🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Thread View: comp.org.eff.news
2 messages
2 total messages Started by Mike Godwin Wed, 05 Sep 1990 11:14
Steve Jackson Games seizure and other matters
#24
Author: Mike Godwin
Date: Wed, 05 Sep 1990 11:14
96 lines
5111 bytes
Gene Spafford writes:

>There is no evidence that the SJG system was confiscated "just because
>they publish a Cyberpunk role-playing game."  (Of course, there has
>been no evidence that that was not the reason, either.)  If you are
>going to be objective and fair about this, you can say "it APPEARS to ME
>that the system was confiscated because...."

Well, we *are* fortunate enough to know for certain that some law
enforcement agents believed the game was a handbook for computer 
crime. I've known Steve Jackson for years; his account of conversations
he had with the Secret Service when he tried to get the game manuscript
back is far more frightening even than his account of the Secret Service's
search and shut-down of his office.

I find it hard to believe, however, that when the warrant becomes
unsealed, and it becomes apparent that there was no reason to regard
GURPS Cyberpunk as a handbook for computer crime (it contains less
useful hacker-type information even than Clifford Stoll's CUCKOO'S
EGG, as Gene would already know if he had bothered to look at the game),
Gene will go so far as to admit that the government overreacted.

Spafford also writes:

>Three key things about this one incident (and related) that should be
>considered before making statements about such seizures:
>
>    1)  The presentations made to the judges leading to the issue of 
>    search warrants have often been sealed.  Therefore, it is not clear why
>    the agencies involved felt they needed to confiscate the systems (and
>    why the judge went along with them).

Gene, it is perfectly clear why the judge "went along with them"; as is
common knowledge to those who study criminal law and procedure,
the magistrate who reviews an application for a search warrant is making
a determination of whether the application meets the formal requirements
of such a warrant. That is, the magistrate looks to see whether probable
cause has been properly *alleged*, not at whether there actually *is*
probable cause for the search.

I hope you are not under the impression that magistrate review of 
the search-warrant application is any more of a filter of frivolous
or misguided prosecutions than the grand jury is.

>    2)  The law enforcement people involved have not (and in most cases
>    cannot, because the cases are still pending) make public statements
>    about the facts of these cases.

On the other hand, as I noted above, they did make statements to 
Steve Jackson, who can be trusted to give an accurate account of his
conversations.

>    3)  It often takes many months to do a thorough analysis of
>    confiscated equipment, gather further evidence, and present an
>    indictment.

Right. And, in the meantime, what happens to Steve Jackson and his
company, which were never the targets of the investigation? Does he
even have a remedy? At this point, it seems unclear, but I suspect
he will find it difficult to recover from the government for his losses
given the immunity provisions of the Federal Tort Claims Act.

Moreover, what about the chilling effect on lawful associations such
damaging seizures have? Steve Jackson's only offense seems to have 
been his association with a retired hacker who helped author a 
roleplaying game. Jackson is, in effect, being punished for his association,
which is lawful in itself. And what does the Steve Jackson Games
incident (which also involved seizure of the company BBS) tell other
law-abiding people about the respect the government gives to the
First Amendment-guaranteed right of freedom of association (see
NAACP v. Alabama, 1958)? How many Unix system and BBS operators
have limited or eliminated public access to their systems in the
fear of such evidentiary seizures? (Hint: several.)

Finally, I have to admit that I was suckered in by you, Gene, in an
earlier exchange. When you asked me about the hypothetical newsletter
that published my credit-card number and urged people to commit 
credit-card fraud, I gamely defended such a hypothetical entity,
applying some standard Constitutional Law principles.

Then I realized that this is how you want to characterize PHRACK.
I've read bunches of issues of PHRACK, however, and I have yet
to see a single credit-card number published there. Do you suppose
Craig Neidorf should sue you for libel?   :-)




--Mike



Mike Godwin, UT Law School  |    "We need a new cosmology.
mnemonic@ccwf.cc.utexas.edu |     New Gods. New Sacraments. 
(512) 346-4190              |     Another drink."
                            |          --Patti Smith
What the SJG Cyberpunk Manual Can Teach *YOU*!
#67
Author: Glenn S. Tenney
Date: Tue, 25 Sep 1990 23:06
96 lines
4166 bytes

I put this together when the GURPS Cyberpunk (or Cyberbunk, as some
news stories have called it) manual first came out:

--- cut here ---

Subject: Hacking/Phreaking/Cracking tips from the GURPS Cyberpunk manual

Well, I rushed out and bought GURPS Cyberpunk, in the hopes that my
money will help SJG with legal fees.  (Plus, I collect game stuff.)

On the front cover, in the SJG Illuminatus logo, it says:
"The book that was seized by the U.S. Secret Service! (see p. 4)"

Anyway...
(Assume I know *nothing* about cracking/phreaking --  I won't comment
on my real knowledge.)  The following is a summary of text from the
GURPS Cyberpunk supplement, with a few direct quotes.

How Much Hacking Can I Do Based on the C-word manual:
(From the section entitled "Netrunning".)

0.  People use handles to hide their real identity (p62).

1.  You can use sensitive devices to listen in on the signals being
sent to a computer monitor, and redisplay the image on your own screen
(p62).

2.  General info on ISDN.  (p64-65)

3.  Computer accounts can come in various levels, from specialty logins
(uucp) to "superuser" who has access to everything.  Some programs can
give you a higher level of access, equivalent to a "better" account (p68).

4.  General info on back doors (p69).

5.  General info on chat systems (p69).

6.  A list of network names from around the world.  No clues as to which
are real.  For the US, the following are listed:
WUT, UDTS 2, Datel I & II, Telenet, Tymnet, ARPAnet, Infomaster, GraphNet,
TRT, FTCC, UniNet, Autonet, CompuServe, GENIE, AlaskaNet, JANET, Internet
(p 71).

7.  Passwords can be really obvious, or hard to remember random text strings
(p 72).

8.  A program could possibly cause physical damage (p 72).

9.  General Phreaking Info:
-  Diverters:  go through a bunch of systems so that tracing takes
a long time;
-  Junction Boxing:  Just go down to the local junction box and tie in
(p 76).

10.  Lots of networks use different protocols that are sometimes
incompatible (p 77).

11.  Ma Bell stuff:
-  Existence of CN/A, and that Ma Bell can look you up in any way;
-  Line Routing: "With access to the main phone switch computer,
a hacker can control everything about a specific phone line.";
-  Monitoring: a person could monitor calls with the right access;
-  After Billing:  A person could change bills;
(p 82).

12.  Trashing:  Go through somebody's trash to find out all sorts
of interesting info about their computing equipment (p 86,87).

(13 and 14 are from the section "Attack and Defense Programs".  The
programs are obviously s-f software, but...):

13.  Promote:  "This program is executed from a normal user account on a
system.  If successful, the account is 'upgraded' to a superuser account."

14.  Webster: "This is the standard icebreaker for use against Password
programs (see p 93.).  It acts as an extremely fast 'brute-force' hacker."
(p 92).

15. Credcard Crime:  A false balance could be entered in an account.
A device could be used to access somebody else's card without having
the correct password to get into the credcard (p 105).  [note:  a credcard
is a self-contained debit card that can have anything from a password to
retina scan protection.]

And, um, that's about it.  Now that you've read that, you know how to break
into computer systems and do phone phreaking... 1/2 :-)


--- cut here ---
--
J. Eric Townsend -- University of Houston Dept. of Mathematics (713) 749-2120
Internet: jet@uh.edu
Bitnet: jet@UHOU
Skate UNIX(r)
Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads