Marcus Hutchins spared US jail sentence over malware charges
bbc.co.uk
bbc.co.uk
Curious, how do you think we should deal with crimes of this type, if not (at minimum) restraining suspects from leaving the country and having a judge preside over the legal proceedings?
Otherwise it's basically: Have you got access to lots of money, or are you going to spend years in prison? He was really lucky that he knew people who could offer him place to stay, contact lawyers, help with bail. Majority of people would be completely screwed in that situation.
A "framework", here, would probably include factors like "are we friendly with the country in question and can we get their law enforcement to monitor the defendant", the nature and severity of the crime, "does the defendant have the resources to 'disappear' in their home country", etc, etc. Besides the first question, it's pretty much already what's considered when deciding whether to grant bail.
(Note- I'm not sure the idea of releasing a defendant to another country is a good one, but it's not like the courts wouldn't be able to tell the difference between an agent of a foreign country working in an espionage capacity and Marcus Hutchins.)
Hutchins was fortunate that he had some money and a sort of safety net in the form of donations, a network of people who knew him, etc. For most people without that type of support, I would imagine being prevented from leaving the States for an extended amount of time would be nothing less than devastating.
I think that actual equality would have him awaiting trial on bail back home in the UK, not Los Angeles.
Please check your language. Why does this wind you up so much?
I refer you to this that goes into in in more detail: https://news.ycombinator.com/item?id=20541499
Other people get it, if you don't; you don't and can stop bothering me with aggressive questions. People on the internet don't, in general, "gonna have to explain". It's optional.
I can't tell if you're missing the point deliberately or not. Either way, I'm not interested.
There is quite a stark difference between waiting in your home, with your family, while being able to continue your day to day life (if you are a resident/citizen) and not being able to go back to your life, losing your job in your home country, while not being allowed to find a job either in the US, all the while you have to pay for accommodation and food for months or a year out of thin air (in the case of most non-residents).
How can you think both those situations equally suck?
I put it to you that the person so affected, and sentenced to time served, would in fact find it to be a "big deal".
Source: his own twitter.
Additionally, he was quite open about his depressive episodes and legal frustrations on Twitter.
IANAL but it sounds like he may be able to appeal based on a recent SCOTUS ruling[0].
> The result is that people convicted of certain crimes -- such as the California crime of burglary -- that are not by definition necessarily violent, may not be deportable.
[0] - https://www.shouselaw.com/immigration/aggravated-felonies
For entry into the US on visa-waiver (ESTA) or visas (without a green card), you generally can't appeal to the courts, and court rulings about deportation aren't really relevant.
It is up to the discretion of CBP (and also the State Department for visa issuance). They can decide to disregard a criminal conviction - they are more likely to do that if it is relatively minor, if there are some unusual/special circumstances, if it is from many years ago, if a person shows evidence of being of good character since then. But it is totally up to their discretion.
If they rule against you, there is no formal right of appeal. You can talk to your own country's government, ask them to make diplomatic representations. If your own government decides to do so (they are under no obligation to do so), there is some chance they might change the US government's mind, but no guarantee.
That kind of thing could definitely be relevant for showing good character since his bygone days as a malware creator rather than researcher.
(If you can make the case that the visa/entry refusal was due to some improper reason, such as racial or religious discrimination, political vendetta, government corruption, etc., then you might have some chance, but even then the odds are not that great. But if your case is simply "they won't let me in due to my prior felony conviction in a US federal court but I don't think that's fair", then your odds of success are almost exactly zero.)
(Disclaimer: IANAL.)
[1]: https://www.justice.gov/usao-edwi/pr/marcus-hutchins-pleads-...
That certainly wasn't a long time. As far as I remember it was very shortly after his arrest (maybe a day or so) when it became public that it was for the Kronos malware and unrelated to the wannacry incident.
* Hutchins (MalwareTech on social media) used to be a black hat, and developed/sold a banking trojan that would become Kronos.
* Since then, he's given up black hat activity and began reverse-engineering malware and providing educational material along the same lines.
* He came into the spotlight when he realized that the Wannacry ransomware was attempting to contact a particular web domain that was unregistered. He registered it to see what they were trying to send and why, and found out that it was a global killswitch, fully shutting down the initial strain of the malware.
* After Def Con 2017, he was arrested at the airport when attempting to leave the US. He was being charged with devleoping Kronos, and prosecutors were effectively adding new charges in retaliation every time he refused to plead guilty.
* He eventually caved and plead guilty, and today was sentenced to a year of supervised release, with no jail time (Though he likely won't be able to enter the US again). The judge strongly indicated that the lenient sentence was due to the fact that he stopped breaking the law of his own volition, and started using his skills to better the world.
* This article doesn't mention it, but the judge also suggested that he and his legal counsel seek a pardon, which could potentially allow him to enter the US again. They are planning to go forward with that path.
He initially told everyone that he was peripherally involved in writing some code as a teenager that, unbenknownst to him, ended up in some malware.
The feds unraveled his lies and showed beyond a doubt that not only did he work on that into his 20s, but he and his partner were actively involved in the business of selling a purpose-built banking trojan. They had logs of a “business dispute” between him and his parter from only 2 years prior to his arrest.
He had bad opsec, and many folks online exposed a lot of this. The feds had chat logs showing he was directly involved. It’s all in the court documents. He had no choice but to plea guilty.
https://www.courtlistener.com/recap/gov.uscourts.wied.77855/...
All that aside, I do not appreciate that he rallied support from the security community and raised legal defense money by convincing sympathetic folks that it was all untrue and he was being set up, when he was actually guilty the whole time.
Manipulate the legal system all you want for all I care, but manipulating good natured people in the community who put their own reputation and money on the line is not exactly a class act. I didn’t give him money, but I did fall for his original story.
In this case, Hutchins created Malware capable of stealing banking information and worked with a friend to market it to people who would use it to steal banking information: https://arstechnica.com/tech-policy/2019/07/wannacry-slayer-....