!##@$@# Peice of $%~!#@$!$^$GO TAKE A $%~!@#%OFF A ^!#$%#$% YOU &!#$ SONOFA%#^@%AHHHHHHHHHH!!!!!!!!!!!!!!!!!

Yeah I am waiting on the right kick to my pants too. This Internet security sh1t is fun as crap, so think I am headed in that field.

Wolfie you are correct I worded it wrong. But still the New York Times could have said thanks and left it at that since the boy is homeless and it aint like he stole the info. All he did was found a door open and told them about it. I really don't see the big issue there. He is doing the same thing I am going to school for but I am getting paid for it. He does it cause he likes the internet. H3ll, He wouldn't even accept payment for the help that he gave to fix the issues, and when he interviewed the other day on TechTV he wouldn't take any money to get a room or food. That is not a hacker out to cause trouble in my eyes.

**Wolfie** · 09-15-2003, 06:32 PM

An update on this story

http://www.cnn.com/2003/TECH/internet/09/15/hacker.arrest.ap/index.html

By the way, I thought it was said he "never" did anything wrong after breaching the companies websites.

Quote:

The complaint alleged that he used The Times' LexisNexis account to obtain more than $300,000 worth of electronic information services. Among other things, Lamo used LexisNexis to search for mentions of his own name and exploits, according to the affidavit.

Lamo has acknowledged involvement in computer break-ins over the past several years at large corporations. He also acknowledged changing the text of at least one news story on Yahoo's Web site in 2001.

dragon · 09-16-2003, 01:22 AM

LMAO Hey he had to proove he was in LOL

Ok, I will admit it. He was a idiot for doing the changes and putting his name in a list of contributors at Time.

But he has also said that the

Quote:

Times' LexisNexis account to obtain more than $300,000 worth of electronic information services"

where untrue and the figure is way off.

guess the full truth will come out in court.

Arrangement is Thursday and for now he was ordered to live with his parents and get a job. Maybe that will be enough since he has backing from numbers of companies saying he was only helping

I am praying for him and hope they dont treat him like a stereotypic (sp?) hacker

**Skylark** · 09-16-2003, 07:50 PM

If you hack in, and then tell them you did it. IMO, you're an idiot.

Ask if they want you to test their security. That's like robbing a bank, then returning the money and saying... see, your security sucks.

NOT BRIGHT!

IMO, don't break the law, for whatever noble purpose, unless you are willing to go to jail for it. Just common sense.

dragon · 01-09-2004, 03:55 AM

UPDATE :::::: well he admitted guilt, said he was sorry and could be spending less then a year in jail.

LINK

Quote:

Hacker Adrian Lamo plead guilty Thursday to federal computer crime charges arising from his 2002 intrusion into the New York Time internal network, and faces a likely six to twelve months in custody when he's sentenced in April.

Quote:

In a plea deal with prosecutors, Lamo, 22, admitted to cracking the Times network and recklessly causing damage exceeding $5,000. Both sides agreed on the six to twelve month sentencing range which, under federal guidelines, could permit Lamo to serve his sentence under house arrest or confined to a halfway house, at the court's discretion.

Quote:

The judge is not bound by the sentencing recommendation, and could technically sentence Lamo to as much as five years in custody-- though it's unlikely. The hacker also potentially faces $15,000 to $20,000 in fines, and could be ordered to pay financial restitution.

Wintermute · 01-09-2004, 05:50 PM

Why didn't he either
1) Prove to himself/ other geeks he could do it by doing it annonymously.

2) Tell the companies he was a security consulatant and would they give him $5000 if he could hack into their systems, prove it and then show them how he did it.

He would have either been a famous or a rich geek, instead of a geek in jail . That's a bad place to be if you aren't a hardened street criminal.

verbose · 01-09-2004, 07:06 PM

Quote:

Originally Posted by Wintermute

2) Tell the companies he was a security consulatant and would they give him $5000 if he could hack into their systems, prove it and then show them how he did it.

He risks extortion charges by doing that, even if he never touched their systems until they gave permission. How can he prove that he didn't find a vulnerability first, then contact them?

As noble as his intent may be, trespassing, except in extreme cases usually involving immediate potential loss of life or property, is still wrong and illegal. Plain as that.

Side note: port-scanning, pinging, and so forth have been ruled neither legal nor illegal. As the admin of an ISP, I feel you have no right, nor no justifiable reason to be scanning my network. A port-scan without permission is a trespass in my book.

01-09-2004, 09:15 PM

Quote:

Originally Posted by eternal

I get hit all the time. Luckily I am well protected.

No, you don't... 8)

Being "attacked" is nothing more than an automated ping from one of millions of machines looking for various IP addresses daily.

Unless you have a rather large website or server farm that is visible within various IP octets, you (the average user) are totally inconsequential to REAL hackers, crackers and script kids.

None of us is important enough to "hack"...I even hate the term because the bullcrap journalists prey on a fearful public and always talk about "hackers" and "security exploits."

Useless software for home users would be Blackice Defender, Zone alarm, etc. People look at their "attack" count and freak out and say, " Gee, I'm glad I bought product X because without it all the evil hackers would of gotten me!!!"

Whatever the hell "Gotten me" even means they don't know...but the press and software companies who prey on the unsuspecting public want to make sure the public feels "safe" from "them." Whoever the hell "them" happen to be.

Matter of fact...If you DO use one of the products outlined above, check the IP addresses on the "attackers." I'll bet you $20.00 that 80% or more of the "attacks" are from your own ISP when the DNS server querrys the customer IPs for regular automated maintenance checks.

Hackers...bah...they only exist in movies for the general public. Now if you happen to be the DoD, General Electric, RIAA, etc...then yeah...someone who hates the term "Hacker" is trying to get at your stuff.

09-16-2003, 07:50 PM	#26 (permalink)
Skylark Join Date: May 2003 Location: Kansas City area (U.S.A.) Age: 36 Posts: 1,219	If you hack in, and then tell them you did it. IMO, you're an idiot. Ask if they want you to test their security. That's like robbing a bank, then returning the money and saying... see, your security sucks. NOT BRIGHT! IMO, don't break the law, for whatever noble purpose, unless you are willing to go to jail for it. Just common sense. __________________ I know not with what weapons World War III will be fought, but World War IV will be fought with sticks and stones. Albert Einstein (1879 - 1955) Skylark \|TG PCS\| Skylark \|TG PCS\|

01-09-2004, 05:50 PM	#28 (permalink)
Wintermute Join Date: Jul 2003 Location: UK Age: 24 Posts: 1,166	Why didn't he either 1) Prove to himself/ other geeks he could do it by doing it annonymously. 2) Tell the companies he was a security consulatant and would they give him $5000 if he could hack into their systems, prove it and then show them how he did it. He would have either been a famous or a rich geek, instead of a geek in jail . That's a bad place to be if you aren't a hardened street criminal. __________________ Wintermute Play EVE online. It's like being an accounting addict in space. www.MakePovertyHistory.com

09-08-2003, 04:33 AM	#18 (permalink)
_Ender_ Join Date: May 2003 Location: I am lost, if you know where I am then please feel free to tell me. Age: 29 Posts: 2,048	Think about this, he could of hacked into their system and not even told them about it, at least this guy told them about it and told them what they needed to do to stop somebody else who might not of been so kind about it. I dont think he should get a medal by any means, but being wanted? I dont think that either.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Sponsored links

Sponsored links

Sponsored links