~terry
Mon, Jul 27, 1998 (10:40)
seed
This is about hackers and computer crime. How fitting that we lead it
off with some observations by Bruce Sterling, who penned Hacker Crackdown
and, incidentally, knows how to throw a hell of a party and give a
rousing good speech.
~terry
Mon, Jul 27, 1998 (10:52)
#1
Bruce Sterling
bruces@well.sf.ca.us
Literary Freeware -- Not for Commercial Use
Speech to High Technology Crime Investigation
Association
Lake Tahoe, Nov 1994
Good morning, my name's Bruce Sterling, and I'm a
sometime computer crime journalist and longtime
science fiction writer from Austin Texas. I'm the guy who
wrote HACKER CRACKDOWN, which is the book
you're getting on one of those floppy disks that are being
distributed at this gig like party favors.
People in law enforcement often ask me, Mr
Sterling, if you're a science fiction writer like you say you
are, then why should you care about American computer
police and private security? And also, how come my kids
can never find any copies of your sci-fi novels? Well, my
publishers do their best. The truth of the matter is that
I've survived my brief career as a computer-crime
journalist. I'm now back to writing science fiction full
time, like I want to do and like I ought to do. I really
can't help the rest of it.
It's true that HACKER CRACKDOWN is still
available on the stands at your friendly local bookstore --
maybe a better chance if it's a computer bookstore. In
fact it's in its second paperback printing, which is
considered pretty good news in my business. The critics
have been very kind about that book. But even though
I'm sure I could write another book like HACKER
CRACKDOWN every year for the rest of my life, I'm just
not gonna do that.
Instead, let me show you some items out of this bag.
This is HACKER CRACKDOWN, the paperback. And
see, this is a book of my short stories that has come out
since I published HACKER CRACKDOWN! And here's
a brand new hardback novel of mine which came out just
last month! Hard physical evidence of my career as a
fiction writer! I know these wacko cyberpunk sci-fi books
are of basically zero relevance to you guys, but I'm
absurdly proud of them, so I just had to show them off.
So why did I write HACKER CRACKDOWN in the
first place? Well, I figured that somebody ought to do it,
and nobody else was willing, that's why. When I first got
interested in Operation Sundevil and the Legion of
Doom and the raid on Steve Jackson Games and so
forth, it was 1990. All these issues were very obscure. It
was the middle of the Bush Administration. There was
no information superhighway vice president. There was
no WIRED magazine. There was no Electronic Frontier
Foundation. There was no Clipper Chip and no Digital
Telephony Initiative. There was no PGP and no World
Wide Web. There were a few books around, and a
couple of movies, that glamorized computer crackers,
but there had never been a popular book written about
American computer cops.
When I got started researching HACKER
CRACKDOWN, my first and only nonfiction book, I
didn't even think I was going to write any such book.
There were four other journalists hot on the case who
were all rather better qualified than I was. But one by
one they all dropped out. Eventually I realized that
either I was going to write it, or nobody was ever going to
tell the story. All those strange events and peculiar
happenings would have passed, and left no public
record. I couldn't help but feel that if I didn't take the
trouble and effort to tell people what had happened, it
would probably all have to happen all over again. And
again and again, until people finally noticed it and were
willing to talk about it publicly.
Nowadays it's very different. There are about a
million journalists with Internet addresses now. There
are other books around, like for instance Hafner and
Markoff's CYBERPUNK OUTLAWS AND HACKERS,
which is a far better book about hackers than my book is.
Mungo and Clough's book APPROACHING ZERO has a
pretty interesting take on the European virus scene.
Joshua Quittner has a book coming out on the Masters
of Deception hacking group. Then there's this other
very recent book I have here, CYBERSPACE AND THE
LAW by Cavazos and Morin, which is a pretty good
practical handbook on digital civil liberties issues. This
book explains in pretty good legal detail exactly what
kind of stunts with your modem are likely to get you into
trouble. This is a useful service for keeping people out of
hot water, which is pretty much what my book was
intended to do, only this book does it better. And there
have been a lot of magazine and newspaper articles
published.
Basically, I'm no longer needed as a computer crime
journalist. The world is full of computer journalists now,
and the stuff I was writing about four years ago, is hot
and sexy and popular now. That's why I don't have to
write it any more. I was ahead of my time. I'm supposed
to be ahead of my time. I'm a science fiction writer.
Believe it or not, I'm needed to write science fiction.
Taking a science fiction writer and turning him into a
journalist is like stealing pencils from a blind man's cup.
So frankly, I haven't been keeping up with you guys,
and your odd and unusual world, with the same gusto I
did in 90 and 91. Nowadays, I spend all my time
researching science fiction. I spent most of 92 and 93
learning about tornadoes and the Greenhouse Effect. At
the moment, I'm really interested in photography,
cosmetics and computer interfaces. In 95 and 96 I'll be
interested in something else. That may seem kind of
odd and dilettantish on my part. It doesn't show much
intellectual staying power. But my intellectual life
doesn't have to make any sense. Because I'm a science
fiction writer.
Even though I'm not in the computer crime game
any more, I do maintain an interest. For a lot of pretty
good reasons. I still read most of the computer crime
journalism that's out there. And I'll tell you one thing
about it. There's way, way too much blather about
teenage computer intruders, and nowhere near enough
coverage of computer cops. Computer cops are a
hundred times more interesting than sneaky teenagers
with kodes and kards. A guy like Carlton Fitzpatrick
should be a hundred times more famous than some
wretched hacker kid like Mark Abene. A group like the
FCIC is a hundred times more influential and important
and interesting than the Chaos Computer Club, Hack-
Tic, and the 2600 group all put together.
The United States Secret Service is a heavy outfit.
It's astounding how little has ever been written or
published about Secret Service people, and their lives,
and their history, and how life really looks to them. Cops
are really good material for a journalist or a fiction writer.
Cops see things most human beings never see. Even
private security people have a lot to say for themselves.
Computer-intrusion hackers and phone phreaks, by
contrast, are basically pretty damned boring.
You know, I used to go actively looking for hackers,
but I don't bother any more. I don't have to. Hackers
come looking for me these days. And they find me,
because I make no particular effort to hide. I get these
phone calls -- I mean, I know a lot of you have gotten
these hacker phone calls -- but for me they go a lot like
this:
Ring ring. "Hello?"
"Is this Bruce Sterling?"
"Yeah, you got him."
"Are you the guy who wrote HACKER CRACKDOWN?"
"Yeah, that's me, dude. What's on your mind?"
"Uh, nothing -- I just wanted to know if you were there!"
"Well, okay, I'm here. If you ever get anything on your
mind, you let me know." Click, buzz. I get dozens of calls
like that.
And, pretty often, I'll get another call about 24 hours
later, and it'll be the same kid, only this time he has ten
hacker buddies with him on some illegal bridge call.
They're the Scarlet Scorpion and the Electric Ninja and
the Flaming Rutabaga, and they really want me to log
onto their pirate bulletin board system, the Smurfs in
Hell BBS somewhere in Wisconsin or Ohio or Idaho. I
thank them politely for the invitation and I tell them I
kind of have a lot of previous engagements, and then
they leave me alone.
I also get a lot of call from journalists. Journalists
doing computer crime stories. I've somehow acquired a
reputation as a guy who knows something about
computer crime and who is willing to talk to journalists.
And I do that, too. Because I have nothing to lose. Why
shouldn't I talk to another journalist? He's got a boss, I
don't. He's got a deadline, I don't. I know more or less
what I'm talking about, he usually doesn't have a ghost of
a clue. And suppose I say something really rude or
tactless or crazy, and it gets printed in public. So what?
I'm a science fiction writer! What are they supposed to
do to me -- take away my tenure?
Hackers will also talk to journalists. Hackers brag all
the time. Computer cops, however, have not had a
stellar record in their press relations. I think this is sad. I
understand that there's a genuine need for operational
discretion and so forth, but since a lot of computer cops
are experts in telecommunications, you'd think they'd
come up with some neat trick to get around these
limitations.
Let's consider, for instance, the Kevin Mitnick
problem. We all know who this guy Mitnick is. If you
don't know who Kevin Mitnick is, raise your hand....
Right, I thought so. Kevin Mitnick is a hacker and he's
on the lam at the moment, he's a wanted fugitive. The
FBI tried to nab Kevin a few months back at a computer
civil liberties convention in Chicago and apprehended
the wrong guy. That was pretty embarrassing, frankly. I
was there, I saw it, I also saw the FBI trying to explain
later to about five hundred enraged self-righteous
liberals, and it was pretty sad. The local FBI office came
a cropper because they didn't really know what Kevin
Mitnick looked like.
I don't know what Mitnick looks like either, even
though I've written about him a little bit, and my
question is, how come? How come there's no publicly
accessible WorldWideWeb page with mugshots of
wanted computer-crime fugitives? Even the US Postal
Service has got this much together, and they don't even
have modems. Why don't the FBI and the USSS have
public relations stations in cyberspace? For that matter,
why doesn't the HTCIA have its own Internet site? All
the computer businesses have Internet sites now, unless
they're totally out of it. Why aren't computer cops in
much, much better rapport with the computer
community through computer networks? You don't
have to grant live interviews with every journalist in sight
if you don't want to, I can understand that that can create
a big mess sometimes. But just put some data up in
public, for heaven's sake. Crime statistics. Wanted
posters. Security advice. Antivirus programs, whatever.
Stuff that will help the cyberspace community that you
are supposed to be protecting and serving.
I know there are people in computer law
enforcement who are ready and willing and able to do
this, but they can't make it happen because of too much
bureaucracy and, frankly, too much useless hermetic
secrecy. Computer cops ought to publicly walk the beat
in cyberspace a lot more, and stop hiding your light
under a bushel. What is your problem, exactly? Are
you afraid somebody might find out that you exist?
I think that this is an amazing oversight and a total
no-brainer on your part, to be the cops in an information
society and not be willing to get online big-time and
really push your information -- but maybe that's just me.
I enjoy publicity, personally. I think it's good for people.
I talk a lot, because I'm just an opinionated guy. I can't
help it. A writer without an opinion is like a farmer
without a plow, or a professor without a chalkboard, or a
cop without a computer -- it's just something basically
useless and unnatural.
I don't mind talking to you this morning, I'm
perfectly willing to talk to you, but since I'm not a cop or a
prosecutor, I don't really have much of genuine nuts-
and-bolts value to offer to you ladies and gentlemen. It's
sheer arrogance on my part to lecture you on how to do
your jobs. But since I was asked to come here, I can at
least offer you my opinions. Since they're probably not
worth much, I figure I ought to at least be frank about
them.
First the good part. Let me tell you about a few
recent events in your milieu that I have no conceptual
difficulties with. Case in point. Some guy up around San
Francisco is cloning off cellphones, and he's burning
EPROMs and pirating cellular ID's, and he's moved
about a thousand of these hot phones to his running
buddies in the mob in Singapore, and they've bought
him a real nice sports car with the proceeds. The Secret
Service shows up at the guy's house, catches him with his
little soldering irons in hand, busts him, hauls him
downtown, calls a press conference after the bust, says
that this activity is a big problem for cellphone
companies and they're gonna turn up the heat on people
who do this stuff. I have no problem with this situation. I
even take a certain grim satisfaction in it. Is this a crime?
Yes. Is this guy a bad guy with evil intent? Yes. Is law
enforcement performing its basic duty here? Yes it is.
Do I mind if corporate private security is kinda pitching
in behind the scenes and protecting their own
commercial interests here? No, not really. Is there some
major civil liberties and free expression angle involved in
this guy's ripping off cellular companies? No. Is there a
threat to privacy here? Yeah -- him, the perpetrator. Is
the Secret Service emptily boasting and grandstanding
when they hang this guy out to dry in public? No, this
looks like legitimate deterrence to me, and if they want a
little glory out of it, well hell we all want a little glory
sometimes. We can't survive without a little glory. Take
the dumb bastard away with my blessing.
Okay, some group of Vietnamese Triad types hijack
a truckload of chips in Silicon Valley, then move the loot
overseas to the Asian black market through some
smuggling network that got bored with running heroin.
Are these guys "Robin Hoods of the Electronic Frontier?"
I don't think so. Am I all impressed because some
warlord in the Golden Triangle may be getting free
computation services, and information wants to be free?
No, this doesn't strike me as a positive development,
frankly. Is organized crime a menace to our society?
Yeah! It is!
I can't say I've ever had anything much to do --
knowingly that is -- with wiseguy types, but I spent a little
time in Moscow recently, and in Italy too at the height of
their Tangentopoly kickback scandal, and you know,
organized crime and endemic corruption are very
serious problems indeed. You get enough of that evil
crap going on in your society and it's like nobody can
breathe. A protection racket -- I never quite grasped
how that worked and what it meant to victims, till I spent
a couple of weeks in Moscow last December. That's a
nasty piece of work, that stuff.
Another case. Some joker gets himself a job in a
long distance provider, and he writes a PIN-trapping
network program and he gets his mitts on about eight
zillion PINs and he sells them for a buck apiece to his
hacker buddies all over the US and Europe. Do I think
this is clever? Yeah, it's pretty ingenious. Do I think it's a
crime? Yes, I think this is a criminal act. I think this guy
is basically corrupt. Do I think free or cheap long
distance is a good idea? Yeah I do actually; I think if
there were a very low flat rate on long distance, then you
would see usage skyrocket so drastically that long
distance providers would actually make more money in
the long run. I'd like to see them try that experiment
some time; I don't think the way they run phone
companies in 1994 is the only possible way to run them
successfully. I think phone companies are probably
gonna have to change their act pretty drastically if they
expect to survive in the 21st century's media
environment.
But you know, that's not this guy's lookout. He's not
the one to make that business decision. Theft is not an
act of reform. He's abusing a position of trust as an
employee in order to illegally line his own pockets. I
think this guy is a crook.
So I have no problems with those recent law
enforcement operations. I wish they'd gotten more
publicity, and I'm kinda sorry that I wasn't able to give
them more publicity myself, but at least I've heard of
them, and I was paying some attention when they
happened. Now I want to talk about some stuff that bugs
me.
I'm an author and I'm interested in free expression,
and it's only natural because that's my bailiwick. Free
expression is a problem for writers, and it's always been a
problem, and it's probably always gonna be a problem.
We in the West have these ancient and honored
tradition of Western free speech and freedom of the
press, and in the US we have this rather more up-to-date
concept of "freedom of information." But even so, there
is an enormous amount of "information" today which is
highly problematic. Just because freedom of the press
was in the Constitution didn't mean that people were
able to stop thinking about what press-freedom really
means in real life, and fighting about it and suing each
other about it. We Americans have lots of problems
with our freedom of the press and our freedom of
speech. Problems like libel and slander. Incitement to
riot. Obscenity. Child pornography. Flag-burning.
Cross-burning. Race-hate propaganda. Political
correctness. Sexist language. Mrs. Gore's Parents Music
Resource Council. Movie ratings. Plagiarism.
Photocopying rights. A journalist's so-called right to
protect his sources. Fair-use doctrine. Lawyer-client
confidentiality. Paid political announcements. Banning
ads for liquor and cigarettes. The fairness doctrine for
broadcasters. School textbook censors. National
security. Military secrets. Industrial trade secrets. Arts
funding for so-called obscenity. Even religious
blasphemy such as Salman Rushdie's famous novel
SATANIC VERSES, which is hated so violently by the
kind of people who like to blow up the World Trade
Center. All these huge problems about what people can
say to each other, under what circumstances. And that's
without computers and computer networks.
Every single one of those problems is applicable to
cyberspace. Computers don't make any of these old
free-expression problems go away; on the contrary, they
intensify them, and they introduce a bunch of new
problems. Problems like software piracy. Encryption.
Wire-fraud. Interstate transportation of stolen digital
property. Free expression on privately owned networks.
So-called "data-mining" to invade personal privacy.
Employers spying on employee e-mail. Intellectual
rights over electronic publications. Computer search
and seizure practice. Legal liability for network crashes.
Computer intrusion, and on and on and on. These are
real problems. They're out there. They're out there now.
And in the future they're only going to get worse. And
there's going to be a bunch of new problems that
nobody's even imagined yet.
I worry about these issues because guys in a position
like mine ought to worry about these issues. I can't say
I've ever suffered much personally because of
censorship, or through my government's objections to
what I have to say. On the contrary, the current US
government likes me so much that it kind of makes me
nervous. But I've written ten books, and I don't think
I've ever written a book that could have been legally
published in its entirety fifty years ago. Because my
books talk about things that people just didn't talk about
much fifty years ago, like sex for instance. In my books,
my characters talk like normal people talk nowadays,
which is to say that they cuss a lot. Even in HACKER
CRACKDOWN there are sections where people use
obscenities in conversations, and by the way the people I
was quoting were computer cops.
I'm forty years old; I can remember when people
didn't use the word "condom" in public. Nowadays, if
you don't know what a condom is and how to use it,
there's a pretty good chance you're gonna die.
Standards change a lot. Culture changes a lot. The laws
supposedly governing this behavior are very gray and
riddled with contradictions and compromises. There are
some people who don't want our culture to change, or
they want to change it even faster in some direction
they've got their own ideas about. When police get
involved in cultural struggles it's always very highly
politicized. The chances of its ending well are not good.
It's been quite a while since there was a really good
ripping computer-intrusion scandal in the news.
Nowadays the hotbutton issue is porn. Kidporn and
other porn. I don't have much sympathy for kidporn
people, I think the exploitation of children is a vile and
grotesque criminal act, but I've seen some computer
porn cases lately that look pretty problematic and
peculiar to me. I don't think there's a lot to be gained by
playing up the terrifying menace of porn on networks.
Porn is just too treacherous an issue to be of much use to
anybody. It's not a firm and dependable place in which
to take a stand on how we ought to run our networks.
For instance, there's this Amateur Action case.
We've got this guy and his wife in California, and they're
selling some pretty seriously vile material off their
bulletin board. They get indicted in Tennessee. What is
that about? Do we really think that people in Memphis
can enforce their pornographic community standards on
people in California? I'd be genuinely impressed if a
prosecutor got a jury in California to indict and convict
some pornographer in Tennessee. I'd figure that
Tennessee guy had to be some kind of pretty heavy-duty
pornographer. Doing that in the other direction is like
shooting fish in a barrel. There's something cheap
about it. This doesn't smell like an airtight criminal case
to me. This smells to me like some guy from Tennessee
trying to enforce his own local cultural standards via a
long-distance phone line. That may not be the actual
truth about the case, but that's what the case looks like.
It's real hard to make a porn case look good at any time.
If it's a weak case, then the prosecutor looks like a
bluenosed goody-goody wimp. If it's a strong case, then
the whole mess is so disgusting that nobody even wants
to think about it or even look hard at the evidence. Porn
is a no-win situation when it comes to the basic social
purpose of instilling law and order on networks.
I think you could make a pretty good case in
Tennessee that people in California are a bunch of
flakey perverted lunatics, but I also think that in
California you can make a pretty good case that people
from Tennessee are a bunch of hillbilly fundamentalist
wackos. You start playing off one community against
another, pretty soon you're out of the realm of criminal
law, and into the realm of trying to control people's
cultural behavior with a nightstick. There's not a lot to
be gained by this fight. You may intimidate a few
pornographers here and there, but you're also likely to
seriously infuriate a bunch of bystanders. It's not a fight
you can win, even if you win a case, or two cases, or ten
cases. People in California are never gonna behave in a
way that satisfies people in Tennessee. People in
California have more money and more power and more
influence than people in Tennessee. People in
California invented Hollywood and Silicon Valley, and
people in Tennessee invented ways to put smut labels on
rock and roll albums.
This is what Pat Buchanan and Newt Gingrich are
talking about when they talk about cultural war in
America. And this is what politically correct people talk
about when they launch eighteen harassment lawsuits
because some kid on some campus computer network
said something that some ultrafeminist radical found
demeaning. If I were a cop, I would be very careful of
looking like a pawn in some cultural warfare by
ambitious radical politicians. The country's infested
with zealots now, zealots to the left and right. A lot of
these people are fanatics motivated by fear and anger,
and they don't care two pins about public order, or the
people who maintain it and keep the peace in our
society. They don't give a damn about justice, they have
their own agendas. They'll seize on any chance they can
get to make the other side shut up and knuckle under.
They don't want a debate. They just want to crush their
enemies by whatever means necessary. If they can use
cops to do it, great! Cops are expendable.
There's another porn case that bugs me even more.
There's this guy in Oklahoma City who had a big FidoNet
bulletin board, and a storefront where he sold CD-
ROMs. Some of them, a few, were porn CD-ROMs. The
Oklahoma City police catch this local hacker kid and of
course he squeals like they always do, and he says don't
nail me, nail this other adult guy, he's a pornographer.
So off the police go to raid this guy's place of business,
and while they're at it they carry some minicams and
they broadcast their raid on that night's Oklahoma City
evening news. This was a really high-tech and
innovative thing to do, but it was also a really reckless
cowboy thing to do, because it left no political fallback
position. They were now utterly committed to crucifying
this guy, because otherwise it was too much of a political
embarrassment. They couldn't just shrug and say,
"Well we've just busted this guy for selling a few lousy
CD-ROMs that anybody in the country can mail-order
with impunity out of the back of a computer magazine."
They had to assemble a jury, with a couple of
fundamentalist ministers on it, and show the most rancid
graphic image files to the twelve good people and true.
And you know, sure enough it was judged in a court to be
pornography. I don't think there was much doubt that it
was pornography, and I don't doubt that any jury in
Oklahoma City would have called it pornography by the
local Oklahoma City community standards. This guy got
convicted. Lost the trial. Lost his business. Went to jail.
His wife sued for divorce. He lost custody of his kids.
He's a convict. His life is in ruins.
The hell of it, I don't think this guy was a
pornographer by any genuine definition. He had no
previous convictions. Never been in trouble, didn't have
a bad character. Had an honorable war record in
Vietnam. Paid his taxes. People who knew him
personally spoke very highly of him. He wasn't some
loony sleazebag. He was just a guy selling disks that
other people just like him sell all over the country,
without anyone blinking an eye. As far as I can figure it,
the Oklahoma City police and an Oklahoma prosecutor
skinned this guy and nailed his hide to the side of a barn,
just because they didn't want to look bad. I think a
serious injustice was done here.
I also think it was a terrible public relations move.
There's a magazine out called BOARDWATCH,
practically everybody who runs a bulletin board system
in this country reads it. When the editor of this
magazine heard about the outcome of this case, he
basically went nonlinear. He wrote this scorching furious
editorial berating the authorities. The Oklahoma City
prosecutor sent his little message all right, and it went
over the Oklahoma City evening news, and probably
made him look pretty good, locally, personally. But this
magazine sent a much bigger and much angrier
message, which went all over the country to a perfect
target computer-industry audience of BBS sysops. This
editor's message was that the Oklahoma City police are a
bunch of crazed no-neck gestapo, who don't know
nothing about nothing, and hate anybody who does. I
think that the genuine cause of computer law and order
was very much harmed by this case.
It seems to me that there are a couple of useful
lessons to be learned here. The first, of course, is don't
sell porn in Oklahoma City. And the second lesson is, if
your city's on an antiporn crusade and you're a cop, it's a
good idea to drop by the local porn outlets and openly
tell the merchants that porn is illegal. Tell them straight
out that you know they have some porn, and they'd
better knock it off. If they've got any sense, they'll take
this word from the wise and stop breaking the local
community standards forthwith. If they go on doing it,
well, presumably they're hardened porn merchants of
some kind, and when they get into trouble with
ambitious local prosecutors they'll have no one to blame
but themselves. Don't jump in headfirst with an agenda
and a videocam. Because it's real easy to wade hip deep
into a blaze of publicity, but it's real hard to wade back
out without getting the sticky stuff all over you.
Well, it's generally a thankless lot being an
American computer cop. You know this, I know this. I
even regret having to bring these matters up, though I
feel that I ought to, given the circumstances. I do,
however, see one large ray of light in the American
computer law enforcement scene, and that is the
behavior of computer cops in other countries. American
computer cops have had to suffer under the spotlights
because they were the first people in the world doing this
sort of activity. But now we're starting to see other law
enforcement people weighing in in other countries. To
judge by early indications, the situation's going to be a lot
worse overseas.
Italy, for instance. The Italian finance police
recently decided that everybody on FidoNet was a
software pirate, so they went out and seized somewhere
between fifty and a hundred bulletin boards. Accounts
are confused, not least because most of the accounts are
in Italian. Nothing much has appeared in the way of
charges or convictions, and there's been a lot of
anguished squawling from deeply alienated and
radicalized Italian computer people. Italy is a country
where entire political parties have been annihilated
because of endemic corruption and bribery scandals. A
country where organized crime shoots judges and blows
up churches with car bombs. They got a guy running the
country now who is basically Ted Turner in Italian drag --
he owns a bunch of television stations -- and here his
federal cops have gone out and busted a bunch of left-
wing bulletin board systems. It's not doing much good
for the software piracy problem and it's sure not helping
the local political situation. In Italy politics are so weird
that the Italian Communist Party has a national
reputation as the party of honest government. The
Communists hate the guts of this new Prime Minister,
and he's in bed with the neo-fascist ultra-right and a
bunch of local ethnic separatists who want to cut the
country in half. That's a very strange and volatile scene.
The hell of it is, in the long run I think the Italians
are going to turn out to be one of the better countries at
handling computer crime. Wait till we start hearing
from the Poles, the Romanians, the Chinese, the Serbs,
the Turks, the Pakistanis, the Saudis.
Here in America we're actually getting used to this
stuff, a little bit, sort of. We have a White House with its
own Internet address and its own World Wide Web
page. Owning and using a modem is fashionable in the
USA. American law enforcement agencies are
increasingly equipped with a clue. In Europe you have
computers all over the place, but they are imbedded in a
patchwork of PTTs and peculiar local jurisdictions and
even more peculiar and archaic local laws. I think the
chances of some social toxic reaction from computing
and telecommunications are much higher in Europe and
Asia than in the USA. I think that in a few more years,
American cops are going to earn a global reputation as
being very much on top of this stuff. I think there's a
fairly good chance that the various interested parties in
the USA can find some kind of workable accommodation
and common ground on most of the important social
issues. There won't be so much blundering around, not
so many unpleasant surprises, not so much panic and
hysteria.
As for the computer crime scene, I think it's pretty
likely that American computer crime is going to look
relatively low-key, compared to the eventual rise of ex-
Soviet computer crime, and Eastern European computer
crime, and Southeast Asian computer crime.
I'm a science fiction writer, and I like to speculate
about the future. I think American computer police are
going to have a hard row to hoe, because they are almost
always going to be the first in the world to catch hell from
these issues. Certain bad things are naturally going to
happen here first, because we're the people who are
inventing almost all the possibilities. But I also feel that
it's not very likely that bad things will reach their full
extremity of awfulness here. It's quite possible that
American computer police will make some really awful
mistakes, but I can almost guarantee that other people's
police will make mistakes worse by an order of
magnitude. American police may hit people with sticks,
but other people's police are going to hit people with
axes and cattle prods. Computers will probably help
people manage better in those countries where people
can actually manage. In countries that are falling apart,
overcrowded countries with degraded environments and
deep social problems, computers might well make things
fall apart even faster.
Countries that have offshore money-laundries are
gonna have offshore data laundries. Countries that now
have lousy oppressive governments and smart,
determined terrorist revolutionaries, are gonna have
lousy oppressive governments and smart determined
terrorist revolutionaries with computers. Not too long
after that, they're going to have tyrannical revolutionary
governments run by zealots with computers, and then
we're likely to see just how close to Big Brother a
government can really get. Dealing with these people is
going to be a big problem for us.
Other people have worse problems than we do, and I
suppose that's some comfort to us in a way. But we've
got our problems here, too. It's no use hiding from them.
Since 1980 the American prison population has risen by
one hundred and eighty eight percent. In 1993 we had
948,881 prisoners in federal or state correctional facilities.
I appreciate the hard work it took to put these nearly one
million people into American prisons, but you know, I
can't say that the knowledge that there are a million
people in prison in my country really makes me feel
much safer. Quite the contrary, really. Does it make
keeping public order easier when there are so many
people around with no future and no stake in the status
quo and nothing left to lose? I don't think it does.
We've got a governor's race in my state that's a
nasty piece of work -- the incumbent and the challenger
are practically wrestling in public for the privilege of
putting on a black hood and jabbing people with the
needle. That's not a pretty sight. I hear a lot about
vengeance and punishment lately, but I don't hear a lot
about justice. I hear a lot about rights and lawsuits, but I
don't hear a lot about debate and public goodwill and
public civility. I think it's past time in this country that
we stopped demonizing one another, and tried to see
each other as human beings and listen seriously to each
other. And personally, I think I've talked enough this
morning. It's time for me to listen to you guys for a while.
I confess that in my weaker moments I've had the
bad taste to become a journalist. But I didn't come here
to write anything about you, I've given that up for now.
I'm here as a citizen and an interested party. I was glad
to be invited to come here, because I was sure I'd learn
something that I ought to know. I appreciate your
patience and attention very much, and I hope you'll see
that I mean to return the favor. Thanks a lot.
~terry
Mon, Jul 27, 1998 (11:04)
#2
That was 1993, I wonder what we're up to now? There is way too much
mutual demonization, we need to be a more caring society, all the way
from the Special Prosecutors office adn the BOP down.
~KitchenManager
Mon, Jul 27, 1998 (23:09)
#3
damned good question...think you can talk Bruce into
popping in once a month with his current thoughts,
or for a brief q and a session?
think it'd help if I offered to bribe him with Italian food?
~terry
Tue, Jul 28, 1998 (08:59)
#4
That might help, email him at bruces@well.com with a bribe of Italian food!
~autumn
Tue, Jul 28, 1998 (08:59)
#5
My head is swimming! I had no knowledge of a "computer police."
~terry
Wed, Jul 29, 1998 (08:47)
#6
Bruce, by the way, is the audio on our main spring page these days. He's
talking about "dead media".
~terry
Mon, Feb 8, 1999 (20:32)
#7
From: Adam Penenberg
Feb. 8, 1999
Open letter to the hacking community:
Last week, Steve Silberman of Wired News called to tell me he and I and
some other journalists had been duped by a psuedo-hacker named Christian
Valor, AKA se7en. In April 1998, I"d posted a piece on the Forbes Digital
Tool web site about Valor"s kiddie porn vigilantism and the fact that law
enforcement knew what he was doing, but turned a blind eye. Cool story.
Too bad it turned out not to be true.
I was certainly in good company. Steve also had written about Valor"s
exploits, as had Newsday, the Independent in London, etc. Both Steve and
I
received letters from se7en's ex-girlfriend simultaneously last week, but
Steve got on to the story first. I was out of town. Sad to say, he and I
were the only ones to respond to her letter. I told Steve I wouldn't post
anything until his story hit. (See "Kid-Porn Vigilante Hacked Media
http://www.wired.com/news/news/culture/story/17775.html).
I can't comment on how the Steve or the Independent or Newsday conducted
their research, but I would like to share with all of you how I did mine,
and what went wrong. I"m sure there are lessons to be learned.
As you may or may not know, I am no stranger to taking on journalists I
think have concocted stories out of thin air. I broke the Stephen Glass
story, the associate editor of The New Republic who made up a story on
hackers and was later discovered to have made up some three dozen stories
for a number of well-known publications (See "Lies, damn lies and
fiction": http://www.forbes.com/tool/html/98/may/0511/otw3.htm). I also
took on Beth Piskora of The New York Post, who I believe made up a sexy
tech story on Organized Crime setting up phony companies for Y2K
remediation, who then, she claims, inserted software to divert money from
bank accounts (read: clients) to mob-controlled accounts. (See "Phantom
mobsters": http://www.forbes.com/tool/html/98/aug/0828/feat.htm). This
canard was picked up by Vanity Fair in a recent feature on Y2K. Vanity
Fair has yet to admit it published a lie.
I hate it when you nail a journalist and instead of coming clean, he or
she hides. This is what both Glass and Piskora have done. That's why I"m
writing this note.
For my story (Kiddie porn vigilante:
http://www.forbes.com/tool/html/98/apr/0417/feat.htm) I knew I couldn"t
get on IRC and traffic in kiddie porn on a Forbes computer. You remember
what happened to that journalist for NPR who did, and is now had to plead
guilty to a felony all because he was ostensibly researching a story? So
I
relied on law enforcement, EHAP, and NAMBLA. I called literally 10 law
enforcement officials who said they studied under Valor in one of his
security courses. On the record, they would all vouch for se7en"s hacking
skills. Off the record, they all said they knew what he was doing but
they
didn't care. Everyone hates kiddie porn traffickers.
I also talked to EHAP, and they told me they were distressed by se7en"s
actions, because it gave hackers a bad name. Se7en should turn them over
to the cops or the ISPs, they said, not break the law in going after
them.
They didn"t say he was a fraud.
I also contacted NAMBLA through its web site. I asked if anyone knew a
hacker named se7en, who was purportedly going after kiddie porn
traffickers on IRC. I received a cryptic response, something along the
lines of, "Yes, some of our members have been complaining about this guy.
We just want to be left alone." End of conversation. He refused to turn
over any other details.
So I felt confident that with all this cross-checking that Valor was who
he said he was. Obviously, I made a mistake. I think the most important
lesson I learned is that law enforcement doesn"t have a clue what really
goes on in hacking circles; they are not good sources for this. I also
now
won"t write a hacking story unless I can meet the hacker face-to-face and
actually see evidence that I can then verify with other hackers/or
computer security experts I trust. This is how I approached my story for
Forbes magazine on the NY Times hack that ran last fall (available online
at: (http://www.forbes.com/forbes/98/1116/6211132a.htm).
If you want to send me taunting email, telling me what a fool I was, feel
free. I"m at apenenberg@forbes.com. But you can"t possibly be harder on
me
than I"ve been on myself this past week. You live, you learn.
Sincerely,
Adam Penenberg
Senior Editor, Forbes Magazine
~KitchenManager
Thu, Feb 11, 1999 (17:56)
#8
excellent piece
~terry
Fri, Feb 12, 1999 (14:26)
#9
That was good.
~terry
Mon, Mar 8, 1999 (14:07)
#10
Bruce's party:
PARTY INVITATION. In totally informal conjunction with
the annual South By SouthWest Multimedia Festival, my wife
Nancy and I are throwing another Open House Party on the
evening of March 16th, Tuesday, starting, say, 7:30 pm or
so. If you're in Dead Media Project, please consider this
your formal invitation to attend. Bring anybody you
trust. There will be cold beer. And (even more
astonishing and provocative) there will be cigarettes.
If you've never been to my house before (once memorably
described by TIME magazine as "the leafy tranquillity of
Sterling's well-appointed Austin, Texas home"), send email
and I'll ship you the directions and a phone number.
Mind you, the SXSW Multimedia Party we threw last time was
not half shabby. These digital-arts people are
definitely a self-starting crowd. No Charades or Twister
was required to break the ice. Quite a good time was had
by all.
~terry
Thu, Jul 1, 1999 (12:23)
#11
There's a good article about writers lairs today in XL, where they
describe their environments, their habits and distractions. Anyone who's
been to a Bruce Sterling fete has probably meandered down the hall to his
home office and Bruce is one of the interviewees. Along with novelist
Sarah Bird, Robert Draper, Milly Ivins, screenwriter Bill Witliff
(Lonesome Dove), and playwright Jo Carol Pierce. I like Bruces quote on
Austin clothing style "it's not just that people here dress like slobs,
they dress aggressively like slobs" in response to the query on
"inspirational clothing."
Bill Witliff writes in O'Henry's old house.
(reference July 1 99 XLent)
~aschuth
Thu, Jul 1, 1999 (12:53)
#12
Terry, have you read Bruce's last book, Distraction ? He got off on the dress subject there big time...
So, do Austinites have a bad sense of dressing?
~terry
Thu, Jul 1, 1999 (13:05)
#13
I dress for total comfort, every day, even when I'm consulting at IBM.
Bruce is right. Austin is a total slacker dress environment. Lately,
I've been wearing either jeans and a free t shirt (one of many of
gotten at computer trade shows) or Columbia pants and shirts (Columbia
clothes are for total comfort, the pants are these zip apart
convert-to-swim trunks lightweight material and the shirts make you look
like you're either a photographer or on an expedition.
~aschuth
Thu, Jul 1, 1999 (13:30)
#14
Ho! The adventurous look!
~terry
Thu, Jul 1, 1999 (16:45)
#15
Yep, more the comfort look. I wear the most comfortable clothes I can
find. There are no dress codes at places of work in Austin, just about
anything goes. The only place I go that has a dress code is the Sports
Club (no tank tops or skin tight shorts, which I don't wear anyway).
~aschuth
Mon, Jul 5, 1999 (05:29)
#16
No shirt No shoes No Dice ?
~KitchenManager
Tue, Jul 6, 1999 (00:25)
#17
You talkin' to me?
(or is that just a friendly proposition?)
~aschuth
Thu, Jul 8, 1999 (06:22)
#18
So, you a sloppy (err, sorry, mark that: comfortable) dresser, too?
~KitchenManager
Fri, Jul 9, 1999 (02:52)
#19
most of the time...depends on the occasion...when
I temped at the State, I wore a tie every day...
~stacey
Fri, Jul 9, 1999 (11:17)
#20
woo woo!
i wanna see that!
~terry
Fri, Jul 9, 1999 (12:06)
#21
I can't remember the last time I wore a tie.
~stacey
Fri, Jul 9, 1999 (13:47)
#22
probably somewhere between bee pollen gathering and MagRabbiteering...
~terry
Sun, Jul 11, 1999 (03:27)
#23
I used to wear a tie at BPI, back in 1985.
~casanova
Sun, Jul 11, 1999 (10:01)
#24
is that a choice to shose betwwen a tie and t_shirt
~KitchenManager
Sun, Jul 11, 1999 (10:27)
#25
good question!
Good morning, Casanova, how are you today?
~MarciaH
Fri, Oct 29, 1999 (17:19)
#26
I devoutly hope there is an especially nasty place in the afterlife for those who hack into private information and use it as a threat to ruin lives. I have twice been the victim of this reprehensible activity and I would happily watch some malicious endeavor enacted on those who requested it and for those who did it. My deepest loathing is reserved for them.
I am happy you are comfortable in Austin...we dress like that out here, as well.
However, I will do just about anything for a man considerate enough to wear a tie for me. There have been none in my life in the last 20 years...perhaps I am not worth the effort...
~Irishprincess
Fri, Oct 29, 1999 (17:56)
#27
Hear, hear! That's as tasteless and outright wrong as snooping through someone's personal effects. I'm sure computer hackers are the same people who come to your house, go to the bathroom, and look through your medicine cabinet, helping themselves to whatever they think they might need!
~MarciaH
Fri, Oct 29, 1999 (18:47)
#28
...or whatever they can hold you hostage to return while keeping just enough for them selves that you are never free of the scumbags (the most polite term I can think of at the moment). Thanks, Amy!
~terry
Fri, Oct 29, 1999 (19:54)
#29
I just think men are getting away from constrictive ties and we're moving
to a more casual dress code. It may not be disrespect or lack of
attentiveness to you. Not having to wear a tie to work is becoming a sign
of indendence and freedom, especially in the high tech startups. And I
can also see where if it made you happy that a guy with you would want to
wear a tie just to make you feel good. If that's what does it for you!
~Irishprincess
Fri, Oct 29, 1999 (20:06)
#30
I like ties on men, as long as they're not too short or have gravy dribbled down the front! I know I prefer myself dressed up, and so I also prefer men dressed up. Rebelling against my redneck, "wearing a shirt without holes in it is dressed up" childhood, I guess!
~MarciaH
Fri, Oct 29, 1999 (20:53)
#31
Terry, is it really too much to expect when I am attired in the best I have to wear as he wishes to show me off as his jewel, that he dress accordingly? No matter whether it is to a symphony concert or an academic reception - he dresses the same - aloha shirt, which is appropriate for just about anything BUT a formal setting. Just once in a while...maybe even just once a year...but some time in the 15+ years he has been around!
~MarciaH
Fri, Oct 29, 1999 (20:54)
#32
...and, yes! That REALLY does it for me...!
~Irishprincess
Fri, Oct 29, 1999 (20:58)
#33
Ah, some men are hopeless--my dad didn't even wear a tie to my college graduation!
~MarciaH
Fri, Oct 29, 1999 (21:11)
#34
Well, someone suggested I bury him in one. Heck no! If he won't put it on, I sure am not going to do it for him. What good is it anyway when he is dead?!
~Irishprincess
Fri, Oct 29, 1999 (21:33)
#35
He'd probably come back and haunt you if you did! *giggle*
~MarciaH
Fri, Oct 29, 1999 (23:29)
#36
Probably...just to be irritating...! *lol*
~terry
Sat, Oct 30, 1999 (04:31)
#37
Oh sure, if you get that dudded up he should wear a tie. Ties are really
going away as work attire. It would probably put you at a disadvantage to
show up for an interview with a tech company in Austin wearing a tie.
~MarciaH
Sat, Oct 30, 1999 (12:12)
#38
I understand that. Same with geology jobs in California. A neat sports shirt and tailored slacks is fine unless they are meeting in the field, in which case it is hiking boots, jeans and appropriate shirt. I even like turtleneck and sports jacket for evening, but...maybe in another life time I'll get one who understands what is appropriate dress for special occasions.
~Isabel
Mon, Nov 1, 1999 (09:10)
#39
Maybe you should tell him that he looks more distinguished, impressive or authoritarian in a tuxedo - this may help if he loves pedestals so much as you mentioned before...( or that it makes him look ten years younger and is impressing the girls �grin�)
~aschuth
Mon, Nov 1, 1999 (11:12)
#40
(hehe)
~MarciaH
Mon, Nov 1, 1999 (13:19)
#41
Tuxedos? You gotta be kidding...though his vanity might be nudged by the idea of enticing girls with a tie. Perhaps his tielessness is just another mark against him as I weigh the pros and cons of his continued existance in my world.
Pathetically, the man is clueless even when I draw him a picture - he just tells me to go take something and to calm down. I will die of pill poisioning soon!
~MarciaH
Mon, Nov 1, 1999 (13:20)
#42
However, the next guy I see who is wearing one, I am ripping open my bodice and letting him have his way with me...
(sounds good but I could never go through with it..)
~Irishprincess
Mon, Nov 1, 1999 (16:07)
#43
*snicker*
~Isabel
Tue, Nov 2, 1999 (10:07)
#44
Why not? :-D
~MarciaH
Tue, Nov 2, 1999 (10:54)
#45
...'cause I am basically chicken... but it does sound like such a good idea. They are very few and far between out here in the humidity and heat. Perhaps I should just settle for academic regalia...with the tie and dress shirt beneath, but I did that once, and clothes did NOT make the man...and if it were not for hackers I just might know what ones looks like who is especially choice anyway by now.
~Irishprincess
Tue, Nov 2, 1999 (12:45)
#46
Hmm...I wonder...
Who is Bruce Sterling, anyhow? It reminds me of Remington Steele.
~MarciaH
Tue, Nov 2, 1999 (13:04)
#47
Beats me - Bruce Willis-Rod Serling cross? Terry will know, though! (If you read the intro to this topic (up there before the first post) it will tell you more about this man.
~aschuth
Tue, Nov 2, 1999 (14:40)
#48
Bruce Sterling, journalist and established novelist, Austin. Two kids, married. Will found ecological movement "Viridianism" on Jan 3rd 2000.
See topic on Viridianism in Environment conf, and the Dead Media topic - another pet subject of his - in Media.
Best known as co-founder of the cyberpunk-genre in Sci-Fi (along with William Gibson and others), he wrote his Hacker Crackdown after Austin's Steve Jackson Games have been raided by justice forces. This book describes all that lead to the raid, the whole hacker-scenes, certain cases. The important part is, the book was very early (1991 or 92), and showed the side of the hackers, telcos, police and federal agents. Entirely non-fictional, and good to read.
~MarciaH
Fri, Nov 5, 1999 (15:09)
#49
If there were any lawsuits involved perhaps I can take notes. I am going to personally emasculate the guy who has caused me so much grief in this area and hit him where he thinks he lives...(anger and indignation unabated and not forgiven nor forgotten!)
~Irishprincess
Fri, Nov 5, 1999 (16:35)
#50
Go get 'em, Marcia!
~MarciaH
Fri, Nov 5, 1999 (17:23)
#51
...froth...froth...! Hope they do not have rabies injections. I need all of this anger to work for me when I kick the miserable man out of my life!
~MarciaH
Fri, Nov 5, 1999 (17:25)
#52
I am a nice lady, actually...but I have been pushed too far for too long, and this time the enormous rug rat in the other room has overstepped his bounds.
~Irishprincess
Fri, Nov 5, 1999 (18:33)
#53
Kick him to the curb! (Just kidding--I was pretending I was on a talk show.)