The UCLA Online Institute for Cyberspace Law and
Policy
HACKERS AND THE U.S. SECRET SERVICE
Benjamin J. Fox
May 1997
I. Introduction:
Within the realm of age old power struggles, none is so familiar as the struggle
between youth striving to carve out their own spheres of influence in society, and their
elders invariably entrenched in defense of the establishment. From the time of Socrates,
rapidly changing culture has led older generations to believe that their youth are
misguided and in crisis.(1) In more recent times, youth movements such as "punk"
and anarchistic subcultures may tend to prove them right.(2) As we enter the 21st century,
social commentators predict a technological revolution "unlike any in history,"
where the proliferation of computers will permeate virtually every aspect of human
interaction.(3) If we are truly at the dawn of the Information Age, then the next great
struggle between new and old, between rebellious youth and authority, may take place in
cyberspace.
This paper is about a new era of youth rebellion. Specifically, it is about
"hackers" and efforts of the United States Secret Service to monitor and control
their access to information. As discussed in greater detail within, wide disagreement
exists concerning what constitutes a hacker. Generally, a hacker is one who seeks to
obtain unauthorized access to computer systems.(4) The crux of the dispute arises over
what motivates the true hacker; benign curiosity or more malevolent ends. If the hackers'
goal is to gain the technological know-how to "effectively cripple the economy or
shut down communications systems the world over," then indeed "cyberpunks hold
the potential for becoming the most powerful subcultural force ever."(5) Fear of
hackers' potential or asserted powers have undoubtedly fueled recent law enforcement
crackdowns on hackers and the hacker subculture, while mainstream journalists contribute
to the milieu by submitting headlines such as "Go Ahead, Be Paranoid: Hackers Are Out
to Get You."(6)
A new era of virtual cops and robbers involving U.S. Secret Service agents is
intriguing today, in part, because the federal government has been forced to expand the
police powers of its Treasury Department as quickly as hackers have jumped to the
forefront of journalistic fancy.(7) Intertwined with the expanded police powers of the
Secret Service is a backlash from hackers and "computer enthusiasts"(8) alike,
who question both the practices and goals of law enforcement. While a look at computer
"criminals" is interesting in itself, of equal interest here may be an
examination of protections afforded those who seek to disseminate controversial
information relating to hacking. Within this essay, I will look briefly into the U. S.
Secret Service's history of involvement with hackers, the practices employed by Secret
Service agents to monitor and dissuade hacker activities, and some of the ways in which
advocates of the free dissemination of "hacker" information have sought to
challenge Secret Service enforcement practices. Following, this paper will question the
implications of disputed hacker activities, and whether computer enthusiasts who
self-define as hackers subscribe to a hacker ethic that would minimize societal concern
over unauthorized intrusions into computer systems.
II. U.S. Secret Service Enforcement Tools and Controversial Practices:
Since expanding its mission to include "the detection and arrest of any person
committing any offense against the laws of the United States relating to. . . credit/debt
card fraud, computer fraud, and [and] false identification crime[s] . . .,"(9) the
Secret Service has pursued and prosecuted hackers and computer enthusiasts for gaining
unauthorized access to private computer systems, for copying and distributing confidential
files, and for a myriad of other related activities including the unauthorized use of long
distance telephone lines, and credit card fraud. Often acting in conjunction with local
U.S. Attorney's offices, the Secret Service prosecutes computer criminals pursuant to
federal criminal statutes such as the federal wire fraud statute,(10) fraud and related
activity in connection with access devices/computers (18 U.S.C. ¤¤ 1029, 1030),(11) and
the prohibition of the interstate transportation of stolen property (18 U.S.C. ¤ 2314).
In addition, prosecutors sometimes rely on analogous state laws such as those prohibiting
"computer trespass," as was used to prosecute a hacker in State of Washington v.
Riley.(12) Worthy of note here, is that while the Secret Service is involved in the
detection and prosecution of software piracy, courts may be reluctant to allow prosecutors
to apply the severe criminal penalties associated with the above statutes to unauthorized
copying of non-confidential, but copyrighted software.(13)
While the prosecutorial tools used by the Secret Service in pursuit of hackers is
rather straightforward, some of the practices employed by the agency have invoked outrage
from computer enthusiasts and guardians of civil liberties for computer users.(14) Among
questionable Secret Service practices are the overly ambitious seizure of computer
equipment, attempts to shut down web sites and bulletin boards for fear that they may
harbor stolen information, and the liberal perusal of private electronic communications
based on vague search criteria.(15) In addition, computer-user rights advocates allege
that Secret Service search and seizures are routinely conducted using sealed search
warrants, and while often not culminating in arrests, leave computer users without clear
avenues to proceed in order to retrieve their property and restore Online access.(16) For
example, in the 1990 Secret Service raid that culminated in a civil suit against the
government in Steve Jackson Games, agents seized computers, 300 computer disks, and
interrupted operation of the affected company's bulletin board.(17) Among the materials
seized were drafts of the book "Gurps Cyberpunk," which was slated for imminent
publication, magazine articles to be published, business records, and a bulletin board
named Illuminati, which included newsletters, public comment on submitted articles, and
both public and private electronic mail.(18) The seizures, it was discovered by plaintiffs
in the corresponding civil suit, were conducted in an effort to track down a telephone
company computer file (Bell South's 911 document) allegedly stolen by a Ôhacker' who
posted the file for public review on his bulletin board.(19) The hacker who posted the 911
file on his bulletin board also happened to be an employee of Steve Jackson Games Inc.,
leading Secret Service agents to believe that the document could be hidden in Steve
Jackson Games' Illuminati bulletin board. Yet due to the sealed nature of the search
warrants, Steve Jackson Games "[was] not able to ascertain the reasons for the March
1, 1990 seizures until after the return of most of their property in June of 1990, and
then only by the efforts of the offices of both United States Senators and the State of
Texas."(20)
Perhaps the most infamous of Secret Service hacker-related blunders occurred on
November 6, 1992, when the Service coordinated with a shopping mall security staff to
break up a meeting of teenage hackers in the food court of the Pentagon City Mall in
Arlington, Virginia.(21) The teenagers had congregated for a monthly meeting of the
"2600 Club," named after the 2600 Hacker Quarterly magazine.(22) Mall security,
accompanied by at least one Secret Service agent, confiscated the teenagers' bags which
contained computer books and printouts, and ordered them to leave the mall. No charges
were ever filed, and the Secret Service was reluctant to acknowledge their involvement, to
provide any information about the raid, or to release the confiscated property. The raid
has been criticized as an infringement upon the members' rights to assemble peaceably,(23)
but moreover, it may be illustrative of the bizarre cat and mouse game being played
between a new generation of computer-oriented rebellious youth, and high ranking law
enforcement officers relegated to the roles of virtual juvenile-gang detectives.
Other clashes between computer enthusiasts and Secret Service agents have made it to
court dockets and onto frequently visited web sites.(24) Those which attract significant
attention often do so because they illuminate ideological differences between
"corporate behemoths" and law enforcement agents on one side, and hackers and
Netizens on the other.(25) The conceptual differences revolve around the extent to which
computer users should have access to ideas and information which circulate through the
Internet and the complex computer systems maintained by some of the world's largest
corporations.(26)
III. "Watching the Watchers"(27): The Computer Denizens' Response to the U.S.
Secret Service:
In the traditional story of wayward and rebellious youth, those crying for recognition
from behind the walls of the age of minority go largely unrecognized, absent violent
episodes or staged protest that draw public attention. While this may have been true then
and now, with respect to hackers, teenage or otherwise, the story of powerlessness to
respond to authority is somewhat inapplicable. Granted, some "hackers" have
voiced their displeasure with federal law enforcement by using the same type of anonymous
graffiti which for years teenagers have spray painted on urban buildings and bridges
throughout the country.(28) Others criticize government practices that affect their peers
on their own web sites, without crossing the line to online vandalism.(29) And Online
access also seems to correlate with legal access, as computer-user civil liberties groups
have not been reluctant to use the courts to gain information about adverse government
action, and to challenge controversial Secret Service practices.
In the 2600 case from the Pentagon City Mall meeting raid, as discussed supra pages
4-5, the Computer Professionals for Social Responsibility ("CPSR") carried the
torch for teenage hackers, filing a Freedom of Information Act ("FOIA") request
to combat a Secret Service policy of silence. The request, which the U.S. Supreme Court
has stated focuses "on the citizens' right to be informed about what their government
is up to," sought information retained by the Service concerning the breakup of the
teenagers, eight of whom had authorized CPSR to seek disclosure of information even if
deemed confidential.(30) In 1996, four years after the breakup of the original meeting,
the Court of Appeals for the District of Columbia Circuit granted the FOIA request in
part, stating that the Secret Service is not entitled to a "generic" presumption
that all information gathered in the course of a criminal investigation of hackers is
confidential.(31)
Beyond seeking information, computer users have tangled with the Secret Service in
criminal and civil courts when challenging questionable search and seizure practices.(32)
Generally, the Fourth Amendment protects "people, not places," from unreasonable
searches and seizures.(33) When the Secret Service or any other law enforcement body
conducts a search of a hacker's home or business, it must conform with the Fourth
Amendment's requirements that a warrant issue based on probable cause, and that the
warrant describe with particularity the places to be searched, and the people or things to
be seized.(34) A problem concerning searches that move between the real world and
cyberspace is that the interconnectedness of systems in cyberspace can lead law
enforcement quickly from a simple search of one party to a multi-party, multi-computer
search that could encapsule the innocent as well as the guilty, and relevant evidence as
well as a large amount of extraneous private information.(35) The concern voiced by
Netizens is that Secret Service agents have neither the expertise nor exercise the
requisite level of care to know fully where they tread when searching complex computer
systems.(36) The most serious implication then, may be not for hackers caught in the act
of infiltrating or pilfering information, but for those on the fringe of the hackers'
domain; those Netizens enamored with the exchange of information related to hacking and
the debate over hackers' rights to free access. Individuals and companies that either
directly or derivatively support controversial web sites and bulletin boards, or access
such sites, may be reeled in during raids similar to Operation Sundevil that take place in
the online and tangible worlds. Then, due to Secret Service sealed warrant procedures,
Netizens who have their computers seized often find themselves stuck in legal limbo; most
are not arrested but rather kept "under investigation," while their computers
remain with law enforcement. If this fear sparks images of Big Brother and GESTAPO-like
practices, it pales in comparison to the fear that ran rampant during the Operation
Sundevil raids, and in the media aftermath.(37)
While the Fourth Amendment will undoubtedly be the focus of most disputes over Secret
Service raids on hackers, the remedies afforded Netizens under the Fourth Amendment are
minimal at best. The only direct remedy stemming from a 4th Amendment violation by
government agents is to have the evidence collected from the illegal search declared
inadmissable during the prosecution of a hacker.(38)
In search of a better way to thwart the Secret Service, the plaintiff company in Steve
Jackson Games challenged an overbroad search with the statutory remedies afforded under
the Privacy Protection Act. When the Service seized company computers and shut down its
web site in search of the stolen Bell South 911 file, they did so, according to the court,
without "any basis for suspicion that any of the Plaintiffs had engaged in any
criminal activity."(39) In response to the unlawful seizures and shutdown of its
electronic bulletin board, the company sought statutory damages against the government in
civil court under the Privacy Protection Act. The Act is interesting in this context
because it protects against the seizure of "any work product materials possessed by a
person reasonably believed to have a purpose to disseminate to the public a newspaper,
book, broadcast, or other similar form of public communication [emphasis added]."(40)
Would the act apply to electronic bulletin board operators that publish controversial
information on the Internet? Steve Jackson Games indicates that it would, as the court in
that case stressed the fact that much of the information seized, either in disk format, or
by denying access to the Illuminati bulletin board was slated for imminent publication on
the Internet.(41) Even in a case where the government has probable cause to believe that a
bulletin board operator has committed or is committing a criminal offense, where that
offense relates only to the "receipt, possession, communication, or withholding of
such materials or the information contained therein," the Privacy Protection Act
still prohibits seizure.(42) Such an extension for the protection of publishers is
undoubtedly rooted in the First Amendment protections against prior restraint of the
press.(43) Note also, that the Act allows pre-publication seizure of materials to be
disseminated through the Internet or by other means if those materials include child
pornography, or information endangering the national defense. Query then, if materials
relating to hacking into computer systems could be deemed to endanger the national
defense? While the government has on several occasions enunciated a fear that hackers may
infiltrate Defense Department computers,(44) that fear should not carry much weight when
applied to many of the rather mundane files circulating through the underground hacking
world. In sum, as in Steve Jackson Games, the Privacy Protection Act may be one of several
remedies afforded Netizens who publish information related to hacking, and are stymied by
Secret Service interference.(45)
IV. Are Hackers Really A Threat, and Does A "Hacker Ethic" Mitigate Their
Dangerousness?
If a discussion of the Secret Service's involvement with hackers is to lead to any
conclusion about the efficacy of federal police action, we may have to juxtapose
controversial law enforcement practices against the ideological backdrop upon which many
hackers operate. A discussion of the risks hackers pose to individuals, to corporations,
and to state and nation must be prefaced by noting that there is almost as much dispute
over what constitutes a "hacker," as there is concerning whether they represent
a new manifestation of an old social ill, or a glimpse of a bright innovative future. The
way hackers are viewed inevitably depends on how they are defined, and who amongst the
ranks of computer enthusiasts is excluded from the definition. A "hacker" has
generally been defined by courts reviewing their pending cases as "an individual who
accesses another's computer system without authority,"(46) or as one "who use[s]
computers for illegal activity."(47) Others define hackers as "learners and
explorers,"(48) "law abiding citizens with a deep understanding of
computers,"(49) and " primarily disaffected male teenagers . . . [with] a need
for technological empowerment."(50) I believe that hackers can fit each of these
paradigms, and that each is worth exploring further if we are searching for a reasoned
understanding of hackers and their societal worth or dangerousness.
From a significant portion of Netizens, albeit possibly a minority, comes the theory
that hackers are "learners and explorers who want to help rather than cause damage,
and who often have very high standards of behavior."(51) This is "the hacker
ethic," which carries with it the manifesto "Thou Shalt Not Destroy."(52)
Those that espouse it claim that they are an elite group of computer enthusiasts devoted
to "the free wheeling intellectual exploration of the highest and deepest potential
of computer systems . . . that beauty can be found in computers, that the fine aesthetic
in a perfect program can liberate the mind and spirit," and finally, that information
and computer access should be as "free and open as possible" to reach this
end.(53) The maxim that "information wants to be free," and should be free for
the taking justifies the invasion of computer systems for these hackers, who believe that
they have the expertise to tread through complex systems without disrupting the networks,
and that they may even detect and cure viruses on occasion. This form of electronic good
samaritanism is likely the exception rather than the rule, but it is almost a universally
held belief within the hacker community that information should be generally accessible,
for to "hoard information slows down the development of new technology."(54) On
the other hand, some hackers bent on exploration of the virtual world may justify
intrusions by scapegoating incompetent corporate computer security personnel. If they can
not make their systems secure, who is to blame hackers for their intrusion? A hacker
arguing this point might analogize the break-in to the act of a hungry man entering an
unlocked kitchen, and doing so only to smell the food, not to eat. But this is a tenuous
argument, and could easily be extended to justify a world where power and bravado, not
principle, govern rights of privacy and property.(55)
Even assuming that a hacker ethic does exist in some circles, how prevalent is it among
today's hackers, and how prevalent need it be before it would alleviate the public's fear
of damage hackers can cause?
A look at the reality of Online crime as outlined by mainstream journalists indicate
that the hacker ethic is fading fast, if in fact it ever predominated among hackers.(56)
American businesses lose more than $100 million yearly due to computer-related theft.(57)
Among the intrusions include the theft of ten million dollars from Citibank by Russian
hackers,(58) a theft that more than half of U.S. banks say that they are "very
concerned" about similar repeat performances.(59) Of the losses, which critics say
are vastly under-reported due to companies' desires to avoid the stigma associated with
unstable network security, much can be attributed to the theft of valuable trade secrets.
But if hackers believe that information truly should be free and accessible to promote the
proliferation of technology, is the theft of trade "secrets" really in violation
of a hacker ethic? If trade secret theft is motivated by monetary gain, and not a genuine
desire to promote the spread of knowledge, then it would be hard to justify under any
ethical standard. And even if a hacker's goal is to promote the progress of science, the
abolition of Copyright law may not be a reasonable means to that end.(60)
Hackers argue that the hoarding of information forces others to waste time recreating
what has already been done, detracting from the time they might otherwise spend
innovating. But if inventors and computer programmers who create new knowledge are not
allowed to capitalize on their creations by enjoying the monopoly that Copyright and
Patent law gives them, the incentive to create will inevitably be removed for many. While
some hackers may traverse complex corporate computer systems for the pure love of
technology, it is unreasonable to believe that enough of society's elite thinkers would
produce for the pure love of doing so. The realities of economic life may inhibit many who
would create, whether or not they could benefit from the monopolistic powers granted by
Copyright and Patent law.
Any assertion claiming that the realities of economic life do not influence hackers is
also untenable. Many hackers that frown upon "crashing" computer systems and
introducing viruses, implicitly approve of long distance telephone fraud as a necessary
means of gaining the information which they crave. For example, Mark Abene (a.k.a.
"Phiber Optik") and Eli Ladopoulos (a.k.a. "Acid Phreak"), prominent
hackers in a teenaged cyberspace gang called MOD, the "Masters of Deception,"
focused their hacking adventures on "phone phreaking," or gaining unauthorized
access to telephone company computers.(61) Like the first generation of hackers, whose
ranks included the co-founders of Apple Computers, these "phone phreaks" seemed
to have a fairly developed moral code with respect to hacking.(62) But this hacker ethic
did not inhibit them from taking advantage of what they perceived to be an infinite supply
of free long distance calling time. Although they believed in the credos "Thou Shalt
Not Destroy," they did at least on one occasion cause a system to crash. On other
occasions, the hackers would leave their own greetings on company systems. When Eli
Ladopoulos left a greeting message within the computer of a public access television
station in New York, he caused the computer to print his greeting continuously, as paper
spilled throughout the television station's office. As Slatalla and Quittner described the
incident, it was "just a spoof, a goof, a gag. Eli mean[t] no harm. In his mind, it's
like tying someone's shoelaces together to watch them trip."(63)
Are the majority of hackers "primarily disaffected male teenagers . . . with a
need for technological empowerment"? While hackers undoubtedly run the gamut from
high-stakes computer criminals bent on stealing trade secrets and money, to elite
"techno-geeks" who hack as a hobby and later enter the mainstream job market as
programmers and trouble shooters, a significant portion does fit the disaffected teenager
model.(64) If they are representative of their cohort, or of other teenage groups who act
to express themselves, to gain recognition, and to taunt authority, then their actions
should generally fall somewhere between the threat to national security that the Secret
Service alludes to, and the benevolent intruder model that Netizens champion. If the
plight of teenagers in general is cause for alarm, then today's hackers might be expected
to follow trends seen with other teenage gangs, who today are more violent and criminal
than any generation before them.(65) But if hacking is a hobby of the middle and upper
middle classes, might not teen hackers remain insulated from the social ills that plague
other teen gangs? The answers to many of these question are unclear, as is the ideal
posture that law enforcement should take with these teenage cyberpunks.
Again, we may ask, could law enforcement approach "the hacker problem" in a
way that could minimize negative social and societal effects? Some commentators suggest
"working with hackers," treating them not as "enemies and criminals, but
rather as potential helpers in the task of making [computer] systems secure."(66) But
how do we differentiate between benevolent hackers who only wish to explore, and others
with less noble aims?
No matter how vocal Netizens and some computer professionals may be in defense of
hackers, it is safe to assume that government is not going to change its fundamental
position against unauthorized intrusions, copying of trade secrets, and pilfering of long
distance calling card time. Assuming hacker deterrence is the goal of government and the
Secret Service, the question then becomes, is there a better way to approach deterrence
than through the high profile raids and seizures of the Operation Sundevil era? Senator
Tom Hayden (D. Cal.) tells an interesting story worthy of note here. He told the story of
a sixteen-year-old hacker from Santa Monica, California, who was raided and sentenced to a
year in a juvenile detention center for cracking a major computer company's system. About
the raid and subsequent punishment, Hayden said, "[t]hat kind of high publicity just
encourages other kids. This is a case, where if violence ever causes violence, then
punishment causes crime."(67)
The theory that high profile Secret Service enforcement practices may not deter, but
actually bolster interest in illegal hacking to a greater extent than any private bulletin
board on the subject could, may not be far fetched. Hayden is not the first to enunciate
the theory, as Slatalla and Quittner wrote of Abene and Ladopoulos, that following Secret
Service raids "Eli and Mark ha[d] become a walking enlistment poster for hacking. MOD
WANTS YOU--TO THWART UNCLE SAM."(68) One criminologist wrote on the subject that
there "is little evidence to suggest that punishment will in the long run reduce any
given offense, and . . . may, in fact, contribute to the growth of the computer
underground."(69) Following the Operation Sundevil raids, even mainstream journalists
questioned the efficacy of a hardcore "hacker crackdown," as a reporter for The
Economist wrote,
"[s]uch raids have encouraged a debate over whether the cures are worse than the
disease . . . In the short term, the prospect of explaining to mom and pop why armed
policemen are seizing your computer will probably give pause to many a young would-be
hacker. In the longer term, dramatic Dick Tracy-style raids may backfire."(70)
Hackers who have been around long enough to remember the Operation Sundevil Raids and
the 2600 incident in the Pentagon City Mall confirm that attendance at 2600 club meetings
multiplied ten-fold, as teens, news people, and onlookers searched out what had previously
been rather obscure gatherings.(71)
So what, if anything, do we say to Secret Service agents and policy makers concerning
hackers and raids? Possibly, hackers and computer-user civil liberties groups have said it
themselves through the courts and on the Internet; the message being "tread
lightly." If one thing is clear, it is that hackers and computer enthusiasts
fascinated by the hacker mystique and related information are not going away. Many will
grow up to become the next generation of leaders and policy makers in big business and
government. How many will carry the lessons that they have learned about the value of
information, technological empowerment, and ethics with them?
Footnotes:
(1) Berliner and Biddle, The Manufactured Crisis 11 (1995).
(2) For convenient glimpses into anti-authoritarian youth subcultures, see the films
The Decline of Western Civilization (1980), and Suburbia (1984).
(3) Jeremy Rifkin, The End of Work; The Decline of the Global Labor Force and the Dawn
of the Post-Market Era 13 (1995).
(4) Steve Jackson Games v. United States Secret Service, 816 F. Supp. 432, 435, fn.2
(W.D. Tex. 1993).
(5) Piglia, Paola, and Rayl, Secrets of the Subculture; countercultural movement lead
by computer hackers, Omni, vol. 15, no. 2, Nov. 1992, at 58.
(6) Steve Lohr, Go Ahead, Be Paranoid: Hackers are Out to Get You, N.Y. Times, March
17, 1997, <http://nytimes.com>. See also William G. Flanagan and Brigid McMenamin,
The playground bullies are learning how to type, Forbes, Dec. 21, 1992, at 184 (claiming
that hacker intrusions will cost corporations and government "anywhere from $500
million to &5 billion a year, signaling "a computer crime wave of epic
proportions"), and Phillip Shenon, Report Warns of Security Threats Posed by Computer
Hackers, N.Y.Times, May 23, 1996 <http://nytimes.com> (asserting that hackers pose a
"serious and growing threat to national security," as Pentagon computers were
"attacked" as many as 250,000 times last year).
(7) It was not until 1984 that the U.S. Secret Service's mission was expanded beyond
its duty to protect the life of the President and other high ranking dignitaries, to
investigating computer fraud and other fraud-related crimes. See, U.S. Secret Service Home
Page, <http://www.ustreas.gov/treasury/bureaus/usss/>; 2600 The Hacker Quarterly,
<http://www.2600.com> See also Michelle Slatalla & Joshua Quittner, Masters of
Deception; The Gang that Ruled Cyberspace 108, 116-18 (1995) (suggesting that S.S. agents
are protecting high ranking officials one day and chasing hackers the next).
(8) Under the umbrella term "computer enthusiasts," we might include
"Netizens," operators of private BBS services, those involved in
computer-related media and electronic freedom advocacy, such as the Electronic Frontier
Foundation, Computer Professionals for Social Responsibility, and perusers of magazines
such as 2600 The Hacker Quarterly.
(9) U.S. Treasury Home Page, <http://www.ustreas.gov/treasury/bureaus/usss/>.
(10) 18 U.S.C. ¤ 1343 (prohibiting the use of wire, radio or television communication
in interstate commerce in order to facilitate a fraudulent scheme).
(11) See Mark D. Rasch, Legal Lessons in the Computer Age, Security Management, vol.
40, no. 4, April, 1996, at 59 (discussing a 1986 congressional amendment to Title 18
section 1030, enhancing penalties for illegal hacker activities).
(12) Washington v. Riley, 121 Wash. 2d 22, 26 (Wash. 1993) (hacker prosecuted for
attempting to procure long distance calling card numbers by repeatedly dialing a telephone
company computer switch and entering random numbers).
(13) In U.S. v. LaMacchia, a U.S. District Court in Massachusetts interpreted the U.S.
Supreme Court's decision in U.S. v. Dowling to hold that where copyright law is applicable
to acts such as unauthorized software piracy, prosecutors must rely on penalties
enunciated within Section 506 of the Copyright Act of 1976, and not on criminal statutes
such as the federal wire fraud statute. United States v. LaMacchia, 871 F. Supp. 535, 545
(D.C. Mass. 1994).
(14) Among the most famous of raids is "Operation Sundevil," during which
Secret Service agents seized 42 computers and 23,000 floppy disks nationwide in 1989 and
1990. Jorge L. Contreras, Jr., Book Review: The Hacker Crackdown: Law and Disorder on the
Electronic Frontier, by Bruce Sterling, 6 Harv. J. Law and Tec. 421, 412 (Spring 1993),
and Phillip Elmer-Dewitt, Cyberpunks and the Constitution, Time, April 8, 1991, at 81.
(15) See, Steve Jackson Games, 816 F. Supp. at 436,443; Computer Professionals for
Social Responsibility v. United States Secret Service, 72 F.3d 897, 900-901 (U.S. Ct. App.
D.C. Cir. 1996). See also Slatalla & Quittner, supra note 7, at 127 (comparing Secret
Service raids to scenes from George Orwell's 1984).
(16) The Operation Sundevil raids shut down dozens of computer bulletin boards, yet
"turned out to be a bust of another sort [for Secret Service agents]," because
almost a year after Operation Sundevil, the raids had resulted in only one indictment.
Mark Lewyn and Evan I. Schwartz, Why the Legion of Doom has Little Fear of the Feds,
Business Week, no. 3209, April 14, 1991, at 31.
(17) Steve Jackson Games, 816 F. Supp. at 437.
(18) Id. at 439-440.
(19)The Bell South 911 file was the center of considerable attention in the early
1990's, as it was introduced as evidence in the prosecution of Robert Riggs, for obtaining
stolen information posted on a hacker bulletin board. United States v. Riggs, 743 F. Supp.
556, 558 (N.D. Ill. 1990). In Steve Jackson Games, the file was posted on a bulletin board
entitled Phoenix, which was unrelated to the Illuminati bulletin board seized by the
Secret Service. Steve Jackson Games, 618 F. Supp. at 435-437.
(20) Id. at 443. Note also, that once the company's property had been returned, it was
discovered that electronic communications unrelated to the 911 file investigation had been
unlawfully deleted. Id. at 438.
(21) The case gained further publicity when Computer Professionals for Social
Responsibility filed a Freedom of Information Act to expose Secret Service involvement in
the raid. Computer Professionals for Social Responsibility v. United States Secret
Service, 72 F.3d at 900-901; Computer Professionals for Social Responsibility v. United
States Secret Service, 1994 U.S. Dist. LEXIS 20054 (D.D.C. July 1, 1994).
(22) Since the incident in Arlington, Virginia, 2600 magazine has maintained extensive
Online records of Secret Service practices concerning hackers and their meetings,
<http://www.2600.com>, see also The 2600 Case
<http:www.epic.org./computer_crime/2600>, and Secret Service Search Warrant
Affidavit <http://www.io.com/ss/affidavit.html>.
(23) See, the Computer Professionals for Social Responsibility's Press Release
<http://www.cpsr.org>.
(24) See e.g., Riggs, 743 F. Supp. at 557 (defendants Robert Riggs, a.k.a. hacker
"Prophet," and Craig Neidorf, a.k.a. "Knight Lightning," prosecuted
under federal law for stealing, and/or receiving stolen Bell South 911 file from a hacker
bulletin board), United States v. Denich, 1992 U.S. Dist. LEXIS 6996, *1-*8 (S.D.N.Y.
1992) (21 year old hacker's motion to suppress post arrest statements made to Secret
Service agents succeeds based on agents' failure to advise defendants of Miranda rights),
see also 2600 the Hacker Quarterly,< http://www.2600.com> for U.S. v. Cummings, and
U.S. v. Mitnick, (hackers imprisoned for possession of "access devices" used to
gain unauthorized entry into computer systems).
(25) Contreras, supra note 14, at 421-423 (citing Sterling's viewpoint sympathetic to
hackers, opining that the true villains of this story are corporate officers who
unnecessarily guard their systems from hackers who wish only to explore and learn, not to
destroy).
(26) For further discussion on hackers' claims concerning a right to free access to
information, and for discourse on the hacker ethic, see infra pp. 14-18.
(27) "Watching the Watchers" is a subtitle on 2600 Magazine's web site
devoted to chronicling Secret Service involvement with hacker activities
<http://2600.com>.
(28) If the Internet can in fact be conceptualized as a city, then the virtual graffiti
posted by hackers on government web sites is analogous to spray painting "Central
Stupidity Agency" or "U.S. Department of Injustice" on the steps of the
Capital Building in Washington D.C. See, Hackers Vandalize CIA's Web Page, N.Y. Times,
September 19, 1996; and Hacker Vandalizes Web Site of U.S. Justice Department, N.Y. Times,
August 18, 1996 <http://nytimes.com>.
(29) While underground hacker cites are perpetually waxing and waning in popularity,
one Internet service provider that had long been regarded as a "hacker haven,"
shut down its services in July, 1996. The service, called Mindvox, was founded in 1992 by
two former members of the notorious Legion of Doom hacker collective. Katherine Cavanaugh,
Mindvox, Long a Haven for Hackers, Signs Off, N.Y.Times, July 13, 1996
<http://nytimes.com>. For glimpses of individual postings relating to hackers, see
e.g. <alt.newsgroups.hackers>.
(30)Computer Professionals For Social Responsibility, 72 F.3d at 904.
(31) Id. at 906. Interestingly, the government argued unsuccessfully that hackers
represent a threat serious enough to computer networks that fear of hackers' retaliation
should justify an inference that all information gained during investigations must receive
confidential treatment. Id.
(32) Steve Jackson Games, 816 F. Supp. at 432; Riggs, 743 F. Supp. at 556; and
LaMacchia, 871 F. Supp. at 535
(33) United States v. Katz, 389 U.S. 347, 351 (1967).
(34) While the warrant requirement has been eroded over the years by a series of
"emergency exceptions," in the case of ongoing investigations of hacker
activities it seems unlikely that a warrant based on less that probable cause would pass
constitutional muster. But see e.g. Warden v. Hayden, 387 U.S. 294 (1967) (no warrant
required in cases of "hot pursuit"), and Schmerber v. California, 384 U.S. 757
(1966) (warrantless seizure of evidence permissible if evidence of crime is likely to
disappear before warrant can be obtained).
(35) For a look into an extreme, but plausible hypothetical search of cyberspace, see
Michael Adler, Cyberspace, General Searches, and Digital Contraband: The Fourth Amendment
and the Net-Wide Search, 105 Yale L. J. 1093 (Jan. 1996) (describing a Net-wide search,
which law enforcement could use to scan for electronic contraband anywhere on the
Internet).
(36) Lewyn & Schwartz, supra note 16 ("[c]omputer crimes often span the
country, calling for tricky coordination of far-flung law-enforcement agencies");
Computer Hackers; U.S. v. Zod, The Economist, Sept. 1, 1990, at 23 (opining that in cases
brought against hackers such as 20-year-old Craig Neidorf, "[s]imple incompetence is
the most straightforward problem facing the computer police").
(37) In the aftermath of the Operation Sundevil Raids, the administrator of the
bulletin board Zygot wondered, "[s]hould I start reading my users mail to make sure
they aren't saying anything naughty? Should I snoop through all the files to make sure
everyone is being good? The whole affair is rather chilling." Dorothy E. Denning,
Concerning Hackers Who Break into Computer Systems, paper presented at the 13th National
Computer Security Conference, Wash., D.C. Oct. 1-4, 1990, at 13
<http://www.cpsr.org>, quoting Emmanuel Goldstein, For Your Protection, 2600
Magazine, Vol. 7, No. 1, Spring 1990.
(38) See e.g. United States v. Morrison, 449 U.S. 361, 367 (1981) (an illegal search
will not even result in the dismissal of an indictment as a remedy for police misconduct).
(39) Steve Jackson Games, 816 F. Supp. at 435.
(40) 42 U.S.C. ¤ 2000aa(a).
(41) Steve Jackson Games, 816 F. Supp. at 439-440.
(42) 42 U.S.C. ¤ 2000aa(a)(1).
(43) In 1931 the U.S. Supreme Court held in Near v. Minnesota that a "chief
purpose" of the First Amendment was to prevent pre-publication restraints. 283 U.S.
697, 673 (1931). Forty years later, in New York Times Co. v. United States, the Supreme
Court held that even the publishing of a secret Defense Department study on the war in
Vietnam should not be enjoined prior to publication. 403 U.S. 713, 714 (1971). Unresolved
in that case, was the possibility of whether pre-publication censorship would be
appropriate if the government could prove that the publisher was a receiver of stolen
goods, as might be the case when a hacker publishes a stolen file on the Internet. Id.
(44) In Steve Jackson Games, Secret Service agents stated their concern that the
hackers who had stolen the 911 file "were attempting to utilize a decryption
procedure whereby unlawful intrusions could be made to computer programs including the
Defense Department." 816 F. Supp. at 436. See also Government Concerned After Hackers
Vandalize U.S. Department of Justice's Web Site, N.Y. Times, August 18, 1996
<http://nytimes.com> (sparking the creation of the department's "cyberwar"
center to combat intruders); Justice Site Intrusion Part of Growing Trend, N.Y.Times,
August 24, 1996 <http://nytimes.com>; and Shenon, supra note 6 (enunciating the fear
that some hackers may be working for foreign countries which are interested "in
obtaining military research data," or other information which could threaten national
security).
(45) Steve Jackson Games Inc. ultimately recovered $50,000 in statutory damages from
the Secret Service for the unlawful seizure of its computer disks and electronic bulletin
board. That's 50K, The National Journal, vol. 25, no. 13, March 27, 1993, at 769.
(46) Steve Jackson Games, 816 F. Supp. at 435, fn. 2.
(47) Riggs, 967 F.2d at 562, fn. 2. The court in Riggs did acknowledge that "the
term can also be used to describe legitimate computer users." Id.
(48) Denning, supra note 37, at 1.
(49) Contreras, supra note 14, at 421 (citing author Bruce Sterling's view on hackers).
(50) Id.
(51) Denning, supra note 37, at 1.
(52) Denning, supra note 37, at 1.
(53) Bruce Sterling, The Hacker Crackdown: Law and Disorder on the Electronic Frontier
53 (1992).
(54) Comment made by a 17-year-old hacker and computer programmer at a monthly meeting
of the 2600 Club, Los Angeles, California (February, 1997).
(55) Slatalla and Quittner are quick to point out in Masters of Deception that this
hacker argument would rarely be accepted by reasonable adult minds, for to do so would
lead to a world where "the hunter may soon find himself as the hunted." Slatalla
& Quittner, supra note 7, at 75.
(56) Supporters of the theory that hackers are predominantly benevolent explorers have
received harsh criticism from commentators on the other side of the ideological spectrum.
In response to Dorothy Denning's support of the "hacker culture," one
commentator wrote, "In 20 years of interviewing malicious hackers, I have found that
they . . . lie, cheat, exaggerate, and steal, as a matter of course. Understanding the
hacker culture does not mean that we must accept the hackers' "program" and
values. Donn B. Parker, et. al., Colleagues Debate Denning's Comments, Communications of
the ACM, March, 1991, at 33.
(57) Jon Swartz, Modern Thieves Prefer Computers to Guns; Online Crime is Seldom
Reported, Hard to Detect, S. F. Chron., March 25, 1997.
(58) Joseph L. McCarthy, Cyberswindle! Computer hacking, Chief Executive, no. 113, May,
1996, at 38.
(59) Swartz, supra note 57.
(60) For general support of Copyright law, see e.g., White v. Samsung Electronics,
where 9th Circuit Judge Kozinski wrote, in part, "[p]rivate property, including
intellectual property, is essential to our way of life. It provides an incentive for
investment and innovation; it stimulates the flourishing of our culture; it protects the
moral entitlements of the people to the fruits of their labors." J. Kozinski, in
dissent, 989 F.2d 1512, 1513 (9th Cir., 1993), cert. denied 113 S.Ct. 2443 (1993).
(61) See generally Slatalla & Quittner, supra note 7. For more on "phone
phreaking," see Barbara Herman, Yacking with a Hack; Phone Phreaking for Fun, Profit,
and Politics, Teleconnect, vol. 10, no. 8, August 1992, at 60, and Katie Hafner, Kevin
Mitnick, Unplugged, Esquire, vol. 124, no. 2, August, 1995, at 80 (on a notorious computer
hacker whose humble beginnings started in phone phreaking).
(62) Swartz, supra note 57.
(63) Slatalla & Quittner, supra note 7 at 95.
(64) See Herbert Buchsbaum, Revenge of the Nerds, Teenage Computer Hackers, Scholastic
Update, vol. 127, no. 1, Sept. 2, 1994, at 14.
(65) Rita Kramer, At a Tender Age, 7 (1988); see also Catherine J. Whitaker & Lisa
D. Bastian, Teenage Victims: A National Crime Survey Report (U.S. Dept. of Justice, Office
of Justice Programs, Washington, D.C.) (1991).
(66) Denning supra note 37, at 10.
(67) Conversation with Tom Hayden, on the campaign trail during the 1997 mayoral race
in Los Angeles, California (January 23, 1997).
(68) Slatalla & Quittner supra note 7, at 122.
(69) Denning, supra note 37, at 9, quoting Jim Thomas, Review of the Cuckoo's Egg,
Computer Underground Digest, Issue No. 1.06, April 27, 1990.
(70) Computer Hackers; U.S. v. Zod, supra note 36.
(71) Conversation with a hacker at a February, 1997 meeting of the 2600 Club in Los
Angeles, California.
** Special thanks must go to Professor Stuart Biegel at the UCLA School of Law, who
sparked my interest in the world of hackers, and provided invaluable guidance along the
way.
|