TechCrunch Hacker Identified: You Decide If We Press Charges
techcrunch.com
techcrunch.com
Either leave it in the hands of the authorities or prosecute. Making a game out of it sends a very strong message that it's all about the page views whether you're hacking a site to redirect towards your sleazy affiliate trap or whether you're turning the justice system into the Circus Maximus.
It reminds me of public hangings.
I had almost the opposite reaction - I also think the guy should be prosecuted, but I think it's smart how they're turning it into an ordeal. They got messed up by the guy, but instead of being all serious and sober and lawyery, they're having a good time with it.
I can't see how the minimal damages are worth dragging him through a lengthy trial and bankrupting him with legal fees and a felony conviction on his permenant record.
If crack cocaine carries a mandatory sentencing of 5 years in jail for less than a gram (it used to), the only moral thing to do is to let the offender go. Even if you think they deserve to be punished to some degree, you have to examine if the expected punishment is proportional to the desired punishment.
He inconvenienced TC for one hour. A felony conviction would be screwing him over for the rest of his life, possibly 70+ years. I don't see any positive outcomes from that which would offset resources wasted prosecuting.
There seem to be a lot of people who might be willing to give him a second change even with a felony conviction. It sounds like you would? If he really is just a stupid kid, there might be extra laws for kids, and the punishment less severe?
Cocaine is an entirely different matter, because it only damages the user, not other people. Hacking a public server damages other people. How is that excusable? And he didn't just put up a powned message, either, he tried to make money. What's next, selling accounts to the russian mafia?
I mean I would agree with you that if you personally feel that the crime is not really a crime (as you might feel about possession of drugs), you wouldn't press charges. But I don't see how hacking a server with the purpose of making money could not be considered a crime.
In the chat transcripts, they explicitly discuss the possibility of getting caught. The perp knew the risks, and made a conscious decision to proceed. The Friend's discussion about getting paid for links reveals a pattern (albeit not in this case) of doing this for personal gain. And they also show clearly that they understand the effects of their behavior on the victims, and just don't care about it.
If you want to prevent these hackers from mischief, there must be a credible threat of repercussions. Letting them go will not discourage all this guy's friends. But maybe in a similar conversation next year, when they're talking about getting caught, someone will mention "you remember last year when Xyz got caught, and he's still in jail!".
Positive outcome: to set a good precedent for "don't do stupid shit like that mindlessly or you'll pay dearly if you get caught".
Back in my less mature days, I registered 20 AIM accounts, and then wrote a script to have them all log in simultaneously and in one by one start a conversation with a target, and then at my command, flood the target with "warnings", silencing them on AIM. So immature - so fun.
Get an open proxy list, then rig up a simple script to roll through them casting votes.
Just keep changing your user-agent.
It's worthless for anything serious.
Why would you bother to script a full-fledged browser when you can just connect to the site directly through the script, ignoring cookies and/or changing the user-agent string.
Why should anyone even care if TechCrunch got hacked, it's only fair that when you condone hacking of other sites and profit from it that you just shrug it off when it happens to you.
TC pressing charges because of being hacked would be completely hypocritical of them.
This is not true.
Is Arrington on the record stating that they did not pay?
Even if, they still profited tremendously from the traffic, so the point still stands. You either are ok with black hat hacks or you're not, you can't be fine with it when it is other people and press charges when it's you.
edit:
If've found this response:
http://techcrunch.com/2009/07/15/our-reaction-to-your-reacti...
There is lots of handwaving there, but the issue of whether or not money changed hands is not mentioned at all, and it would have been a pretty strong point in their defense if it hadn't. The only words he uses is 'But if it lands in our inbox, we consider it fair game.", which suggests nothing preceded that, but that's speculative.
Profiting from traffic and paying for stolen goods are two very different things, so I don't think the point does still stand.
You could have gotten a good bit of mileage simply by reporting about the hack, instead you decided to do damage to others for your own profits.
It's funny how acceptable stuff like that has become, and how you seem to be claiming some kind of moral highground here for something that is simply sleazy.
Profitting from stolen goods, directly or indirectly is unethical, if you had any sense at all you'd have given twitter a warning that their files are out in the open and you'd have destroyed the data.
I hope one day you'll find the tables turned, we'll see how ethical you will think this is then.
And I'll be on your side in that one, just like I was solidly on twitters side in the other.
Giving people a platform to do damage and to profit from that is sickening.
Because either way they gained from stuff that wasn't theirs to begin with and that was taken with malicious intent.
I wasn't aware that TC was on the record for not having paid, but that, as I said in my eyes makes little to no difference.
I wish sincerely that TC will have a helping of their own medicine and we'll see how they react, judging by this 'poll' I don't think they'll be as gracious as twitter was.
http://techcrunch.com/2010/04/26/how-i-would-have-handled-th...
I understand your point, but I also get why TC's doing it.
Any legal types around to clarify?
Tangential note, are there any good encryption plugins for GMail/Gchat/IRC?