Underground: Hacking, madness and obsession on the electronic frontier Part 43

forays into military and government systems was jumbled in with their intrusions into computers such as benign JANET systems, the defence team was told. It would take too much time to separate the two.

Eventually, after some wrangling, Pad and Gandalf were told they could inspect and copy material--provided it was done under the supervision of the police. The hackers travelled to London, to Holborn police station, to gather supporting evidence for their case. However, it soon became clear that this time-consuming exercise would be impossible to manage on an ongoing basis. Finally, the Crown Prosecution Service relented, agreeing to release the material on disk to Pad's solicitor, on the proviso that no copies were made, it did not leave the law office, and it was returned at the end of the trial.

As Wandii's case lurched from revelation to exaggeration, Pad and Gandalf busily continued to prepare for their own sentencing hearing.

Every day, Gandalf travelled from Liverpool to Manchester to meet with his friend. They picked up a handful of newspapers at the local agent, and then headed up to Pad's lawyer's office. After a quick scan for articles covering the hacking case, the two hackers began sifting through the reluctantly released prosecution disks. They read through the material on computer, under the watchful eye of the law office's cashier--the most computer literate person in the firm.

After fifteen days in the Southwark courtroom listening to fantastic stories from both sides about the boy sitting before them, the jury in Wandii's trial retired to consider the evidence. Before they left, Judge Harris gave them a stern warning: the argument that Wandii was obsessed or dependent was not a defence against the charges.

It took the jurors only 90 minutes to reach a decision, and when the verdict was read out the courtroom erupted with a wave of emotion.

Not guilty. On all counts.

Wandii's mother burst into a huge smile and turned to her son, who was also smiling. And the defence team couldn't be happier. Kelman told journalists, 'The jury felt this was a sledge hammer being used to crack a nut'.8

The prosecution was stunned and the law enforcement agents flabbergasted. Detective Sergeant Barry Donovan found the verdict bizarre. No other case in his 21 years in law enforcement had as much overwhelming evidence as this one, yet the jury had let Wandii walk.

And in a high-pitched frenzy rivalling its earlier hysteria, the British media jumped all over the jury's decision. 'Hacker who ravaged systems walks free', an indignant Guardian announced. 'Computer Genius is cleared of hacking conspiracy', said the Evening Standard. 'Hacking "addict" acquitted', sniffed The Times. Overpowering them all was the Daily Telegraph's page one: 'Teenage computer addict who hacked White House system is cleared'.

Then came the media king-hit. Someone had leaked another story and it looked bad. The report, in the Mail on Sunday, said that the three hackers had broken into a Cray computer at the European Centre for Medium Range Weather Forecasting at Bracknell. This computer, likes dozens of others, would normally have been relegated to the long list of unmentioned victims except for one thing. The US military used weather data from the centre for planning its attack on Iraq in the Gulf War. The media report claimed that the attack had slowed down the Cray's calculations, thus endangering the whole Desert Storm operation. The paper announced the hackers had been 'inadvertently jeopardising--almost fatally--the international effort against Saddam Hussein' and had put 'thousands of servicemen's lives at risk'.9

Further, the paper alleged that the US State Department was so incensed about British hackers' repeated break-ins disrupting Pentagon defence planning that it had complained to Prime Minister John Major.

The White House put the matter more bluntly than the State Department: Stop your hackers or we will cut off European access to our satellite which provides trans-Atlantic data and voice telecommunications.

Someone in Britain seemed to be listening, for less than twelve months later, authorities had arrested all three hackers.

Pad thought the allegations were rubbish. He had been inside a VAX machine at the weather centre for a couple of hours one night, but he had never touched a Cray there. He had certainly never done anything to slow the machine down. No cracking programs, no scanners, nothing which might account for the delay described in the report. Even if he had been responsible, he found it hard to believe the Western allies'

victory in the Gulf War was determined by one computer in Berkshire.

All of which gave him cause to wonder why the media was running this story now, after Wandii's acquittal but before he and Gandalf were sentenced. Sour grapes, perhaps?

For days, columnists, editorial and letter writers across Britain pontificated on the meaning of the Wandii's verdict and the validity of an addiction to hacking as a defence. Some urged computer owners to take responsibility for securing their own systems. Others called for tougher hacking laws. A few echoed the view of The Times, which declared in an editorial, 'a persistent car thief of [the hacker's]

age would almost certainly have received a custodial sentence. Both crimes suggest disrespect for other people's property ... the jurors may have failed to appreciate the seriousness of this kind of offence'.10

The debate flew forward, changing and growing, and expanding beyond Britain's borders. In Hong Kong, the South China Morning Post asked, 'Is [this] case evidence of a new social phenomenon, with immature and susceptible minds being damaged through prolonged exposure to personal computers?' The paper described public fear that Wandii's case would result in 'the green light for an army of computer-literate hooligans to pillage the world's databases at will, pleading insanity when caught'.11

By April Fool's Day 1991, more than two weeks after the end of the court case, Wandii had his own syndrome named after him, courtesy of The Guardian.

And while Wandii, his mother and his team of lawyers celebrated their victory quietly, the media reported that the Scotland Yard detectives commiserated over their defeat, which was considerably more serious than simply losing the Wandii case. The Computer Crimes Unit was being 'reorganised'. Two experienced officers from the five-man unit were being moved out of the group. The official line was that the 'rotations' were normal Scotland Yard procedure. The unofficial word was that the Wandii case had been a fiasco, wasting time and money, and the debacle was not to be repeated.

In the north, a dark cloud gathered over Pad and Gandalf as their judgment day approached. The Wandii case verdict might have been cause for celebration among some in the computer underground, but it brought little joy for the other two 8lgm hackers.

For Pad and Gandalf, who had already pleaded guilty, Wandii's acquittal was a disaster.

On 12 May 1993, two months after Wandii's acquittal, Boris Kayser stood up at the Bar table to put forward Electron's case at the Australian hacker's plea and sentencing hearing. As he began to speak, a hush fell over the Victorian County Court.

A tall, burly man with a booming voice, an imperious courtroom demeanour and his traditional black robes flowing behind him in an echo of his often emphatic gesticulations, Kayser was larger than life. A master showman, he knew how to play an audience of courtroom journalists sitting behind him as much as to the judge in front of him.

Electron had already stood in the dock and pleaded guilty to fourteen charges, as agreed with the DPP's office. In typical style, Kayser had interrupted the long process of the court clerk reading out each charge and asking whether Electron would plead guilty or not guilty.

With an impatient wave of his hand, Kayser asked the judge to dispense with such formalities since his client would plead guilty to all the agreed charges at once. The interjection was more of an announcement than a question.

The formalities of a plea having been summarily dealt with, the question now at hand was sentencing. Electron wondered if he would be sent to prison. Despite lobbying from Electron's lawyers, the DPP's office had refused to recommend a non-custodial sentence. The best deal Electron's lawyers had been able to arrange in exchange for turning Crown witness was for the DPP to remain silent on the issue of prison. The judge would make up his mind without input from the DPP.

Electron fiddled nervously with his father's wedding ring, which he wore on his right hand. After his father's death, Electron's sister had begun taking things from the family home. Electron didn't care much because there were only two things he really wanted: that ring and some of his father's paintings.

Kayser called a handful of witnesses to support the case for a light sentence. Electron's grandmother from Queensland. The family friend who had driven Electron to the hospital the day his father died.

Electron's psychiatrist, the eminent Lester Walton. Walton in particular highlighted the difference between the two possible paths forward: prison, which would certainly traumatise an already mentally unstable young man, or freedom, which offered Electron a good chance of eventually establishing a normal life.

When Kayser began summarising the case for a non-custodial sentence, Electron could hear the pack of journalists off to his side frantically scribbling notes. He wanted to look at them, but he was afraid the judge would see his ponytail, carefully tucked into his neatly ironed white shirt, if he turned sideways,

'Your Honour,' Kayser glanced backward slightly, toward the court reporters, as he warmed up, 'my client lived in an artificial world of electronic pulses.'

Scratch, scribble. Electron could almost predict, within half a second, when the journalists' pencils and pens would reach a crescendo of activity. The ebb and flow of Boris's boom was timed in the style of a TV newsreader.

Kayser said his client was addicted to the computer the way an alcoholic was obsessed with the bottle. More scratching, and lots of it. This client, Kayser thundered, had never sought to damage any system, steal money or make a profit. He was not malicious in the least, he was merely playing a game.

'I think,' Electron's barrister concluded pa.s.sionately, but slowly enough for every journalist to get it down on paper, 'that he should have been called Little Jack Horner, who put in his thumb, pulled out a plumb and said, "What a good boy am I!"'

Now came the wait. The judge retired to his chambers to weigh up the pre-sentence report, Electron's family situation, the fact that he had turned Crown witness, his offences--everything. Electron had given a nine-page written statement against Phoenix to the prosecution. If the Phoenix case went to trial, Electron would be put on the stand to back up that statement.

In the month before Electron returned to court to hear his sentence, he thought about how he could have fought the case. Some of the charges were dubious.

In one case, he had been charged with illegally accessing public information through a public account. He had accessed the anonymous FTP server at the University of Helsinki to copy information about DES. His first point of access had been through a hacked Melbourne University account.

Beat that charge, Electron's lawyer had told him, and there's plenty more where that came from. The DPP had good pickings and could make up a new charge for another site. Still, Electron reasoned some of the Crown's evidence would not have stood up under cross-examination.

When reporters from Australia and overseas called NASA headquarters for comment on the hacker-induced network shutdown, the agency responded that it had no idea what they were talking about. There had been no NASA network shutdown. A spokesman made inquiries and, he a.s.sured the media, NASA was puzzled by the report. Sharon Beskenis's statement didn't seem so watertight after all. She was not, it turned out, even a NASA employee but a contractor from Lockheed.

During that month-long wait, Electron had trouble living down Kayser's nursery-rhyme rendition in the courtroom. When he rang friends, they would open the conversation saying, 'Oh, is that Little Jack Horner?'

They had all seen the nightly news, featuring Kayser and his client.

Kayser had looked grave leaving court, while Electron, wearing John Lennon-style gla.s.ses with dark lenses and with his shoulder-length curls pulled tightly back in a ponytail, had tried to smile at the camera crews. But his small, fine features and smattering of freckles disappeared under the harsh camera lights, so much so that the black, round spectacles seemed almost to float on a blank, white surface.

The week after Electron pleaded guilty in Australia, Pad and Gandalf sat side by side in London's Southwark dock one last time.

For a day and a half, beginning on 20 May 1993, the two hackers listened to their lawyers argue their defence. Yes, our clients hacked computers, they told the judge, but the offences were nowhere near as serious as the prosecution wants to paint them. The lawyers were fighting hard for one thing: to keep Pad and Gandalf out of prison.

Some of the hearing was tough going for the two hackers, but not just because of any sense of foreboding caused by the judge's imminent decision. The problem was that Gandalf made Pad laugh, and it didn't look at all good to laugh in the middle of your sentencing hearing.

Sitting next to Gandalf for hours on end, while lawyers from both sides butchered the technical aspects of computer hacking which the 8lgm hackers had spent years learning, did it. Pad had only to give Gandalf a quick sidelong glance and he quickly found himself swallowing and clearing his throat to keep from bursting into laughter. Gandalf's irrepressible irreverence was written all over his face.

The stern-faced Judge Harris could send them to jail, but he still wouldn't understand. Like the gaggle of lawyers bickering at the front of the courtroom, the judge was--and would always be--out of the loop.

None of them had any idea what was really going on inside the heads of the two hackers. None of them could ever understand what hacking was all about--the thrill of stalking a quarry or of using your wits to outsmart so-called experts; the pleasure of finally penetrating a much-desired machine and knowing that system is yours; the deep anti-establishment streak which served as a well-centred ballast against the most violent storms washing in from the outside world; and the camaraderie of the international hacking community on Altos.

The lawyers could talk about it, could put experts on the stand and psychological reports in the hands of the judge, but none of them would ever really comprehend because they had never experienced it.

The rest of the courtroom was out of the loop, and Pad and Gandalf stared out from the dock as if looking through a two-way mirror from a secret, sealed room.

Pad's big worry had been this third charge--the one which he faced alone. At his plea hearing, he had admitted to causing damage to a system owned by what was, in 1990, called the Polytechnic of Central London. He hadn't damaged the machine by, say, erasing files, but the other side had claimed that the damages totalled about [sterling]250 000.

The hacker was sure there was zero chance the polytechnic had spent anything near that amount. He had a reasonable idea of how long it would take someone to clean up his intrusions. But if the prosecution could convince a judge to accept that figure, the hacker might be looking at a long prison term.