Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Security Privacy Your Rights Online

Man Reportedly Jailed for Using Lynx 912

wezzul writes "A Londoner made a tsunami-relief donation using Lynx on Sun's Solaris operating system. The site operator decided that this 'unusual' event in the system log indicated a hack attempt, and the police broke down the donor's door and arrested him." Honestly, though, aside from a BBC article about a tsunami fund hacking probe that doesn't mention user agents there's little to corroborate this. Hopefully Lynx users need not worry too much yet.
This discussion has been archived. No new comments can be posted.

Man Reportedly Jailed for Using Lynx

Comments Filter:
  • by Essef ( 12025 ) on Friday January 28, 2005 @04:00AM (#11501162)
    Just because he was using lynx does not mean he was not trying to break into the site.

  • by Anonymous Coward on Friday January 28, 2005 @04:01AM (#11501167)
    for false imprisonment, and sued for slander, liable, an anything else he can think of.

  • by ctime ( 755868 ) on Friday January 28, 2005 @04:01AM (#11501168)
    While not fair by any means, to me this is clearly an example of one faction of the governments: Setting examples.
    I would speculate that the browser inadvertently sent some malformed HTTP POSTS or otherwise made some "usual" as in "unusual garbage posts to credit card processing engine" and spooked the sysadmin who had far to much time on his hand and the local police number on speed dial.

    poor bastard..I bet if he was using linux this wouldn't have happend ;]
  • by cliffiecee ( 136220 ) on Friday January 28, 2005 @04:03AM (#11501176) Homepage Journal
    We *so* need to name a 'Lynx' day in protest. Hit all your favorite sites with a text-based browser in a non-windows OS for one day.

    Of course, with all the embedded Flash around, some sites will be totally inaccessible... which would maybe teach them a lesson about accessibility.
  • I don't believe it (Score:2, Insightful)

    by John Seminal ( 698722 ) on Friday January 28, 2005 @04:07AM (#11501190) Journal
    Thursday, January 27, 2005

    Jailed for using a nonstandard browser

    A Londonder made a tsnuami-relief donation using lynx -- a text-based browser used by the blind, Unix-users and others -- on Sun's Solaris operating system. The site-operator decided that this "unusual" event in the system log indicated a hack-attempt, and the police broke down the donor's door and arrested him. From a mailing list:

    For donating to a Tsunami appeal using Lynx on Solaris 10. BT [British Telecom] who run the donation management system misread an access log and saw hmm thats a non standard browser not identifying it's type and it's doing strange things. Trace that IP. Arrest that hacker.

    Armed police, a van, a police cell and national news later the police have gone in SWAT styley and arrested someone having their lunch.

    Out on bail till next week and preparing to make a lot of very bad PR for BT and the Police....

    So just goes to show if you use anything other than Firefox or IE and you rely on someone else to interogate access logs or IDS logs you too could be sitting in a paper suit in a cell :(

    There is something more going on here than just using a different browser. Police would never arrest someone just because of the browser he was using. Was he trying to hack into the website? If he did that, then it is a crime and the police had the right to arrest and jail him (hopefully for a long time).

  • by L.Bob.Rife ( 844620 ) on Friday January 28, 2005 @04:07AM (#11501192)
    But the real question is, did this request go through a judge to get a warrant, or was it simply some sysadmin making a claim (which could be easily refuted by an expert) and the police arresting somebody on one mans word.

    Will police arrest somebody if I claim they killed somebody, or do they still need evidence?
  • by odyrithm ( 461343 ) on Friday January 28, 2005 @04:11AM (#11501212)
    The kids intuitive, you can lean allot from him people of slashdot.

    But aside from the joking, being a brit and having used BT for ADSL; yes I would say they are moronic enough to have done something as stupid as this.
  • Insightful??? (Score:5, Insightful)

    by Anonymous Coward on Friday January 28, 2005 @04:13AM (#11501224)
    "Just because he eats apples doesn't mean he is not a child molester"

    Where is the connection of the two? Parent puts some claim in the room, based on a connection which doesn't exist, and is modded up?
  • by bani ( 467531 ) on Friday January 28, 2005 @04:15AM (#11501226)
    the police arrested him based on a complaint from BT.

    you see, BT = big corpration. big money. police = BT bitches. what BT says, police does. no questions asked.

    though it looks like in this case, the unquestioning obedience of the police to BT is going to backfire in this case.

    this is not too different from what happens in the usa. police being at the beck and call of big business. and every once in a while a PR disaster as some big corp makes a mistake and the police get a black eye for unquestioningly following it without any investigations.
  • Re:Insightful??? (Score:5, Insightful)

    by LarsWestergren ( 9033 ) on Friday January 28, 2005 @04:31AM (#11501287) Homepage Journal
    I actually thought it was pretty insightful, but I'll post instead of mod.

    So far, all comments are supporting one of two hypotheses:
    a) The story is a hoax, no one was arrested.
    b) The story is true, OMG they are after us just for using Lynx!

    Grandparent pointed out a possible third alternative:
    The person was using Lynx, the bastard really tried to hack the tsunami relief site, and that's why he was arrested.
  • by Eivind ( 15695 ) <eivindorama@gmail.com> on Friday January 28, 2005 @04:33AM (#11501294) Homepage
    Not quite, but almost.

    If you are wrongfully jailed you'll get compensation. BUT they'll subtract "housing and food", i.e. the value of the bed and the food in prison from your compensation. Which lead some journalists to report that you're supposed to "pay for jail".

  • by Kris_J ( 10111 ) * on Friday January 28, 2005 @04:33AM (#11501297) Homepage Journal
    So far there is a single, mostly unknown, source for the portions of the story pertaining to Lynx. This is notable more for how opposite the Blogsphere and mainstream media positions are on the story. Currently, only the man arrested knows the real story and I have even seen a quote from him yet. We certainly haven't been exposed to any decent journalism yet.
  • by Evets ( 629327 ) on Friday January 28, 2005 @04:42AM (#11501323) Homepage Journal
    imagine how many non-standard user agents will be showing up in bt's logs tomorrow.

    I bet there's a ton of LWP requests hitting BT as we speak.
  • Re:well (Score:5, Insightful)

    by nametaken ( 610866 ) on Friday January 28, 2005 @04:45AM (#11501332)
    It seems the good thing is we're now getting uncorroborated news stories from sites called "Boing Boing: A Directory of Wonderful Things". The BBC article makes no mention of lynx user-agent lines as the culprit.

    Can we up the bar a LITTLE?
  • by dasunt ( 249686 ) on Friday January 28, 2005 @04:46AM (#11501337)

    What's next? Sometime in the near future: Man tries to buy chocolate bar with paper money! Shock! Horror! Maybe this is just a little too random but that's where my mind travelled to.

    We are already at the point where making a large purchase with paper money is unusual.

    About two years ago, I decided I wanted a dishwasher. I went down to my bank, took out some money, checked a few places, and finally paid for a small dishwasher in cash.

    Had some extremely strange looks from the salesperson.

  • Re:Insightful??? (Score:2, Insightful)

    by ArsenneLupin ( 766289 ) on Friday January 28, 2005 @04:47AM (#11501343)
    Or a fourth hypothesis:
    • Most crackers are geeks.
    • Many geeks use non-IE browsers.
    • Therefore, among the population of non-IE using people, the percentage of hackers is slightly larger than in the general population.
    So there might be indeed a weak correlation between lynx usage and cracking activity, even if this particular user was not trying to do anything wrong. Think of it like "browser profiling"...
  • by Anonymous Coward on Friday January 28, 2005 @04:59AM (#11501378)
    Police are a little like robots. Once you let them go they WILL follow instructions. As they interpret them, not as their Creator might intend for them. Also they're only going to sensitive to the elements of the enviroment that directly pertain to their function. So sometimes funny things will happen. Such as shooting someone to death with a non-leathal weapon.
  • by dbIII ( 701233 ) on Friday January 28, 2005 @05:00AM (#11501385)
    I wouldn't put it past the police/judges in any country of being largely ignorant of what a browser agent really means
    I see it as being "the expert says this guy is a hacker, so we arrest him" - while the reality is that the "expert" isn't an expert and is not under adult supervision.

    I think we'll see a lot more of this sort of thing. Hopefully we'll get more info so the words "you got a customer arrested because you were too ignorant to do your job properly?" follow this guy around for his entire career - if justified.

    I use lynx regularly, as do many others, any sysadmin who has never heard of it is inexperienced. If someone in a workplace is browsing pr0n for eight hours a day, the only safe way (grannies doing what?) to confirm that the URLs have dodgy content is lynx or similar things, or it's the simplest way to see if your web server is up or not from a console in the cold depths of a server room.

  • by d_strand ( 674412 ) on Friday January 28, 2005 @05:08AM (#11501405)
    Police would never arrest someone just because of the browser he was using.

    BWAAAHAAAAAHHAAAAA!!! No wait, this is not even funny.

    1) The police arrested him because they thought he was hacking stuff, not because he was using Lynx.

    2) The police arrest people for insane reasons all the time in 99% of all countries. While I firmly believe there was no evil intent from enyones side in this particular case, you really need to wake up: The police are only human and most of them do whatever the people who pay their bills tell them to (that means the government, not the taxpayer).

    3)The fact that the guy was released in a few days shows us that the system is limping along OK. The "sysadmin" making the hacking claim OTOH, should now be arrested for criminal negligence/incompetence or something
  • by Anonymous Coward on Friday January 28, 2005 @05:37AM (#11501488)
    Avant is the equivalent of the scented beaks doctors were using during outbreaks of the Black Death in the middle ages ... sure, you might be lucky and not get the plague, but it had nothing to do with your fancy accessories.
  • The whole problem with this argument is that the only reason that person has eaten the prison food and used the prison bed is because they were wrongfully imprisoned.
  • by Ubi_NL ( 313657 ) <joris.benschop@g ... Ecom minus punct> on Friday January 28, 2005 @06:33AM (#11501697) Journal
    oh come on. Get off your high horse and wonder how many donations you made to Sudan where over 2 MILLION people died in the last few years.
    Yes, the tsunami is a disaster, but unfortnualtely there are many countries that are fare worse off. Just because you don't go there on holiday doesn't make it right to ignore it.

  • by ArsenneLupin ( 766289 ) on Friday January 28, 2005 @07:42AM (#11501959)
    Solution: don't ever put your own IP address anywhere inside the complaint. Leave the tcpdump log away, and only keep the Apache access.log which is sufficient enough to "prove" that an intrusion was attempted. Nobody can misinterpret your IP address as the attacker if you don't even mention your IP address in the complaint.

    Yes, your own IP still shows up in the Received headers of the mail, but anybody who spots it there has to have at least a minimum of understanding how the network works (Microsoft Outlook (tm) doesn't show these headers by default)

    Same reasoning as for change of address notices, really: if you inform some business that you changed addresses, make sure to never mention your old address (or at least not completely...), or else you can be sure that some drone will attempt to confuse old and new, and revert back the change that one of his colleagues already did...

  • by slavemowgli ( 585321 ) on Friday January 28, 2005 @08:10AM (#11502065) Homepage
    There's an easy solution to that: just make more of them. When they're common enough, people will stop hording them since they don't have any novelty value anymore.
  • by zebs ( 105927 ) * on Friday January 28, 2005 @08:13AM (#11502081) Homepage
    urgh, yes unfortunnatly. All greem, and all the same size. How any blind people in the US manage with money I don't know!
  • by Anonymous Coward on Friday January 28, 2005 @08:58AM (#11502272)
    Apparently someone thought it was funny HA HA. Not only do you have a browser that acts like Firefox but you've also have the added bonus that it could screw you over at any moment like IE.
  • by Dogtanian ( 588974 ) on Friday January 28, 2005 @09:02AM (#11502285) Homepage
    Actually, there's nothing obliging them to accept them at all. Technically, they're not legal tender, and they're only accepted as such by convention, as far as I know.

    Yeah; as far as I know, this is the truth.

    And I used to get annoyed about the English not accepting Scottish banknotes; but later on I grew up and realised that since most English (or Welsh or people from Northern Ireland for that matter) wouldn't be familiar with Scottish notes, they would have trouble differentiating the real thing from fakes.

    If *I* was running a business in England, I'd be quite happy to let my staff refuse Scottish banknotes if they weren't familiar with them, for that very reason. Pissed off customers could talk to me about it...
  • by alienmole ( 15522 ) on Friday January 28, 2005 @09:24AM (#11502402)

    The reason for spreading the news about something like this is that whether it's true or false, more information may come to light about it. That's how something like the recent faked documents scandal in the U.S. was exposed - by bloggers who questioned CBS news, and who had or were able to discover more information.

    IOW, you no longer have to sit back and suck your news from the BBC's tit, nor should you, unless that thin and sour milky substance is all you can handle.

  • by EnronHaliburton2004 ( 815366 ) on Friday January 28, 2005 @02:22PM (#11505747) Homepage Journal
    But he was using Solaris. For some reason, 'lynx' is commonly installed on Solaris 8 & 9 systems, but not 'links'.
  • by AndyL ( 89715 ) on Friday January 28, 2005 @04:12PM (#11507228)
    "when you've never seen the real one before?"

    Never seen a piece of your own currency issued from a bank less than two hundred miles away? As an American I have a hard time believing that.

    Has the automobile not yet been introduced to the UK?

    Why don't the bills circulate more? I've got in my wallet two American notes, (A $10 and a $5), If the serial numbers still run the way they used to then neither of them was issued by the nearest federal reserve bank; One of them was issued by the next one over, and one of them was issued halfway across the country!

    Do people go out of their way to segregate the money?

Get hold of portable property. -- Charles Dickens, "Great Expectations"

Working...