News for hackers. Stuff that matters.
Re:A Big Case of Oops by clickguy1 on Friday February 26, 2010 @02:40PM (#1153933)
Could you delete that link? I clicked on it out of habit, but tptacek's comment has me paranoid that my IP is going to end up in an investigation. I'm guessing other people would prefer to just not have the option to click on it.
Re:A Big Case of Oops by Jeema3000 on Friday February 26, 2010 @02:54PM (#1153965)
Eh I think you're ok - if they're tracking visitors that closely, they'd know that you came to that link from here after it was already made public. Plus ycombinator.com gets a ton of traffic so I'm sure you're not the only one. :)

But yea, probably not a bad idea to delete that link anyway...

Re:A Big Case of Oops by clickguy1 on Friday February 26, 2010 @07:07PM (#1154528)
I don't think it would help my case if they knew the referring site was called Hacker News.
Re:A Big Case of Oops by tptacek on Friday February 26, 2010 @04:19PM (#1154176)
You have no reason to think you're OK for clicking the link. Dazzlingly stupid things like this have happened to people before.
Re:A Big Case of Oops by ErrantX on Friday February 26, 2010 @03:44PM (#1154063)
Nothing they would be able to do about it particularly. A large number of people probably clicked that link. Getting warrants (or the police) to track up all of the IP's isnt going to happen :)

Also: im not sure what they could do. Certainly it breaks no laws I know of.

Re:A Big Case of Oops by seldo on Friday February 26, 2010 @10:23PM (#1154814)
It could be stretched to "unauthorized use of a computer system" which is the legal definition of hacking. It doesn't have to be difficult to qualify as criminal.
Re:A Big Case of Oops by ErrantX on Saturday February 27, 2010 @06:18AM (#1155179)
No becaus all those laws require them to prove an intent. Which in this case wouldn't wash :-)
Re:A Big Case of Oops by Retric on Saturday February 27, 2010 @08:12AM (#1155244)
You don't need to prove intent to send someone to jail. For some types of crimes intent changes the punishment but that's about it.
Re:A Big Case of Oops by ErrantX on Saturday February 27, 2010 @09:35AM (#1155302)
Incorrect; for computer misuse laws you have to prove intent - it's the most important part of it.

It's the reason most hackers or online criminals are convicted of other crimes.

(I work in this area and have studied the US laws quite recently).

EDIT: perhaps "show intent" is a better way of putting it.

Re:A Big Case of Oops by Retric on Saturday February 27, 2010 @09:48PM (#1156310)
Read up on: United States v. Shea, 493 F.3d 1110, (Ct. App. 9th Cir. 2007).

Knowing that someone used your password to send information is enough.

"The court of appeals acknowledged that analysis of the "transmission" element and its required proof was a novel issue for the court under the specific provisions of 18 USC § 1030(a) (5) (A). Yet, the court interpreted the word transmission under this provision by assimilating this term with the wire fraud crime, which also requires the element of transmission. Thus, the court used the Wire Fraud Act interpretation of the word transmission and held that "circumstantial evidence is sufficient to prove that the transmission has occurred." Therefore, the analysis concentrated on the prosecution proof that transmissions were associated to defendant's passwords, despite the employee's claim that the network was not secured and that other employees could have accessed those passwords."

Re:A Big Case of Oops by ErrantX on Sunday February 28, 2010 @05:55AM (#1156728)
Indeed; but look carefully at the Wire Fraud Act:

"To commit wire fraud, one must (1) devise, or intend to devise, a scheme or artifice to defraud another person on the basis of a material representation, and (2) do it with the intent to defraud, and (3) do it through the use of interstate wire facilities (i.e. telecommunications of any kind)."

Every single piece of literature (including that case) will include the word "intentionally" somewhere :) It's the bread and butter for hacking laws.

(I cant find much on the case you cite specifically, but from what I did find it sounds like the point your discussing is the proof that it was him that did the dirty deed - when other people could have had his password and done it. Which is an important point, but separate from intent - which they would have still had to prove).

Re:A Big Case of Oops by clickguy1 on Saturday February 27, 2010 @10:06AM (#1155335)
What kinds of other crimes do they use to convict people?
Re:A Big Case of Oops by ErrantX on Saturday February 27, 2010 @10:53AM (#1155383)
Theft, fraud, criminal damage: whatever applies really.

It's much the same principle as how they took down Al Capone for income tax evasion [1]

1. http://en.wikipedia.org/wiki/Al_Capone#Conviction_and_Impris...

Re:A Big Case of Oops by swombat on Saturday February 27, 2010 @08:46AM (#1155266)
I bet the report will say "it was hacked after a large number of people visited it, coming from a site called 'Hacker News'".