• On The Insider: Britney's Bikini-Clad Top 10
September 23, 2008 1:31 PM PDT

No indictment in Palin hacking case

by Robert Vamosi
  • Font size
  • Print
  • 37 comments

Sarah Palin

(Credit: Alaska governor's office)

A grand jury in Chattanooga, Tenn., investigating who hacked Republican vice presidential candidate Sarah Palin's Yahoo e-mail ended its meeting on Tuesday without indicting a Tennessee lawmaker's son.

Speculation on the Internet has centered on 20-year-old David Kernell, a University of Tennessee student.

On the Internet forum 4Chan.org, where the e-mail break-in was first announced, posts attributed to someone named "Rubico" more or less described how the Yahoo account had been compromised using the password recovery feature. The e-mail address used for Rubico has been linked to Kernell.

Kernell's father, Democratic Tennessee state representative Mike Kernel, further fueled speculation last week when he confirmed his son was the subject of the investigation. On Saturday, investigators searched David Kernell's campus apartment.

Justice Department spokeswoman Laura Sweeney told the AP that the "government's inquiry into this matter is ongoing."

As CNET's resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security. Listen to his podcast at securitybites.cnet.com or e-mail Robert with your questions and comments.
advertisement
Click here!
Recent posts from Security
Microsoft patching zero-day Windows 7 SMB hole
RSA reveals details behind re-shipping scam
Expert says Adobe Flash policy is risky
Apple updates Safari for security
Microsoft probing Windows 7 zero-day hole
Security considerations for virtual environments
Eastern Europeans charged in payment processor hack
A child porn-planting virus: Threat or bad defense?
Add a Comment (Log in or register) (37 Comments)
  • prev
  • 1
  • next
by fjfjdvdv September 23, 2008 2:35 PM PDT
What kind of person is crazy enough to use a Yahoo account to conduct official government business?

And now we want to make her Vice President and give her top security clearance and access to all our nation's secrets?

Doesn't seem like such a good idea: http://www.youtube.com/watch?v=wPi17bX_4Ec
Reply to this comment
by sythara September 23, 2008 2:50 PM PDT
Do we have a confirmation that the email was, in fact, used for official Government business?

Do we have confirmation that information disclosed in that email violated OPSEC, INFOSEC, or any other security driven directives?

Email is the preferred method for the Gov't and has been for years. As long as the information is not classified (on any level) it is allowed to be transmitted.
by geotopia September 24, 2008 12:52 PM PDT
If you look at the leaked emails (via screenshots) and read the hacker's blog of how he did it, you'll see that Palin's Yahoo account was in fact void of any juicy government business. She was in fact diligent in every respect, using the Yahoo account to take personal conversations OFF-LINE from government business. That's why the
<http://blog.wired.com/27bstroke6/2008/09/palin-e-mail-ha.html>
The hacker expressed "I read though the emails? ALL OF THEM? before I posted, and what I concluded was anticlimactic, there was nothing there, nothing incriminating, nothing that would derail her campaign as I had hoped, all I saw was personal stuff, some clerical stuff from when she was governor?. And pictures of her family"

So, it's safe to conclude that the indictment of the OP is even more vaporous than the prosecutor's attempt to indict the hacker. It would be nice to haul out a senator's son and make an example putting hackers on notice, but really, this is turning into a non-issue on all fronts.
by Harrison912 September 24, 2008 11:18 PM PDT
She's not crazy and she wasn't using her Yahoo account to conduct official government business. It was her personal account.

She's quite capable of being Vice President.
by gordonliu September 23, 2008 2:44 PM PDT
I just want to point this out. It is not mentioned in this article, but more in the obviously biased blogs and news services that have been reporting this story.

4chan is not a "hacker" forum. in fact, even the people on that forum that would be labeled as a "hacker" by the average person are not really hackers.

they are people who use tools, simple exploits, and web based services to do what they do. these people, likely, have likely never written a program in their life.

these people are called "script kiddies."

with that being said, 4chan is something like the 4th most popular message board in the united states. it gets hundreds of thousands of posts a day.

the VAST majority of the people who frequent the website have never done anything even remotely similar to hacking in their lives. the script kiddes and even the handful of real hackers that might ever grace its pages are the extreme minority of its users.

even this kid david is a minority, and he obviously was not a concern to anyone given his quick failure.

4chan is known for causing internet shenanigans. when thousands of people log onto a forum and start posting appalling comments, when thousands try to add themselves to someone's myspace, when thousands join virtual online communities there is no hacking going on.

4chan's "power" comes from numbers, not from skill.

even this story is mislabeled as nothing and no one was hacked, in the traditional sense.

this is more along the lines of phishing, which is a trap that only idiots and old ladies fall into.
Reply to this comment
by nemrel September 23, 2008 3:18 PM PDT
^^^^^^^^^^
True post is true!
by Penguinisto September 24, 2008 6:26 AM PDT
Agreed on one point... FFS, 4chan is a playground, not some sort of super-evil hackers' forum.
by ZaphodQB September 23, 2008 2:47 PM PDT
fjfjdvdv, Maybe you should read before you post nonsense

Do a little research! go look at the postings in question, there was no Government business being conducted on yahoo mail.

There was some discussion about superfluous things such as private comments between two private people, like "can you believe how 'so and so" is reacting to this or that, in reference to official matters.
But there were no government business discussions in any of the emails read, the perpetrator even said so in his post when he broke the news that he had done it.
Reply to this comment
by clamenza September 23, 2008 2:49 PM PDT
She's not crazy. She wanted to illegally circumvent right-to-know laws. For those who are not familiar, most if not all states have some sort of law that provides the public access to government documents, including many emails.
Reply to this comment
by Penguinisto September 24, 2008 6:26 AM PDT
I'd love to see proof of this - where is it?
by drfrost September 24, 2008 4:48 PM PDT
Did you notice that the hacker himself said he found nothing incriminating? I suppose that doesn't fit your agenda so it's easy to leave off, as it were.

People really need to do SOME research before posting nonsense.

If the hacker had broken into her official "dot gov" email and found personal stuff, would you be upset that she was using government resources for a personal matter? I suspect so....
by ZaphodQB September 23, 2008 2:50 PM PDT
Ps fjfjdvdv, the poster of your youtube video is just as uninformed as you are.
Reply to this comment
by AndrewRich September 23, 2008 2:56 PM PDT
Good thing for the McPalin campaign, otherwise it might bring more attention to Palin's own hackish history: http://www.sfgate.com/cgi-bin/blogs/sfgate/detail?blogid=14&entry_id=30591
Reply to this comment
by WhenElephantsFly September 23, 2008 3:19 PM PDT
First, I think Palin should be indicted for using a Yahoo email account to conduct official state business!

Second, email is not (and should never be construed as) a way to communicate securely. Email is the electronic equivalent of a postcard.

Third, if the Republicans spent this kind of zeal trying to find Bin Laden or safeguarding the US economy, then we wouldn't be in the mess we are today. Going after someone this vigorously for "hacking" into an email account (especially when the "hack" only required about five minutes of work and no real technical skills) is a modern day lynching.

The Republicans have gone too far.

Comments welcome: http://whenelephantsfly.blogspot.com
Reply to this comment
by ferretboy88 September 23, 2008 8:27 PM PDT
You are crazy.
by looking4moreanswers September 24, 2008 10:23 AM PDT
READ She did not use this account for state business this was her personal account and no state business showed up.
by drfrost September 24, 2008 4:52 PM PDT
looking4moreanswers

READing implies research. Research implies someone is actually interested in the truth.

Rebels/fanatics/etc. don't care about the truth, they just want to hear themselves yell.
by kanehi September 23, 2008 3:20 PM PDT
The main thing is that someone hacked into someone's e-mail and he should be punished for it. Yahoo should pursue this matter. Me thinks he got off because of his dad. This is akin to identity theft!!
Reply to this comment
by matunuck September 23, 2008 3:53 PM PDT
If elected her top secret password will be vp1234
Reply to this comment
by drfrost September 24, 2008 4:53 PM PDT
LOL!!!!!!!!!!!!!!!!!!!!!

Ok, I'm not into political bashing or character assassination but that was funny.....

...and shame on you!
by matunuck September 23, 2008 3:53 PM PDT
If elected her top secret password will be vp1234
Reply to this comment
by zmonster September 23, 2008 4:37 PM PDT
I told you this kid didn't do it. Anyone smart enough to hack into an account like that, by going through proxy servers and avoiding detection, is NOT going to be stupid enough to brag about it using his REAL email address. I mean really, just think about it for one second. This kid is nothing more than a (really) stupid braggart. I think the real hacker is out there having a good laugh right now. Just my $0.02.
Reply to this comment
by sanenazok September 24, 2008 7:19 AM PDT
Most crimes, including awful murders and kidnappings are only solved because the criminal starts bragging about it. There's no magic evidence finding machine like on tv, it's mostly bragging and confessions. How else can they track something like this down?
by drfrost September 24, 2008 4:57 PM PDT
Breaking into a yahoo email using the password recovering method just requires a few good guesses. With all the information now available online on Sarah Palin, this kid didn't have to be a genius. He just had to be persistent. More enthusiasm than brains... which is exactly why he was "bragging" about it later...
by mbenedict September 23, 2008 8:09 PM PDT
@zmonster:

Who said the kid didn't do it? Confirmed logs from the tunnel proxy shows the hack came from an IP address in a netblock belonging to the cable company ISP which serve's the kid's apartment complex. Coincidence? Maybe, maybe not.

The grand jury only met once today for a few hours to hear testimony from the kid's roommates, then went into recess for the day at lunch time. For all we know the grand jury could be reconvened tomorrow (or whenever schedule permits) to bring down the indictments and/or hear from other witnesses.

The headline should have read: "No indictments YET in Palin hacking case."
Reply to this comment
by drfrost September 24, 2008 4:58 PM PDT
Yes... but that title would have garnered fewer readers....
by ferretboy88 September 23, 2008 8:28 PM PDT
We should break into Obama's computer and see how many interesting emails he gets from crazy pastors and bombers. I bet all the wackos would say that was not legal even if it only took 5 minutes.
Reply to this comment
by sanenazok September 24, 2008 7:22 AM PDT
Who cares about pastors and bombers, let's see his e-mails exchanged with the felon TONY REZKO and the rest of the Chicago political krew.
by drfrost September 24, 2008 5:01 PM PDT
So... anything I can do in 5 minutes or less should be considered legal because it's "easy?"

I can yell "fire" in a crowded theater in.... 1 second. Should that be legal?
by sanenazok September 24, 2008 7:24 AM PDT
Ugh, this wasn't "hacking" it was unauthorized access. There's a big difference, but I see how anyone can change passwords at yahoo just by entering publicly available information. That's not cool!
Reply to this comment
by njlovold September 24, 2008 7:25 AM PDT
Well if you broke into his GOVERNMENT email than it would be a big deal. If you broke into his PRIVATE email on a yahoo or google server than it would be no different than if I broke into YOUR email. And guess what... If I broke into your email, there would be no Grand Jury, would there!
Reply to this comment
by sanenazok September 24, 2008 7:34 AM PDT
Except there would be one if I was running for VP. How's that hard to understand? If I break into Obama's house it's a federal offense now that he's a bona fide candidate. Two years ago it would have been a slap on the wrist from a state court judge or there could have been no prosecution at all.
by drfrost September 24, 2008 5:08 PM PDT
If person A were to threaten your life on this forum, it's very unlikely anything would happen. Especially if they took even a tiny measure of precaution.

If person A were to threaten the President's life on the other hand.... Let's just say the secret service are not known for their sense of humor.

So yes, WHO the crime is committed against is important. And it DOES and SHOULD affect the punishment the person receives. By his own admission this kid was hoping to alter a national election.

If you can't see the difference between what he did and what a person hacking your email in order to publicly embarrass you has done... I think you're being intentionally blind.
by Falling-Inferno September 24, 2008 8:13 AM PDT
I wonder why they didn't book him....He gave the Goverment a look at Palin's Private account that she was dealing on. Her stuff is suppost to be public record so her dealing on her private account is something that needs to be discussed. But If I were to go hack some random persons yahoo no one will break my door down because the FBI doesn't care. They only care if you hack a goverment offical or like 100 major financial sectors
Reply to this comment
by looking4moreanswers September 24, 2008 10:30 AM PDT
This account was private no state business and if you were a candidate of either party it would be a felon
by drfrost September 24, 2008 5:31 PM PDT
"there was nothing there, nothing incriminated, nothing that would derail her campaign as I had hoped..." - self admitted hacker

(http://blog.wired.com/27bstroke6/2008/09/palin-e-mail-ha.html)

This really changed my views on this situation. This kid was out to alter national politics. At first I was thinking they should just slap this kid on the wrist and revoke his internet privileges for a few years. Now... I think a sterner punishment is more appropriate.
Reply to this comment
by fdunn3 September 25, 2008 3:39 PM PDT
Is it just me or is she cross-eyed?
Reply to this comment
(37 Comments)
  • prev
  • 1
  • next
advertisement

A CNET Conversation with Eric Schmidt

CNET's Tom Krazit and Molly Wood sit down with Google CEO Eric Schmidt to discuss the future of Android, the Chrome OS, the problem of real-time search indexing, and more.

Verizon tests sending RIAA copyright notices

The No. 2 phone company, known for its reluctance to intervene in antipiracy cases, strikes an agreement to forward copyright notices on behalf of the music industry.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right