Slashdot Log In
Charges Against High School Hackers Dropped
Posted by
CowboyNeal
on Fri Sep 02, 2005 02:35 AM
from the coming-to-senses dept.
from the coming-to-senses dept.
ZosX writes "According to eSchool News Online, the 13 students from Kutztown, PA originally charged with felonies for hacking have been given a deal, dropping charges in exchange for 15 hours of community service. From the article: 'The probation department realizes this is small potatoes,' said William Bispels, an attorney representing nearly half the accused students. This is great news for the students and their families."
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Unfair! (Score:5, Funny)
Lame.
Re:Unfair! (Score:5, Informative)
Some students did some minor hacking after the passwords were changed, but that still didn't amount to much more than executing "hacks" that were readily available on the internet, more akin to the work of a script kiddie than a hacker.
Parent
Re:Unfair! (Score:5, Informative)
Does this somehow reduce the significance of the crime, or was it just an aside you were adding?
When I first read about this case, I thought the school was justified. When I found out that the passwords were taped to the machines, I changed my mind. When I found out that later, there was indeed "hacking", I changed my mind again. The students broke the law--the very same law that protects you from having to worry about unauthorized computer access.
Parent
Re:Unfair! (Score:3, Insightful)
The internet doesn't just stop with lines on a map - I get hundreds of dictionary attacks on a daily basis - I don't care where they come from, I don't much care that they even occur (though obviously it'd be nice if they didn't) - the ones that are successful are the problem.
Re:Unfair! (Score:4, Insightful)
The hacking methods they used were not something the suppliers of the system could not have stopped. They left some easily exploitable holes in there whereas they shouldn't have. They also continued to use that very same password on most systems, even on "fixed" compromised laptops and even after pretty much everybody knew about it.
I do think they should be punished for their deeds (which they are), it is however no excuse for the gross negligence of the system admins, who basically did next to nothing to prevent, or indeed assist in, hacking. They should have expected children (yes, children; who cannot enter legal contract because they are not considered responsible enough) to play with the toys they are given. They gave these children a half-working toy and pretty much told them "do not try to play with the other half, even though it's a lot more fun" and ignorantly expected them to comply.
Parent
Re:Unfair! (Score:5, Insightful)
Considering that they were charged with a felony for what essentially amounts to youthful mischief, I'd say that the significance of the crime is pretty minor relative to what they were charged with. No person or property was damaged in any way.
Yeah -- those kids really do deserve punishment. I'd think that 3 weeks of detention, possibly even in-school suspension would be an appropriate action. I'm still baffled by how this all adds up to a felony charge. The students didn't break anything, they didn't access sensitive data, and they didn't disrupt anything. The fact is that this is a mostly harmless crime. I'd want more severe punishment for the kid who uses a sharpie to tag all over my neighborhood. If these kids were convicted of a felony, it would have ruined their lives. Convicted felons don't tend to get jobs, and often resort to crime as its the only way to make a living. Let's save the felony charges for those who are truly harmful and disruptive.
I hope that maybe some day if you or I ever slip up and are caught commiting a minor or victimless crime, neither of us have to experience heavy handed tactics of making an example of someone.
Oh, and with regards to your mention of the students breaking the "very same law that protects you from having to worry about unauthorized computer access." It does absolutely nothing of the sort. If I didn't worry about unauthorized computer access, I'd be out of a job. Unreasonably stiff penalties do not make the world a safe place.
Parent
Re:Unfair! (Score:5, Insightful)
Now all along the computer department was monitoring for these infractions and dozens of students were reprimanded and punished for their curiosity. Detentions and in-school suspensions were handed to kids by their homeroom teachers, often with no face-to-face with the disciplinarians. This was hardly a deterrent, though, as the kids were able to take their laptops and play video games during their "punishment."
They were handing out the sorts of punishments you suggested. Perhaps not for the length of time you suggest, but it's not like they just saw a problem and said, "FELONY!"
Some laptops were temporarily confiscated for long enough to have them cleansed and returned to their original configuration with a new password. Yet the laptops were still not secure. On several occasions the laptops were returned with the old password still intact. And then the kids learned how to turn off and or limit the administration's ability to spy on what they were doing on their laptops.
Here we see that the students must have known that what they were doing was not authorized. The notebooks were confiscated long enough to undo the damage and change the admin password. From this point on, the students who had their laptop's password changed had to actively seek out a way to get admin access again. There is no way they didn't know, at this point, that what they were doing was "wrong".
Now, you suggest that these children, if convicted of felonies, would have their lives totally destroyed. In many states (including Penn.) this is not the case. A person may request that their juvenile record be expunged, under certain situations: ahref=http://www.jlc.org/home/mediacenter/factshee ts/FAQPAJJ.html%23exprel=url2html-4701 [slashdot.org]http://www.j lc.org/home/mediacenter/factsheets/FAQPAJJ.html#ex p>
Now, many people are going to come back and say that the school screwed up, too. They did. I'll even provide a few examples up front.
1) They only targetted 13 kids. I have no idea whether these 13 had cracked the password after it was changed. For the sake of argument, I'm going to assume they did (if they did not, the school was definitely way out of line).
2) They failed to notify the parents, either of the offenses themselves or of the severity of the offenses.
3) They allowed the use of the laptops during detention, and had no contingency for removing a student from the program. I suspect that there is more to the story than "Some kids who had trouble resisting temptation tried to turn in their laptops and were forced by the administration to take them back." but for the sake of argument, we'll take that as accurate.
4) They monitored student activity in the first place. I do think that there is a reasonable level of monitoring that can occur when leasing or loaning out hardware, especially if notification of the monitoring is given up front (which it was, in this case, to the student but not the parent, apparently). But I still don't particularly like it, and there are distinct privacy implications considering these were minors.
5) They didn't secure the computers properly.
The only one of the above which reduces the culpability of the students is #3. If the student was actually trying to get rid of the temptation by getting rid of the program, they should have allowed that. Of course, we don't know if any of the 13 tried to give up the laptops, which would make the point moot.
And for the record, I agree with you on making an example of people. I think it's inappropriate and a mockery of the jusice^Wlegal system. But, rather than not prosecuting any of the kids, they should have prosecuted all of t
Parent
Re:Unfair! (Score:5, Funny)
Parent
Re:Unfair! (Score:3, Funny)
Zero Cool: "Back in my day, we didnt have physical access to the computer with the password taped on the back. No, we hacked the gibson from payphones with our 28.8 modems and pentium 1's, and we liked it!"
Either that, or he'd be too busy with Acid Burn. My god, have you seen her lately?
Re:Unfair! (Score:5, Insightful)
The kids repeatedly violated guidelines that were put in place by people with the authority to put those guidelines there. Regardless of whether the measures used to enforce those guidelines were sufficient to deter activity simply by the strength of the restraints or not is unimportant. I can drive my car over the dotted yellow line in the road too if I want, and I can make my car go above the speed limit; that doesn't make it the state's fault when I careen through oncoming traffic at 120 mph.
Obviously the early traditional reprimands failed to make an impact on the students. What they needed was a good scare, and I think this is what they got. Settling on 15 hours of community service each kid doesn't sound like the prosecuting attorney(ies) ever really intended to send these kids to jail, it sounds to me like they wanted to make the kids fully aware that when you choose to violate guidelines, there are consequences (at least when you're caught, especially when you're flagrant in the actions). And I doubt, when faced with the prospect of jail time, that any of these kids failed to get that message.
Further, the message was probably received by more than just the kids involved, it was probably received by many other kids in the same district, and in surrounding districts.
Parent
Re:Unfair! (Score:4, Insightful)
You also seem to believe that this was the plan all along. Give them a good scare, then end up giving them 15 hours of community service. Yeah right. I am sure the worldwide media attention this case received had plenty to do with the appropriate punishment they did end up getting (as opposed to the ridiculous crime they were charged with). Call me cynical, but I don't believe it was the plan at all. It just ended up to be the only way out the authorities got themselves into without sounding like they completely caved in to the negative media attention.
And lastly, I have a problem with you comparing this case with dangerous driving. Speeding and moving into the incoming traffic has real physical, possibly deadly, dangers to you and to others on the road. Need I say more, really? changing the admin password on the computer they carry with them all day long so that they can browse the net without the filter, or the damage-less little prank they played with a teacher is totally benign, and the punishment needed to fit the "crime". But really, what should happen is getting these policies that made such an infractions a crime to begin with re-examined.
Parent
Re:Unfair! (Score:4, Insightful)
Let's see...they can't get a credit card, get married, drink alcohol, drive a car (in many states), or live independantly without a lengthy legal emanicpation proceeding. So -- which is it? Are they capable of rational thinking or not? It's a bit of double talk that they have all the responsibilites of an adult, with none of the privileges. Even putting this aside, I still don't think that it makes any sense at all to over react to a minor crime, where there was no personal or property damage. These intentionally heavy-handed tactics of making an example of someone have been used for quite some time, and they don't work. They just destroy lives. In this case, the punishment doesn't fit the crime. IMO, what they did is akin to spitting on the sidewalk.
As far as your black-and-white law and order stuff goes, I have a feeling that you've ever been acquainted with our criminal justice system in any way. Go work in corrections for a while (just about any area), gain a minimally basic understanding of the other side of our criminal justice system. Perhaps with a tiny bit of perspective, you will have a difficult time spouting your black-and-white justice BS.
Finally, your earlier example of driving on the centerline at high speed is called reckleess endangerment, and is not a victimless crime. It is a felony. Your analogy makes an inappropriate comparison.
Parent
Re:Unfair! (Score:3, Insightful)
These kids will have their lives ruined by this if they ever want to do anything in IT requiring any sort of security, i have held jobs which required a police background check where any form of hacking (and several other things) no matter how small would have prevented me from being employed.
Thank god my school decided to punish me by requiring that I assisted the IT administrator for 1 hour e
Let's all register at random hick sites (Score:3, Insightful)
Good news? (Score:4, Insightful)
Good news would be the principal and any police involved in this over-reaction getting an official reprimand.
Re:Good news? (Score:5, Insightful)
you never escape it. I strongly suggest becoming extremely adept at social engineering, it will get you out of many situations. Anyone who is really good with any technology today must be a really good social engineer to disguise the fact or to calm those around you.
and when you potentially run afoul of the law it works great. and officer on his way walking to you to give you crap or possibly arrest you will not do so if the first words out of your mouth are " Officer! I am so glad you are here! can you help me?" if you make the officer think that he is your savoir then he will ignore lots of things to help stroke his ego. Tresspassing? you will be politely told "you know this is a restricted area?" instead of being dragged off screaming by barney fife wanna-be.
Same goes for school admins, college admins and managers and upper managers at work. none of them will EVER understand technology and you are extremely scary because you know technology.
Is this fair? no. but it's life. Ask any minority that is persecuted and they will tell you the same thing. you are frightening to them, they see you as dangerous, and they want to keep you under control.
Parent
At least the tags will be gone... (Score:4, Insightful)
No Registration Required (Score:5, Informative)
In meetings with students over the last several days, the Berks County, Pa., juvenile probation office has quietly offered the students a deal in which all charges would be dropped in exchange for 15 hours of community service, a letter of apology, a class on personal responsibility, and a few months of probation.
"The probation department realizes this is small potatoes," said William Bispels, an attorney representing nearly half the accused students.
The 13 initially were charged with computer trespass and computer theft, both felonies, and could have faced a wide range of sanctions, including juvenile detention.
The Kutztown Area School District said it reported the students to police only after detentions, suspensions, and other punishments failed to deter them from breaking school rules governing computer usage. (See "Felony charges for computer-abusing kids [eschoolnews.com].")
But the students, their families, and outraged supporters around the nation said that authorities overreacted, punishing the kids not for any horrible behavior but because they outsmarted the district's technology workers.
The trouble began last fall after the school district issued some 600 Apple iBook laptops to every student at the high school, about 50 miles northwest of Philadelphia.
Students easily breached security and began downloading forbidden internet programs, such as the popular iChat instant-messaging tool. Some students also turned off a remote monitoring function that let administrators see what students were viewing on their screens--or used the monitoring function to view administrators' own computer screens.
School district officials and prosecutors did not return phone messages left Aug. 25 and had not been heard from by press time.
In legal terms, the students have been offered an "informal adjustment"--the least severe form of punishment.
Bispels said a few students are thinking about refusing the deal because they don't feel they have broken any laws. "A lot of these parents would like to fight this on principle, but it's hard to put the kids at risk on principle," he said.
Mike Boland, who represents one student, said his client likely will accept the offer. "It doesn't require my client to acknowledge he is guilty of anything," he said.
"It's about as mild as you can go," agreed James Shrawder, whose 15-year-old nephew was among those offered the deal. "It's more of a face-saving measure."
One student who has had prior dealings with the juvenile probation office was not offered a deal. That case is expected to proceed.
Links:
Students' web site
http://www.cutusabreak.org [cutusabreak.org]
Kutztown Area School District's response
http://www.kasd.org/districtinfo/kasdPressrelease
Re:No Registration Required (Score:3, Funny)
Re:No Registration Required (Score:5, Insightful)
Parent
Not merely that it's small potatoes. . . (Score:5, Insightful)
Not to mention how silly they look.
KFG
I hope they don't take the deal (Score:5, Interesting)
Re:I hope they don't take the deal (Score:3, Insightful)
what these kids committed was NOT a felony, but it did BREAK school rules/policies. It may be true that
I was asked to hack (Score:5, Interesting)
Re:I was asked to hack (Score:3, Insightful)
HA (Score:3, Funny)
They started to get worried when I told them how easy it was to crash the University ATM machines. Of cource I got caught as I was cocky like most young kids. They set up a stink ( rather funny thinking about it now). They told me that I was the biggest ever threat to the University ever ( I felt proud ). Ah well I went away and got my computers degree elsewhere.
Small potatoes == felony? (Score:5, Insightful)
Give a kid something he's not supposed to get into, and he'll try to get into it. Period. Be stupid about it, and he will get into it.
Re:Small potatoes == felony? (Score:4, Interesting)
And this is the problem with the way the US legal system is going. Murder by a juvenille becomes a death penalty offence, and hey look another felony should have them tried as an adult and another.... etc etc etc until we have 12 year olds being tried for fraud because they lied to their parents about tidying their room to get their pocket money.
Its a more fundamental question than small potatoes, its about whether its right to EVER try juvenilles as adults.
Parent
Corporate IT vs Employees (Score:5, Insightful)
Corporate IT departments erect all kinds of barriers for users to use certain applications and generally don't explain why these barriers are there. The most common answer I have gotten was: "Security". ICT-security is in my jobtitle and I know these guys were bullshitting me. Other things you hear are maintence, complexity or my favourite one: "It is our policy" and "The department heads agreed on this".
This is a battle that has gone on ever since we started with computers in the workplace. Invariably the result was that people worked around the ivory tower that controlled IT and got what they wanted some way or another (PC's got bought on office supplies budgets in the early eighties, they were forbidden by the high priests of mainframes) Invariably after prolonged fights the users win.
I currently see the following problems around me, where corporate IT erects barries, that people go around. In most cases corporate IT should enable it in such a way it is safe, or explain very well why it is not allowed at the moment, or at all:
- Banning of Instant Messaging
- Filtering of websites beyond porn
- Banning any Palm-like device, except the corporate one.
- disabling USB ports.
- disabling Wifi
- banning alternative browsers and all kinds of utilities.
- limiting the size of mailboxes
- disallowing or crippling desktop search
- disallowing or crippling streaming media
- Creating lengthy processes for getting new software on your desktop
Re:Corporate IT vs Employees (Score:3, Insightful)
Really, it doesn't matter what the users want. An IT manager should *care* what they want, and form p
Backing down gracefully..... (Score:4, Interesting)
Overall, not a bad out come. But, it does leave it as an open question whether or not the school district will every try something like this again.
Lucky fucking kids (Score:5, Interesting)
You know, this is such absolute bullshit.
Several years ago (I think '99) I was in an optional school activity that fixed computers and made sure the school network worked etc.. There was one particular trouble computer where apparently students snuck on and installed a whole bunch of nasty stuff. One of the other guys that did this with me installed Back Orifice on it to monitor it (remember, those were the days when it was popular). One day he asked me to go on the linux box and check on that computer (I watched him do it plenty of times, so i knew how). At this point, the head of the computer group came around and saw bo2k. Oooh boy was he pissed. Since this was the time of people using bo2k as a virus, he instantly thought it was.
I told him that I was just checking it for the other guy but when he asked him he knew nothing about it and wondered why there was a virus on the linux box. Fuck.
I got kicked off the computer group, got a total of abut 25 hours of detention cleaning desks, and my parents got to pay the equivalent of about $200 in "damages". And no, I did NOT make slashdot with this.
My comments, and link to article (Score:4, Interesting)
http://www.mcall.com/news/local/all-b4_5kutztown-
Mike Boland, who represents one student, said his client probably will accept the offer. ''It doesn't require my client to acknowledge he is guilty of anything,'' he said.
International view. (Score:5, Insightful)
The general consensus is that the authorities in the US have become too strict, especially with "intellectual property", "the war on drugs", and "computer crimes".
They are basically making themselves a laughing stock internationally - the Canadian public doesn't seem impressed by what the current US adminsitration is doing, or how they are handling these issues.Things like this would not happen in any other industrial, civilized G7 democracy, like Canada for example.
It's quite shocking that the authorities are punishing students for using passwords - that they were given!DAMMIT MODS (Score:4, Insightful)
And just because he said he's Canadian it's modded flamebait! I hate to break it to you, but this is a real problem is the USA, and it isn't a problem in most of the rest of the western world. So instead of silencing those who criticize you, perhaps you should let them speak, so that the situation may be improved?
If this were only one incident, I wouldn't bother to post this, but I'm fed up with americans sticking their heads in the sand and telling those trying to educate them to piss off.
Nice example: the Europeans who wrote letters before the last elections, arguing why people shouldn't vote for Bush. Guess what happened? The reaction was: piss off I'm not gonna let you tell me what to vote. Not an unnatural reaction, really, but it's very sad considering how ignorant many Americans are about the rest of the world. So here the rest of the world comes and tries to educate them, and their arguments aren't even considered. Now that's ignorant and smug about it!
Parent
Re:DAMMIT MODS (Score:3, Interesting)
Then you haven't been paying attention. As an Aussie, I'll give you at least one example:''
Yes, that's Australia. Note that I said "most of the rest of the western world". I was specifically thinking about Australia when I wrote that.
``That said, the OP *is* flamebait, and your post isn't any better.''
I agree that my post isn't any better than the original, but I don't agre
Mods? Hello? (Score:4, Interesting)
The teacher thought it was great, we all had a good laugh, he even wanted to have a look at the source for our little tool. Now, we did admit to the teacher we did this however, because there wasn't an environment of fear about going to jail for basicly a simple prank.
Had that been the case for these students the state might actually have had a case and gone to trial with it.
Parent
Hmmm.... (Score:4, Insightful)
Re:Hmmm.... (Score:3, Insightful)
LInk to the student's site (Score:4, Insightful)
sad... (Score:3, Interesting)
the sad thing is the school management and even some it departments are very naive about their computer security. i recently ALMOST got suspended from school from using batch files to start word, internet explorer, or excel! (they believe batch files constitute as a hacking tool/device that can compromise network security).
ideally, IT staff should be trained properlly and understand that security is only as good as the person enforcing it. if school network security is bad, then perhaps they should hire better people. this is because i recently got the admin password of the local computer taking about 15 minutes (1) boot usb key 2) copy sam file from hdd to usb 3) use saminside to generate pwdump file of sam hashes 4) pass the pwdump file to l0phtcrack which passes the hash through a rainbow table - the password was 6chars long with 1 number!?) - the IT staff were so naive to have the network and local computer pass the same, and allowing booting to usb key.
in the ideal world, school network security would be standardized and out-sourced to higher-skilled people.
these kids should be commended for proving how in-effective school network security is.
Re:sad... (Score:5, Insightful)
A word of advice from somebody a lot older: save this kind of stuff for your own systems. If you want to get involved with sysadmin stuff then you should start by gaining the trust of the people who run your school systems.
I can see that you are talented, but your admin people are just going to come down on you for it.
Oh, and don't brag about your accomplishments, even as AC. Word gets around. Remember the really smart people keep this kind of information to themselves.
Parent
Outrageous (Score:5, Interesting)
15 hours of community service, a letter of apology, a class on personal responsibility, and a few months of probation.
A letter of apology? That I'm sighted, not dumb, and would like to use convenient technology to stay in touch with my friends?
And what is this from one of the defendant attorneys:
Mike Boland, who represents one student, said his client likely will accept the offer. "It doesn't require my client to acknowledge he is guilty of anything," he said.
I'd say a letter of apology counts as acknowledging guilt, at least in my books!
If you keep track of Paul Graham's essays (try http://store.yahoo.com/paulgraham/nerds.html [yahoo.com]), you will probably recognize this as a glowing example of the holding pen analogy he uses vis-a-vis present day school system. I'm apalled that the most important thing that these bright kids are impressioned with is 'Obey the Thought Police'!
So...they did not have the right to read? (Score:5, Interesting)
Student Story:
Right to Read:
Don't take the deal (Score:5, Insightful)
However after all of that came to an end, I was still treated by the school staff as some sort of hacker. Many openly expressed their distrust of me around their computers. Whenever ANYTHING ever went wrong with the computer system I was the first person they blamed. Now I was also the one they always turned to for a fix to their problem. Still I had to put up with all that grief just because my parents elected to take the deal.
Moral of the story, if you're innocent then don't agree to any deal where blame can still be associated with you. If you're innocent then make damned certani everyone knows it.
My letter of apology. (Score:5, Insightful)
I'm sorry that your network admin staff is completely braindead.
I'm sorry that the ADMIN passwords were taped to the back of the laptops by what must have been the single most stupid person on the planet.
I'm sorry that likely the only thing anyone learned out of this is that 13 kids "broke in to the schools computers".
I'm sorry that noone will ever think to FIRE the dumbass who taped the passwords to the back of the computers.
I'm sorry that I had to write this.
Pleas and felonies (Score:4, Insightful)
Felonies are meant to be serious crimes like "aggravated assault, arson, burglary, murder, and rape" [wikipedia.org] and not minor infractions like what the "Kutztown 13" possibly did. Almost 95% of felony charges result in a guilty conviction via a plea agreement [pbs.org]. It's rather disgusting.
IMO the only reason the "Kutztown 13" got off without a conviction is because of the multitude of complaints generated by the Internet and not out of any "common sense" of any prosecutor. The criminal justice in the US is like a giant meat grinder where the innocent and guilty get ground up together and spit out the other end. "Justice" is rarely a factor.
Re:They are not bright kids. (Score:4, Funny)
Parent
Re:Where is the line ? (Score:3, Insightful)
example:
My freshman year we were using Windows 95 boxen in typing class. I came in one day and saw that Napster and AOL havd been installed and were running - I didnot hae the permission to kill the app or remove the program - because I would not hack the pathetic security, so I told the teacher and filled her in on what it was. 10 min later the IT person came in and deleted the SHORTCUTS freom the
Re:Where is the line ? (Score:4, Interesting)
How about this scenario:
You give a friend permission to sleep on your couch. However, they are only allowed to do it between the hours of 9 and 5 and they are only allowed to sleep on the couch. You come home at 6 o'clock and find them sitting on the couch, in breach of all your rules. So you charge them with trespass.
These children were given laptops by an education institution that their parents were funding. The school would not let them get an education without these laptops. These laptops reported everything the students did back to the school administration, and they were forced to use them. They disabled the surveillance software.
After that, they did a number of different things. But that's not hugely important, because that's not what they're being charged for. They are being charged for stopping a computer, paid for by their parents, that they were forced to use in order to get an education that was theirs by rights, spying on them.
How exactly is that equivelant to stealing a wallet, breaking and entering or rape?
Parent