• On BNET: Online porn struggles for profits
July 31, 2009 6:20 AM PDT

NASA hacker loses bid to avoid extradition

by David Meyer
and
Tom Espiner
  • Font size
  • Print
  • 41 comments

Gary McKinnon has lost his high court bid in the U.K. to avoid extradition to the U.S. for hacking into military systems.

McKinnon had tried to argue that former home secretary, Jacqui Smith, was legally wrong to push for the extradition despite his diagnosis of Asperger's syndrome and that the director of public prosecutions was also wrong to opt for extradition despite having sufficient evidence to prosecute McKinnon in the U.K.

Gary McKinnon

Gary McKinnon

(Credit: ZDNet UK)

However, Lord Justice Stanley Burnton and Justice Alan Wilkie dismissed both claims on Friday. McKinnon now has 28 days to launch an appeal at the Royal Courts of Justice. According to his solicitor, Karen Todner, McKinnon and his legal team will also appeal to the Law Lords, and Todner has made a fresh approach to President Obama.

"I have today sent a letter to President Barack Obama signed by 40 members of a cross parliamentary group of MPs asking him to step in to bring this shameful episode to an end," Todner said in a statement on Friday. "It is a sad state of affairs if this government cannot protect our most vulnerable of citizens."

In her statement, Todner also referred to the judges' decision as "inhumane" and "an affront to British justice."

The decision comes almost seven years after McKinnon, from North London, was indicted by the U.S. Department of Justice in November 2002. He was charged with intentionally damaging a federal computer system, and with breaking into 97 computers belonging to the U.S. Army, U.S. Navy, U.S. Air Force, U.S. Department of Defense, and NASA.

McKinnon has never denied the hacks, although his legal team has disputed the cost of the damage he allegedly caused--around $700,000, according to U.S. authorities. The Londoner said he had been looking for suppressed evidence of extraterrestrial life and pointed out the poor security that had been applied to the affected systems.

The case has had ramifications beyond the hacks themselves, as it has drawn attention to the extradition treaty that exists between the U.K. and the U.S. The U.S. can demand a suspect be extradited from the U.K. without providing prima facie evidence, which McKinnon's defense team have argued is not reciprocal.

McKinnon has also been diagnosed by the autism expert Simon Baron-Cohen with Asperger's syndrome, a disorder on the autism spectrum.

If he is convicted in the U.S., McKinnon faces up to 70 years in a maximum security federal prison. Legal team has argued that, given his condition, the situation would put him at risk of psychosis or even suicide.

Politicians and celebrities have rallied behind McKinnon, arguing that he should serve any potential sentence in the U.K., rather than in the U.S.

Correction at 8:25 a.m. PDT: The details of the extradition treaty between the U.S. and the U.K. have been tweaked.

David Meyer and Tom Espiner of ZDNet UK reported from London.

advertisement
Click Here
Recent posts from Security
Microsoft warns of IE exploit code in the wild
Chrome OS security: 'Sandboxing' and auto updates
E-tailers snagged in marketing 'scam' blame customers
McAfee warns about '12 Scams of Christmas'
Cisco launches iPhone security app
Town to photograph every car that enters and leaves
New Firefox 3.6 beta aims to cut crashes
Facebook adopts new privacy policy
Add a Comment (Log in or register) (41 Comments)
  • prev
  • 1
  • next
by Techraan July 31, 2009 7:48 AM PDT
Ok, I believe there needs to be a punishment for hacking. I do NOT however, believe that a young man should be given a life sentence in a maximum security prison for it. This kind of thing should be a couple years, maybe. Unless ofcourse, it can be proven that he was SELLING secrets, wherein his hacking could directly result in loss of life. 70 years indeed.... BAH!
Reply to this comment
by sanenazok July 31, 2009 7:58 AM PDT
Who says he's getting that? He's just going for trial in the US. The theoretical maximum sentence can't legally be imposed in a criminal case like this.
by make_or_break July 31, 2009 8:12 AM PDT
Umm...who says he's actually going to get 70 years? And conversely, who says he CAN'T get 70 years? The range of sentencing is there for a reason: to give a jury--or a judge--discretion to determine and dole out a penalty that fits the severity of the crime. It's highly unlikely that this idiot's going to serve the maximum, unless of course something he did in his hacking cause physical harm or even death as a result, which to date has never been claimed. As for his medical claims...like everything else about this bozo even that has to be taken with an eye of suspicion on its validity and truth. He gives off the stench that he'll do just about anything to see about keeping himself out of jail.

This guy's a gutless wonder. Just for all the roadblocks he's tried to put up he should be locked up for being the fool that he is.
by Belinus July 31, 2009 8:22 AM PDT
@make_or_break:

He's a citizen of the UK who committed the crime in the UK. Therefore he should be tried in the UK using the UK's system of laws and punishment. It is that plain and simple.

How would you like it if you broke some law in Saudi Arabia or Iran and they were going to have you extradited to face the charges there?
by sanenazok July 31, 2009 8:45 AM PDT
@Belinus: If the US had an extradition treaty with the Saudis or the Iranians, the US would be OBLIGATED to extradite me if I had committed a crime in either country. That's why countries have these treaties, but only between countries of similar legal systems/protections.

The "remote" nature of the crime doesn't matter. He willingly accessed US computers without authorization knowing that he is accessing computers in the US. He should have stood trial for this years ago, his slight to moderate disability notwithstanding.
by gsigas July 31, 2009 9:40 AM PDT
I predict his sentence will be 5 years or less (probably less) and he will probably be allowed to serve it in the U.K. Asking the President for a pardon is premature since he hasn't even been tried or sentenced. If all of this effort is put into the actual case and sentencing he will probably walk away with a suspended sentence (or minimum sentence).
by sting7k July 31, 2009 9:46 AM PDT
You don't go to maximum security for hacking. You go to club fed just south of Williamsport, PA.
by Belinus July 31, 2009 2:16 PM PDT
@sanenazok: Again, he committed the crime IN THE UK. He was not on US soil when he did this therefore he broke the laws of the United Kingdom, not the United States. NASA is a victim, yes, but they need to seek redress in the United Kingdom.

My analogy was in reference to make_or_break breaking a law in SA or Iran while not on Saudi or Iranian soil.
by gsigas July 31, 2009 10:47 PM PDT
@Belinus I disagree. The crime crosses a jurisdictional border so it is subject to laws prohibiting someone from committing a crime in the U.K. and it is subject to laws protecting someone from having a crime committed against them in the U.S.. This means in the U.K. the crime would be (something like) sending unauthorized commands to a computer system and in the U.S. the crime would be (something like) breaching security, or damaging files. Sending of the commands can be perceived as occuring on U.K. soil, but the breach of security and the destruction of files can be perceived to occur on U.S. soil so the act is a transborder crime. A similar theory holds if someone in the U.K. sent someone in the U.S. a bomb that killed the recipient. In the U.K. the crime would be sending an explosive and in the U.S. the crime would be murder. Where the guy sent the bomb from is not the sole factor in jurisdiction, just as where the guy sent the computer commands from is not the sole factor in McKinnon's case.
by sanenazok July 31, 2009 8:01 AM PDT
Unless his disorder caused him to not know the difference between right and wrong, it's no defense. He should be put on trial and that's that.
Reply to this comment
by umbrae July 31, 2009 10:36 AM PDT
Research autism. That is exactly what it is.

http://en.wikipedia.org/wiki/Autism

My son has it. Asperger is not as extreme as my son's condition, but they do not have the same understanding of norms we do. He may has simply not seen this as a serious act or understood what the consequences could have been.

He should stand trial, but extradition is not necessary. They can do this in the UK.
by sanenazok July 31, 2009 11:56 AM PDT
Well it's all well and good to know something about the disease in general. We know nothing about this kid's condition and Autism and Asperger's is a common diagnosis for a range of disorders. It's an individual question whether he had the capacity to know right and wrong, not something you can tell on the basis of the disease he supposedly has.
by SergeM256 July 31, 2009 2:13 PM PDT
If he try insanity defense he could get life in prison in psych unit. He is danger to society, because he doesn't know the difference between right and wrong and he could be held indefinitely until panel of psychiatrists decide he is no longer is a danger to society.
by bschmock July 31, 2009 8:13 AM PDT
I don't understand what the big deal is, so he hacked into gov computers, there is no proof that he was selling the information he was viewing, and most of the data should be public anyway. Personally I praise him for snooping around and trying to find information that should by alright be public knowledge.
Reply to this comment
by renGek July 31, 2009 10:22 AM PDT
So while you are at work and some of your neighbor's kids broke into your house because they found a way to open a window and just innocently looked around you would be ok with that?
by El_Segfaulto July 31, 2009 10:25 AM PDT
Hell he didn't even hack. He tried blank passwords and administrative accounts on computers that were not adequately locked down. He exposed the disturbing lack of security in our military infrastructure. He should be given a condemnation.
by Kiljoy616 August 1, 2009 1:08 AM PDT
The big deal is here is someone they can actually go after, its not like they can go after North Korea, or say China, but here is an easy conviction, so makes sense they would go after him.

Easy to understand once you put the psychology of the people in power.
by TX-Sunset July 31, 2009 8:46 AM PDT
Throw him in a dark cold cell and melt the key. Hackers should be treated like murderers or rapists. This time he was just snooping around. What will he do next time. You just think about how you will feel the next time you get a trojan or keylogger on your system. Remember what you say today the next time you get your credit card number stolen or your identity. Those are hackers doing that.
Reply to this comment
by El_Segfaulto July 31, 2009 10:27 AM PDT
Wow, simply wow. Unless your comment was a snarky bit of humor that was too dry for me to get I think you've got your priorities mixed up. Hacking is bad. Rape and murder are far far worse. I'd rather have every dime I have stolen through identity theft than subject somebody I care about (or anybody for that matter) to the anguish of rape or murder.
by pentest July 31, 2009 12:58 PM PDT
Knee jerk much?

He performed a valuable service as the incompetent feds were forced to lock up their systems.

So you think that getting a trojan on your computer is the same level as rape or murder? If so, you are simply retarded.
by Kiljoy616 August 1, 2009 1:13 AM PDT
Very true he should be put away for life, and so should preacher for preaching lies, and politicians for lying, and I guess you for I am sure downloading songs, or maybe a game or hey even that porn picture, after all that illegal somewhere in the world, and your online so your fair game, I would say cutting off your hands will teach you to down load anything or watch anything some foreign government deems inappropriate

As for a hacker give me a break this guy is useless, not very good at it, considering he did not hide what he was doing or go thru a bunch of proxy systems to hide his real identity.
by eeee July 31, 2009 9:01 AM PDT
bschmock: are you serious with that comment ?!?!?!?!?!!!:
I doubt very much that information on military computers would be categorized by ANYONE as PUBLIC information.
if our military secrets are public then why have a military and militatry intelligence programs...........
let's use those funds to build water parks on every street...
Reply to this comment
by El_Segfaulto July 31, 2009 10:29 AM PDT
The point is he didn't hack. The account name was administrator, the password was blank. It's not like he was some l33t h@x0r utilizing state-of-the-art techniques. It is nice to know that guessing passwords like that is worth $800,000, next time I have to lock down a machine where I work I will charge accordingly.
by jture July 31, 2009 10:10 AM PDT
McKinnon "said he had been looking for suppressed evidence of extraterrestrial life." Hello, has anyone noticed that, Asperger's or not, he's also nuts? He doesn't need prison - he needs psychiatric help.
Reply to this comment
by ITpsycho July 31, 2009 12:45 PM PDT
Alright kiddies - let's get on with the facts then, eh?

1. He hacked into US government and US Military Systems. How and why and what he was doing with his left hand at the time notwithstanding. Just because he got in with UID: Administrator PWD: Blank doesn't mean squat - heck, it could have even been a setup?

2. He got caught. Notwithstanding his mild case of Asberger's, he was indeed found to have his hand in the cookie jar. Should he have just been let off the hook and try for best 2 out of 3? He committed a crime on US systems - not just my neighbors or the Post Office - military and space systems. He was tried and convicted in the US in abstentia. The US and the UK have extredition treaties. Game over, send him forward to face the music. If the situation were reversed, the result would and should still be the same. Little Danny Darling American boy (of legal age) gets caught infiltrating the MOD, what - you don't want him?

3. All you UK defenders of this guy - I know us colonists don't really mount up to a hill of beans in your books, heck - most of you guys hate the French and Germans too - yep, that's right - I worked with and for a UK firm that conducted business in the US, the UK, Germany and France and all the UK employees were most continually talking trash about everyone else. I can't believe how you (almost all) spoke about the French and Germans and even us - I guess it must be a size envy thing, eh? Little UK, big Germany, France and US? Anyhow, guess what? Nobody cares this time - the boy did the deed and got caught, so stop trying to use the "oh, pity the poor mate with Aberger's routine" - nobody's buying it, not even the judiciary in your own government. Getting 40 MP's to sign something together is not all that difficult and quite frankly, were the number higher, it would be perhaps a bit more significant, but 40? nah.

4. Nations have laws for very good reasons; the law is still working its way forward for this young man in the UK - it's not a done deal yet, he may never get to the states - but he should. You may have strong feelings one way or another about the case, but at the very least, the laws should not be broken again to avoid justice and as an American feel the only way for justice to be met in this case is for him to come here, face the music, and start the appeals process - who knows? Maybe, just maybe, the laws of our land will work.
Reply to this comment
by pentest July 31, 2009 1:00 PM PDT
A setup? Really? With production DoD systems? Nice try, the DoD admins were incompetent, they are the ones who should be in jail, but are probably still holding the same position.
by zmonster August 1, 2009 8:38 AM PDT
Yeah, and he found evidence that the US has illegally been keeping secret programs that involve extraterrestrial life! HELLO?? Crimes are being committed by people in the Pentagon illegally keeping this information from the accountability of Congress. McKinnon is a hero.
by sanenazok August 1, 2009 5:39 PM PDT
@zmonster: uhm he found nothing, NOTHING. Show me one article that discussed him finding anything of interest. Congress has some oversight, but it's limited, plus who says that senators haven't been briefed about whatever is in these secret, secret files (in a closed door session).

Television has made people expect big conspiracies and aliens who lurk around the corner. The internet doesn't help, either. This guy's disability and lack of judgment caused him to commit a crime. He should stand trial in the country where he committed the crime (US).
by pentest July 31, 2009 1:04 PM PDT
So who will get released early to accommodate this totally harmless person? Spending more tax payer money on this is a complete waste, nothing of value will come from this.

How about hiring competent admins who don't leave the door wide open? I bet the morons who didn't even bother to configure these systems aren't in jail or at least banned from ever touching a computer again like they should be.
Reply to this comment
by ITpsycho July 31, 2009 1:11 PM PDT
um, someone was watchin them doors and um, someone sure as s#!t got caught. Quit making excuses - the dude's guilty, end of story.
by pentest August 2, 2009 2:20 PM PDT
They weren't locked psycho. The admin accounts werestill set on defaults for **** sake!
by danielz40 July 31, 2009 3:20 PM PDT
Okay, it doesn't matter how he got in, what password he used, etc. He remotely entered a system he knew was illegal to enter. He was searching for information not available to him, he knew the difference between right and wrong. He's never denied the charges. Is he guilty? Yes.
Now comes the fair and just part. The punishment should fit the crime. He was not using it to gain money, or physically harm anyone, or bring down a corporation. He was looking for UFO information. He really should get a minimum sentence, and have it suspended, and be released.
Shi*, you have corporate execs raking in millions in bonuses at banks for performance bonuses when the banks have lost billions, had bailout money in the billions. You have oil companies setting prices costing citizens millions everyday. You have mayors of major cities stealing. Locally we've spent 75 million on a downtown renovation whereby no real benefit occurs, other than the city making tens of thousands in parking fines. You have cops working as revenue generators screwing drivers with their speeding tickets, you have a company in Scotsdale doling out cameras to the government so they get a big share of the fines. You have illegal immigrants crossing over and getting free health care while the rest of us have to work for it!
And we're worried about some guy in the UK reading about UFOs? You want to punish him? Make him a US citizen and pay him minimum wage!
Reply to this comment
by ITpsycho August 3, 2009 6:55 AM PDT
Ah, if they were really after punishment for him, they'd make him a sysadmin for the MOH (Ministry of Health) - although, quite frankly, that punishment might be too severe.

Where's NetForce when you need them?
by Patrick5651 July 31, 2009 8:43 PM PDT
One of the areas he penetrated is classified "Above Top Secret," so there may be folks who are upset with what he found and revealed concerning an off planet "Space command."

Seems too incredible to be true, but by the way the Pentagon is acting, could it be true?
Reply to this comment
by sanenazok August 1, 2009 5:40 PM PDT
Kiddies, is there any indication that this guy found ANYTHING of value? I haven't seen a single mention that he did.
by Kiljoy616 August 1, 2009 1:06 AM PDT
Lets not forget that we also need to extradite those CIA that Italy wants, its only fair, sounds to me like UK has basically become a gutless country, to bad, kind of thought they had some backbone there, but I guess they don't any more with the Gov they have now.

So they now have Sharia law and soon they will extradite UK citizens to Muslim country for prosecution, sad day for UK.
Reply to this comment
by n3td3v August 1, 2009 7:39 AM PDT
Some of these comments are horrible

I dont know Gary but I care very much for him

We as a society should as well

The government need to get their act together on this one

Gordon Brown has the ability to give this guy a pardon, this should be done if legal channels fail

He doesn't deserve to goto United States, it will screw him up because of his disorder

Anyone who doesn't realise that this guys excuse is genuine needs to take a long hard look at themselves
Reply to this comment
by sanenazok August 1, 2009 5:43 PM PDT
He can't be given a pardon since he hasn't been tried ANYWHERE yet. Several courts have looked at the evidence of his disability and found him in a condition for extradition. As you said, you "dont know Gary." Instead your response is based on emotions- something courts don't have a luxury to do. If they let off this guy due to his disease, every Timson will claim it.
by zmonster August 1, 2009 8:36 AM PDT
TIMEOUT. Why are the liars in the US government not being prosecuted for illegally keeping secret the research programs regarding extraterrestrial life that McKinnon found? These projects are using taxpayer money and are not being accounted as they are required to be under US law. THAT is the crime here. THAT is what we should be talking about here -- the documents that McKinnon found. They prove crimes are being committed by US personnel who are abusing the secrecy classification system. For one, it is unbelievable the press isn't talking about these documents, and two, it's unbelievable they are prosecuting the guy that uncovered this stuff and not prosecuting those in the US government illegally hiding it.
Reply to this comment
by sanenazok August 1, 2009 5:44 PM PDT
TIMEOUT. What exactly did McKinnon find? By his own statements he has said that he found NOTHING.
by rynobu August 2, 2009 6:31 AM PDT
Ok, so I'm not saying whether i think what this guy did is right or wrong, but a couple of questions I would like to ask are:

1) If he is clever enough to hack into systems that are apparently secure, should the governments not be employing him, or at least asking his assistance to make their networks even more secure, or gain access to other systems?

and

2) Why are these networks on a system that can be accessed by an outsider, in another country? Should the information not be stored on internal networks such as an intranet?
Reply to this comment
(41 Comments)
  • prev
  • 1
  • next
advertisement

Let the battle for holiday gadget shoppers begin

Retailers try different strategies for competing with behemoths like Amazon and Wal-Mart in the cutthroat competition to lure those giving electronics as gifts.

Firefox hopes to one-up IE with fast graphics

Windows 7 features called Direct2D and DirectWrite will speed up Internet Explorer 9 performance. But Firefox hopes it might retool for the same benefit first.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right