$$$$$$$$$$$ $$$$$$$$$$$ hogz of entropy #192 $$$$$P $$$$ $$$$ moo, oink, up your butt. $$$$P $$$$ x$$$$ $$$P $$$$ xP$$$$ d$$$$$$$$$$$. $$$. $$$$xP $$$$ $$$$$$' >$$$$ $$$$$$$$$. $$$$P $$$$ 4$$$$$. .$$$$' $$$$'`4$$$b. $$$$ $$$$ 4$$$$$$$$$P' $$$$b 4$$$$b. $$$$$$$$$$$ 4$$$< %% $$$$$b 4$$$$$x $$$$$$$$$$$ 4$$$$$$$$$ %% >> "The 815 Bust Revisted" << by -> Neko ---------------------------------------------------------------------------- "Rub a dub dub, three men in a tub, leave 'em in there too long and they'll get AIDS," said the cop as I washed my hands of the fingerprinting solution. I had been fingerprinted because I had been arrested. Arrested because I committed some crimes. Some crimes which had something to do with computers. It pretty much started and finished in the summer I was 15. I had learned how to place free phone calls, to "phreak", and was becoming increasingly interested in computer hacking. I found friends with a similar interest in telephone and computer systems and we banded together. When I say pretty much, I mean most of the "work" we did. The actual start of our escapades was in the spring of 1995. Rockford's first public Internet Service Provider, the Sinnisippi Valley Freenet Association (SinnFree), began offering free Internet access. My friends Draugr, Entity, and Gnarf were immediately drawn to their system because they allowed us to be beta testers - to find flaws in their system. To hack their system. Hack their system is exactly what we did. The people who setup SinnFree were not computer gurus in the slightest regard. Novices who had stumbled into grant money, SinnFree had not set their system up very securely. Entity and Draugr pulled off the first hack during spring break and scored the entire password file. Soon after, we were using other people's accounts to access more of the system. Normal users of the system were allowed to email and visit web sites that SinnFree had placed on their menu. Using other users' accounts, users with more privileges, we were able to transfer files, visit any web site we wanted to, and chat on the Internet. Moreover, we were able to give ourselves these same privileges. The one thing that we were supposed to do was report our findings to SinnFree. Initially our group called after every find. Soon, after not receiving responses to phone messages and emails, we decided to install more holes every time we would find a hole. This way we could report a hole or two and have future accessibility assured to us. We found numerous ways to hack SinnFree and added another member to our little group, Cstone. Cstone and I were in constant connection with the outside world of hackers. Trading tips, information and exploits, we even ended up in a Philadelphia-based hackers group called Computer Abuse For Better Living (CAFBL). Eventually we got bored with hacking SinnFree and started branching out. Other local targets included Rock Valley College, Midwest Information SuperHighway Associates, "R" World BBS, and, of course, the Rockford Register Star's BBS. During the summer of 1995, I ran a bulletin board system (BBS) and invited the users of the Register Star's BBS to call. A few did. One who did was the system administrator. Reviewing my logs, I noticed that she had logged in and immediately changed her password. I chuckled, thinking that she wasn't stupid enough to use the same password on my BBS as she did on her BBS. Turns out, she was stupid enough. I logged on to the Register Star's BBS about 10 PM early in August and changed the logon message to say 'You've been hacked!', made a fake account and gave it administrator privileges, and, finally, uploaded copies of CAFBL's magazine. I was hoping that this hack would gain notoriety. After all, the hack was perpetrated on the newspaper. You'd think they'd report on it. Well, they didn't. Not at this time anyway. Afterwards, I went on vacation for a week and a half. Soon after I returned home, on August 24th, school started. During my third hour class, one of the assistant principals came and asked to talk to me. He told me to get my backpack and come with him. In his office resided two men wearing suits, and I was told they were detectives with the Rockford Police Department. We left school and drove downtown to the police station. They asked me repeatedly if I knew why they were talking to me. I told them no. I told them that I had been with my friends at a city park the day before and some of them had smoked pot. They laughed and told me that had nothing to do with this. Computers never even crossed my mind. When we arrived at the Public Safety Building, as we were walking inside I saw one of the detectives had a computer hard drive. This was the first time I'd panicked - I thought they had raided my house and taken my computer apart. They didn't tell me anything and just ushered me into a small room, gave me a Coke, and told me to wait. I waited and hoped that my dad didn't find out about this. The next thing I heard was my dad's voice outside. After what seemed like an eternity one of the detectives came into the little room and told me that my dad and a lawyer were here and that things could go easily and I could talk to the police alone, or we could be here for hours and I could talk with my lawyer. I chose the latter option. I was questioned and answered most of their questions. It seemed like the already knew most of what they were asking, anyway. (I later found out that Entity had apparently told them everything when he was questioned). Questions I avoided answering were those I knew to be federal crimes (interstate phone fraud) and anything I simply didn't do. Questioning finally ended and I went home. The detectives had told me not to tell anyone. The first person I told was Cstone. Cstone told Gnarf. I thought about it some more and decided that we all _had_ to know so that we could work together. I talked to Draugr and he told me that he and Entity had already been questioned. Gnarf and Cstone soon followed, as did the questioning of many of our acquaintances not involved in illegal activities. Nothing happened for more than three months. Gnarf, Draugr and I hung out together a lot, and even wanted to see movie Hackers together, almost hoping to be arrested at the screening. Just when I thought everything had ended, we got a phone call. On December 4th, 1995 I was told to come downtown so I could be arrested. Again, nothing happened, save for a week-long 'probe' article in the Rockford Register Star. On January 19th, 1996, Gnarf and I were served with subpoenas (Draugr, being 17 and charged as an adult, was given his court date when arrested; Cstone and I had lost touch; Entity was not arrested). We all went to court on the same day and plead not guilty. Ironically, I guess, a few months later we plea bargained. The interesting thing about this was that the court system had presumed us guilty before we had even plead either way. We all had to go in for a court social hearing, to determine our family situation and whatnot. On the written part the asked me what I thought of the process. I told them I thought it was long, drawn out, and silly to encourage schooling and then pull students out of school for court appearances. When I talked to my social worker, she asked me how I got involved with hacking. I grinned slyly and prefaced my remarks with, "Assuming I _was_ involved with hacking." Somehow this, coupled with my parents reluctance to disclose such things as their income, added up to a hostile opinion of the court. It was pretty funny to read my social history. It went on for pages and pages talking about how I was a Boy Scout, in Key Club, Amnesty International, Student Council, was an honor roll student, etc, and then to have the court recommend, among other things, a week-long stay in the county juvenile detention center. The ordeal wasn't terribly exciting, although it was interesting how excited people became when they found out that I _had_ been arrested. One day I was into computers and no one cared, the next day I was the most interesting guy in school. After pleading guilty, I was basically faced with a year's probation and community service. Neither were terribly difficult to complete. Now everything is done. Do I regret doing what I have done? Not really. Do I regret getting caught? You bet. If you're interested in hacking, I wholeheartedly recommend that you explore it, but get the permission of the computer's owners first. For more information, visit http://www.dto.net/~neko/815bust/ ---------------------------------------------------------------------------- * (c) HoE publications. HoE #192 -- written by Neko -- 1/22/98 *