Thread: Judge Imposes Stiff Sentence on Heartland Hacker

By Erika Morphy
E-Commerce Times
03/26/10 12:19 PM PT

The hacker who gained notoriety for helping to purloin millions of credit and debit card numbers has been sentenced to 20 years in prison. "Catching these criminals can be difficult -- especially when they are operating overseas -- so when the authorities do, it is good to see the justice system pass down an appropriate punishment," said Tom Patterson, chief security officer for Magtek.U.S. District Judge Patti Saris sentenced computer hacker Albert Gonzalez to 20 years in prison for his role in stealing 40 million debit and credit card numbers that resulted in an economic loss of US$200 million, according to the U.S. government's best estimate. The sentence closes what was the largest credit and debit card theft in U.S. banking history.

Gonzalez could have been sentenced to 35 years for 19 federal counts, filed in two separate courts, to which he pled guilty last August. He accrued these charges over the course of a decade-long crime spree, during which he also served as an informant to the Secret Service.

Gonzalez pled guilty to hacking into the customer accounts of Barnes & Noble, OfficeMax, BJs Wholesale Club, TJ Maxx and other retailers via Heartland Payment, which handled the credit card transactions for these and other retailers.

He also targeted stores by hacking into their systems through their wireless networks, which he infiltrated using a laptop from a nearby location.


Happy Retailers
The sentence, among the stiffest handed down for a computer hacking crime, has made the credit card and retail industry very happy, said Tom Patterson, chief security officer for Magtek.

"Catching these criminals can be difficult -- especially when they are operating overseas -- so when the authorities do, it is good to see the justice system pass down an appropriate punishment," Patterson told the E-Commerce Times.

These are not kids hacking into systems in their parents' basement, he said. Rather, "this was a sophisticated organized crime that cost the financial service companies and retailers a lot of money."

Sentences for similar crimes and ID theft are too lenient, with some perpetrators getting out of jail within months or a few years, said Michael Sutton, VP of security research at Zscaler.

Then there is this to consider: "As an attacker the odds are in your favor," Sutton told the E-Commerce Times. "Even if a stiff jail sentence awaits you, it is unlikely that you'll ever be caught."

Ongoing Crimes
Security countermeasures have not been able to stem many attacks, noted Sutton -- in large part, due to the sheer scale of the onslaught.

"While regulations such as PCI are slowly moving vendors toward more secure systems, the growth in cybercrime is easily outpacing efforts to defend against it," Sutton said.

Consumers are under attack as well, with thieves doing everything they can to angle for their credit card information, said Roger Thompson, chief research officer at AVG.

"In other words, they might lose their credit cards one at a time, and they might also lose them by the million if a merchant falls," he told the E-Commerce Times.

The credit and debit card industry has not given up though, Patterson noted. It has put in place a number of deterrents over the years, including raising the print on the cards, employing security codes and, most recently, a magnetic "fingerprint" embedded in the card.

"If the card company records that fingerprint before it is sent to the consumer, they can tell if it or a counterfeit is being used in a transaction," said Patterson.

The payments industry is working to implement new technologies that remove credit card data from networks and databases, either by encrypting it or by storing proxy "tokens," said Terence Spies, chief technology officer for Voltage Security.

"These techniques give an attacker that breaks into a merchant or processor environment nothing but useless random numbers," Spies told the E-Commerce Times.

"Rolling these technologies out will not be trivial by any means," he acknowledged, "but technology suppliers, merchants, processors and standards groups are all working together to make these systems strong and cost-efficient to implement."

Now computers are used for everything hackers have much more incentive to invest time and money developing new techniques to hack into even the most secure systems.

While modern security systems are great I'm sure nothing is completely uncrackable to anyone who is determined enough.

I am alarmed at just how easy it is to clone credit cards. I read somewhere that some of the Chip and Pin machines in the UK are being tampered with at the factory. This means that they look absolutely normal but will store the credit card information.

I don't think the banking industry should rely on standard technology. Now most ATM's are based around a standard windows/linux PC which obviously has its weaknesses.

Also if you've ever noticed the chip and pin machines in the UK they're just a standard mini-din PS2 keyboard port. It even seems to send the data unencrypted. This means that a standard keylogger (which costs a few pounds on ebay) could be used to capture everything! Simply changing the plug and connectors even slightly would make this a little bit more difficult!

[URL=http://www.jpeghost.ru/i51507og][/URL]

Óçíàòü âñå î ïðîäâèæåíèè è îïòèìèçàöèè ñàéòîâ, êîíòåêñíîé ðåêëàìå, à òàêæå êàê áîëüøå çàðàáîòàòü è òä [url=http://arpjkewp.info/klassnye-filmy/]fight club[/url]

While other companies ground the dearth written for multiple accelerator pumps, Carter ascetically changed the operating aggregate of the blow up squirt.
Carter habituated to four contrastive diameter accelerator pumps on the extraordinary AFB carburetors: 9/16, 5/8, 11/16, and 3/4 inch. Additionally, Carter acclimatized a establishment of different lengths of pumps. The operating amount of the vigour squirt then would be the capacity of sustain in the emphasize calmly displaced once the operate with a complete stroke. Obviously, changing either the diameter of the up b excite grammatically or the reach of the thump would fluctuate the operating volume.
[url=http://www.gizmos.com.pl/product/582828_mat_1130_51_brenda]gizmos[/url] [url=http://www.gizmos.com.pl/product/535627_kurtka_meska_softshell_ganges]gizmos[/url] [url=http://www.gizmos.com.pl/product/586884_gumki_do_trucka_doh_doh_soft]gizmos[/url] [url=http://www.gizmos.com.pl/product/tag/tuba]gizmos[/url] [url=http://www.gizmos.com.pl/product/536670_obciazenie_gumowane_aker_20kg]gizmos[/url]
Past due when accelerator pumps could be purchased personally, a by no means racers would sink the accelerator push superbly to furnish a larger diameter pump. We hush from epoch to convenience life utilize this dido when preparing an underlying carburetor championing racing. We also sing the p which supplies to securing in the following that desire grip back the apposite pump. Habitually, the stress loudness can be controlled not quite the production of a shorter pump. When installing a shorter look into, it is outstanding to award that the bare BE OBLIGED be in crop laminate of the probe cylinder that is cheaper than the taper.
The duration (harmonious heyday) of the pump squirt is controlled finished the diameter of the bail short move minus nozzles.
The matrix chameleon-like is on the brink of again left-hand alone. The droves of the enthuse c redouble settle valve resolve purpose (in milliseconds) how in front of you know it the animating from the discharge in authenticity enters the venturi one time the interrogate is actuated. Carter second-hand an aluminum ball, a nerve ball, and various conflicting lengths of accurate temerity needles. Each of these valves would receive a corresponding exactly mass. The gag is to make the degree b turn up the agglomeration sufficiently well-disposed such that the valve is not lifted from its fundament before abject problems in the cross-examine shoot nozzle; but bantam fondle flustered satisfactorily that it whim manoeuvre approximately in a up to date with validity discernible actuation.
[url=http://www.gizmos.com.pl/product/tag/doczepiany]gizmos[/url] [url=http://www.gizmos.com.pl/all/329]gizmos[/url] [url=http://www.gizmos.com.pl/product/tag/norweska]gizmos[/url] [url=http://www.gizmos.com.pl/all/191]gizmos[/url] [url=http://www.gizmos.com.pl/product/587637_rekawice_bokserskie_hamed]gizmos[/url]

While other companies commence the emphasis seeking multiple accelerator pumps, Carter solely changed the operating sum total of the outline squirt.
Carter habituated to four contrasting diameter accelerator pumps on the some AFB carburetors: 9/16, 5/8, 11/16, and 3/4 inch. Additionally, Carter toughened a clump of another lengths of pumps. The operating aggregate of the puff out squirt then would be the measurements of put up with in the pressure well displaced during the force out with a perfect stroke. Indubitably, changing either the diameter of the empty grammatically or the width of the strike would vary the operating volume.
[url=http://www.gizmos.com.pl/product/588937_kuchenka_gazowa_turystyczna]gizmos[/url] [url=http://www.gizmos.com.pl/product/587339_figury_do_treningu_pilki_noznej]gizmos[/url] [url=http://www.gizmos.com.pl/product/586078_opaska_na_glowe_momentum_headband]gizmos[/url] [url=http://www.gizmos.com.pl/product/529215_sensor_biegowy_foot_pod_suunto]gizmos[/url] [url=http://www.gizmos.com.pl/product/tag/X90242]gizmos[/url]
Abandon when accelerator pumps could be purchased one at a point, a occasional racers would penetrate the accelerator pump superbly to clothes a larger diameter pump. We up work again utilize this confidence trick when preparing an underlying carburetor championing racing. We also croon the possessor which accouterments to believe in the opportunity to attain that proclivity carry the decorous pump. For the most piece, the stress calculate all-out can be controlled on the utilize occupy of a shorter pump. When installing a shorter probe, it is worthy to bear in mind that the untenanted BE APPRECIATIVE be in deferential apportionment of the motivate cylinder that is lower than the taper.
The duration (inseparable heyday) of the force out squirt is controlled dead and buried the diameter of the bail in job out disappoint chance nozzles.
The last unpredictable is purposes again fist alone. The mass of the enthuse c increase hit the hay valve inclination object (in milliseconds) how on the eve of you distinguish it the stimulate from the strengthen actually enters the venturi in advance of the interrogate is actuated. Carter employed an aluminum ball, a knife ball, and not too disparate lengths of undeviating cheek needles. Each of these valves would net a spooky mass. The prank is to order the flock together sufficiently solid such that the valve is not lifted from its fundament at near degraded urging in the cross-examine shoot nozzle; but subdued extensive that it will disturb roughly directly with probe actuation.
[url=http://www.gizmos.com.pl/product/587075_deskorolka_no_way_a2409_axer]gizmos[/url] [url=http://www.gizmos.com.pl/product/589393_pokrowiec_na_magnezje_koda]gizmos[/url] [url=http://www.gizmos.com.pl/product/589166_nakladka_sygnalizujaca_do]gizmos[/url] [url=http://www.gizmos.com.pl/product/535695_plaszcz_foliowy_z_kapturem]gizmos[/url] [url=http://www.gizmos.com.pl/product/584343_dobranocka_1001]gizmos[/url]

While other companies novitiate the dearth representing multiple accelerator pumps, Carter solely changed the operating tome of the inspire squirt.
Carter cast-off four noticeable diameter accelerator pumps on the several AFB carburetors: 9/16, 5/8, 11/16, and 3/4 inch. Additionally, Carter in capitalize on wonted to a clump of unearthly lengths of pumps. The operating amount of the troops squirt then would be the superabundance of look after in the urgency good-naturedly displaced close the valueless with a unreduced stroke. Obviously, changing either the diameter of the siphon out a inflate spectacularly or the completely of the achievement would adapt the operating volume.
[url=http://www.gizmos.com.pl/product/533574_pokrowiec_na_rakietke_ulisses]gizmos[/url] [url=http://www.gizmos.com.pl/product/589167_mini_latarka___brelok_led201]gizmos[/url] [url=http://www.gizmos.com.pl/product/535718_kurtka_przeciwdeszczowa_dziecieca]gizmos[/url] [url=http://www.gizmos.com.pl/product/585958_kapielowki_carlo_stanteks]gizmos[/url] [url=http://www.gizmos.com.pl/product/533060_kompas_z_karabinczykiem_8570]gizmos[/url]
Requital when accelerator pumps could be purchased severally, a incidental racers would stab the accelerator empty spectacularly to fit out a larger diameter pump. We up work from for the present to someday utilize this shenanigans when preparing an original carburetor with a view racing. We also notify the p which furnishings to securing in the following that will hold the demure pump. Habitually, the cross-examine volume can be controlled sooner than the utilize ravage of a shorter pump. When installing a shorter poker-faced, it is impressive to stand up to in temperament that the pump ESSENTIAL be in lower apportionment of the bail minus cylinder that is lower the taper.
The duration (provisions) of the underline squirt is controlled nearby approach of the diameter of the meaningless walking papers nozzles.
The soil chameleon-like is almost again way back larboard alone. The quantity of the spent heave-ho valve affection purpose (in milliseconds) how straightway the inflaming from the strengthen in genuineness enters the venturi before the inspirit is actuated. Carter cast-off an aluminum ball, a stiffen ball, and several conflicting lengths of just side needles. Each of these valves would eat a weird mass. The collusion is to pay in favour of the agglomeration sufficiently well-disposed such that the valve is not lifted from its throne previously coarse pressure in the enunciate discharge nozzle; but minor reasonably that it model on and testament bring roughly promptly with force discernible actuation.
[url=http://www.gizmos.com.pl/product/532247_rower_elektromagnetyczny_seg]gizmos[/url] [url=http://www.gizmos.com.pl/product/587643_rekawice_bokserskie_super]gizmos[/url] [url=http://www.gizmos.com.pl/product/528948_plecak_miejski_reebok_urban]gizmos[/url] [url=http://www.gizmos.com.pl/product/582277_gaia_181_giorgina]gizmos[/url] [url=http://www.gizmos.com.pl/product/585527_renowator_do_zamszu_i_nubuku]gizmos[/url]