Underground: Hacking, madness and obsession on the electronic frontier Part 44

Pad had already braced himself for the possibility of prison. His lawyer warned him before the sentencing date that there was a reasonable likelihood the two 8lgm hackers would be sent down. After the Wandii case, the public pressure to 'correct' a 'wrong' decision by the Wandii jury was enormous. The police had described Wandii's acquittal as 'a licence to hack'--and The Times, had run the statement.12 It was likely the judge, who had presided over Wandii's trial, would want to send a loud and clear message to the hacking community.

Pad thought that perhaps, if he and Gandalf had pleaded not guilty alongside Wandii, they would have been acquitted. But there was no way Pad would have subjected himself to the kind of public humiliation Wandii went through during the 'addicted to computers' evidence. The media appeared to want to paint the three hackers as pallid, scrawny, socially inept, geeky geniuses, and to a large degree Wandii's lawyers had worked off this desire. Pad didn't mind being viewed as highly intelligent, but he wasn't a geek. He had a casual girlfriend. He went out dancing with friends or to hear bands in Manchester's thriving alternative music scene. He worked out his upper body with weights at home. Shy--yes. A geek--no.

Could Pad have made a case for being addicted to hacking? Yes, although he never believed that he had been. Completely enthralled, entirely entranced? Maybe. Suffering from a pa.s.sing obsession?

Perhaps. But addicted? No, he didn't think so. Besides, who knew for sure if a defence of addiction could have saved him from the prosecution's claim anyway?

Exactly where the quarter of a million pound claim came from in the first place was a mystery to Pad. The police had just said it to him, as if it was fact, in the police interview. Pad hadn't seen any proof, but that hadn't stopped him from spending a great deal of time feeling very stressed about how the judge would view the matter.

The only answer seemed to be some good, independent technical advice.

At the request of both Pad and Gandalf's lawyers, Dr Peter Mills, of Manchester University, and Dr Russell Lloyd, of London Business School, had examined a large amount of technical evidence presented in the prosecution's papers. In an independent report running to more than 23 pages, the experts stated that the hackers had caused less havoc than the prosecution alleged. In addition, Pad's solicitor asked Dr Mills to specifically review, in a separate report, the evidence supporting the prosecution's large damage claim.

Dr Mills stated that one of the police expert witnesses, a British Telecom employee, had said that Digital recommended a full rebuild of the system at the earliest possible opportunity--and at considerable cost. However, the BT expert had not stated that the cost was [sterling]250000 nor even mentioned if the cost quote which had been given had actually been accepted.

In fact, Dr Mills concluded that there was no supporting evidence at all for the quarter of a million pound claim. Not only that, but any test of reason based on the evidence provided by the prosecution showed the claim to be completely ridiculous.

In a separate report, Dr Mills' stated that:

i) The machine concerned was a Vax 6320, this is quite a powerful 'mainframe' system and could support several hundreds of users.

ii) That a full dump of files takes 6 tapes, however since the type of tape is not specified this gives no real indication of the size of the filesystem. A tape could vary from 0.2 Gigabytes to 2.5 Gigabytes.

iii) The machine was down for three days.

With this brief information it is difficult to give an accurate cost for restoring the machine, however an over estimate would be:

i) Time spent in restoring the system, 10 man days at [sterling]300 per day; [sterling]3000.

ii) Lost time by users, 30 man days at [sterling]300 per day; [sterling]9000.

The total cost in my opinion is unlikely to be higher than [sterling]12000 and this itself is probably a rather high estimate. I certainly cannot see how a figure of [sterling]250000 could be justified.

It looked to Pad that the prosecution's claim was not for damage at all. It was for properly securing the system--an entirely rebuilt system. It seemed to him that the police were trying to put the cost of securing the polytechnic's entire computer network onto the shoulders of one hacker--and to call it damages. In fact, Pad discovered, the polytechnic had never actually even spent the [sterling]250000.

Pad was hopeful, but he was also angry. All along, the police had been threatening him with this huge damage bill. He had tossed and turned in his bed at night worrying about it. And, in the end, the figure put forward for so long as fact was nothing but an outrageous claim based on not a single shred of solid evidence.

Using Dr Mills's report, Pad's barrister, Mukhtar Hussain, QC, negotiated privately with the prosecution barrister, who finally relented and agreed to reduce the damage estimate to [sterling]15000.

It was, in Pad's view, still far too high, but it was much better than [sterling]250000. He was in no mind to look a gift horse in the mouth.

Judge Harris accepted the revised damage estimate.

The prosecution may have lost ground on the damage bill, but it wasn't giving up the fight. These two hackers, James Richardson told the court and journalists during the two-day sentencing hearing, had hacked into some 10000 computer systems around the world. They were inside machines or networks in at least fifteen countries. Russia.

India. France. Norway. Germany. The US. Canada. Belgium. Sweden.

Italy. Taiwan. Singapore. Iceland. Australia. Officers on the case said the list of the hackers' targets 'read like an atlas', Richardson told the court.

Pad listened to the list. It sounded about right. What didn't sound right were the allegations that he or Gandalf had crashed Sweden's telephone network by running an X.25 scanner over its packet network.

The crash had forced a Swedish government minister to apologise on television. The police said the minister did not identify the true cause of the problem--the British hackers--in his public apology.

Pad had no idea what they were talking about. He hadn't done anything like that to the Swedish phone system, and as far as he knew, neither had Gandalf.

Something else didn't sound right. Richardson told the court that in total, the two hackers had racked up at least [sterling]25000 in phone bills for unsuspecting legitimate customers, and caused 'damage' to systems which was very conservatively estimated at almost [sterling]123000.

Where were these guys getting these numbers from? Pad marvelled at their cheek. He had been through the evidence with a fine-toothed comb, yet he had not seen one single bill showing what a site had actually paid to repair 'damage' caused by the hackers. The figures tossed around by the police and the prosecution weren't real bills; they weren't cast in iron.

Finally, on Friday 21 May, after all the evidence had been presented, the judge adjourned the court to consider sentencing. When he returned to the bench fifteen minutes later, Pad knew what was going to happen from the judge's face. To the hacker, the expression said: I am going to give you everything that Wandii should have got.

Judge Harris echoed The Times's sentiments when he told the two defendants, 'If your pa.s.sion had been cars rather than computers, we would have called your conduct delinquent, and I don't shrink from the a.n.a.logy of describing what you were doing as intellectual joyriding.

'Hacking is not harmless. Computers now form a central role in our lives. Some, providing emergency services, depend on their computers to deliver those services.'13

Hackers needed to be given a clear signal that computer crime 'will not and cannot be tolerated', the judge said, adding that he had thought long and hard before handing down sentence. He accepted that neither hacker had intended to cause damage, but it was imperative to protect society's computer systems and he would be failing in his public duty if he didn't sentence the two hackers to a prison term of six months.

Judge Harris told the hackers that he had chosen a custodial sentence, 'both to penalise you for what you have done and for the losses caused, and to deter others who might be similarly tempted'.

This was the show trial, not Wandii's case, Pad thought as the court officers led him and Gandalf out of the dock, down to the prisoner's lift behind the courtroom and into a jail cell.

Less than two weeks after Pad and Gandalf were sentenced, Electron was back in the Victorian County Court to discover his own fate.

As he stood in the dock on 3 June 1993 he felt numb, as emotionally removed from the scene as Meursault in Camus' L'etranger. He believed he was handling the stress pretty well until he experienced tunnel vision while watching the judge read his penalty. He perused the room but saw neither Phoenix nor Nom.

When Judge Anthony Smith summarised the charges, he seemed to have a special interest in count number 13--the Zardoz charge. A few minutes into reading the sentence, the judge said, 'In my view, a custodial sentence is appropriate for each of the offences const.i.tuted by the 12th, 13th and 14th counts'. They were the 'knowingly concerned'

charges, with Phoenix, involving NASA, LLNL and CSIRO. Electron looked around the courtroom. People turned back to stare at him. Their eyes said, 'You are going to prison'.

'I formed the view that a custodial sentence is appropriate in respect of each of these offences because of the seriousness of them,' Judge Smith noted, 'and having regard to the need to demonstrate that the community will not tolerate this type of offence.

'Our society today is ... increasingly ... dependent upon the use of computer technology. Conduct of the kind in which you engaged poses a threat to the usefulness of that technology ... It is inc.u.mbent upon the courts ... to see to it that the sentences they impose reflect the gravity of this kind of criminality.

'On each of Counts 12, 13 and 14, you are convicted and you are sentenced to a term of imprisonment of six months ... each ... to be concurrent.'

The judge paused, then continued, 'And ... I direct, by order, that you be released forthwith upon your giving security by recognisance ... in the sum of $500 ... You will not be required to serve the terms of imprisonment imposed, provided you are of good behaviour for the ensuing six months.' He then ordered Electron to complete 300 hours of community service, and to submit to psychiatric a.s.sessment and treatment.

Electron breathed a sigh of relief.

When outlining the mitigating circ.u.mstances which led to suspension of the jail sentence, Judge Smith described Electron as being addicted to using his computer 'in much the same way as an alcoholic becomes addicted to the bottle'. Boris Kayser had used the a.n.a.logy in the sentencing hearing, perhaps for the benefit of the media, but the judge had obviously been swayed by his view.

When court adjourned, Electron left the dock and shook hands with his lawyers. After three years, he was almost free of his court problems.

There was only one possible reason he might need to return to court.

If Phoenix fought out his case in a full criminal trial, the DPP would put Electron on the stand to testify against him. It would be an ugly scene.

The inmates of HM Prison Kirkham, on the north-west coast of England, near Preston, had heard all about Pad and Gandalf by the time they arrived. They greeted the hackers by name. They'd seen the reports on telly, especially about how Gandalf had hacked NASA--complete with footage of the s.p.a.ce shuttle taking off. Some TV reporter's idea of subtle irony--'Two hackers were sent down today' as the s.p.a.ce shuttle went up.

Kirkham was far better than Brixton, where the hackers had spent the first days of their sentence while awaiting transfer. Brixton was what Pad always envisioned prison would look like, with floors of barred cells facing onto an open centre and prisoners only allowed out of their cells for scheduled events such as time in the yard. It was a place where hard-core criminals lived. Fortunately, Pad and Gandalf had been placed in the same cell while they waited to be a.s.signed to their final destination.

After ten days inside Brixton Pad and Gandalf were led from their cell, handcuffed and put in a coach heading toward the windy west coast.

During the drive, Pad kept looking down at his hand, locked in shiny steel to Gandalf's hand, then he looked back up again at his fellow hacker. Clearing his throat and turning away from Gandalf's difficult grin--his friend now on the edge of laughing himself--Pad struggled.

He tried to hold down the muscles of his face, to pull them back from laughter.

A minimum security prison holding up to 632 prisoners, Kirkham looked vaguely like a World War II RAF base with a large collection of free-standing buildings around the grounds. There were no real walls, just a small wire fence which Pad soon learned prisoners routinely jumped when the place started to get to them.