Man Mines Facebook For Security Questions, Nabs Nude Photos From Email 257
itwbennett writes "George Bronk, 23, has pleaded guilty to charges that he broke into the e-mail accounts of thousands of women, scouring them for nude photos that he then posted to the Internet. How he did it: He searched his victims' Facebook pages for answers to common security questions and then logged in to their e-mail accounts. In one case he persuaded a victim to send him even more explicit photographs by threatening to post the ones he'd stolen if she didn't. Bronk faces 6 years in prison on felony hacking, child pornography and identity theft charges."
Re:Article in summary redirects (Score:5, Interesting)
Indeed. It would appear ITWorld is vulnerable to a simple XSS comment post.
<div id="comments">
<div class="header">Comments</div>
<div class="comment_links">
<span class="num_comments"><a href="/comments/133630">1 comment</a></span>
<span class="add_comment"><a href="/comment/reply/133630#comment-form">Add a comment</a></span>
</div>
<div class="comment content_item">
<h3>(No subject)</h3>
<META http-equiv="refresh" content="2;URL=http://swift-cars-insurance.blogspot.com/">
</div>
</div>
Mountaineer76 provides us [slashdot.org] with a print version of the article [itworld.com] which isn't affected, though.
PS: WTF is it with Slashdot's broken support for paste? Trying to recreate the goodness of iOS 1?
Re:Security Questions Security Risk (Score:4, Interesting)
Why not try using the Linux/Cygwin command line?
echo "mother's maiden name" | md5sum | sha1sum
If you want to be fancy:
(echo -n "string1" ; echo "string2" | md5sum) | sha1sum
(P.S. For anyone foolish enough to think otherwise, I personally use a more sophisticated Python script for this, don't waste your time trying to break into my email using this "information".)
Think of the children laws. (Score:5, Interesting)
In some states, the age of consent and child porn statutes have the same age limits.
For instance, a quick read of NV law shows the AOC to be 16. Child porn is defined as sexually explicit blah blah blah involving a person under 16. Federal law makes it a crime with a person under 18, but there may be some state line/interstate commerce nexus that needs to be fulfilled.
I didn't feel like looking at too many states, but found this same AOC/CP thing with NH-16/16.
Many states forbid distributing/exhibiting obscenity to people under 18, regardless of their AOC/CP statutes.
So, excluding the feds, it's not a crime to have sex with a 16 year old or film it. But, she can't watch the tape afterwards. It's a crime to allow her 16 year old friend to watch the act as it occurs, but not a crime to have her join. Neither of them can smoke a cigarette or have a beer afterwards. If either one were to rob,beat,kill one of their fellow particpants, they would be tried as an adult in every state in the country.
Dumbass (Score:4, Interesting)
Re:Think of the children too (Score:5, Interesting)
Interestingly enough, I've actually met a "slutty little girl" as you described it. She was a friend of one of my nieces several years ago. Girl was ~10, and was....precocious and direct. Very, very, direct regarding what men she found attractive and exactly what she wanted from them (or more specifically wanted them to do to her). It was actually really creepy. She moved a couple months after her and my niece started hanging out though, so I don't know what happened to her in the long run, or any real details as to her background.
I'd never found a girl coming on to someone quite so disturbing though, before or since.
Re:Think of the children too (Score:5, Interesting)
Re:Think of the children too (Score:5, Interesting)
Actually, legalize possession of child porn, and step up the penalties for production (or just for child abuse, since using a child to produce child pornography is itself abuse) and purchase/sale. That removes the "weaponry" portion of child porn (if I send you a CP picture, you have committed a crime is a *bad* thing) and makes those who receive such pictures accidentally (mislabeled P2P files, for example) or against their will (as in the sending a picture to your phone example) more willing to openly provide them to authorities as a way to help the producers get caught, as well as making being involved in the financial promotion of the production of child pornography still a crime.
Back in the early 90s, before the explosion of the web, I used to use AOL. I used to trade in pictures of naked women. Some guys used to send out pictures of their wives. I was 18-19 years old and had no interest in 35-40 year old housewives. I asked one guy if he had anything of someone "younger". Apparently that's a keyword for child porn. Next thing I knew I was getting inboxes full of the stuff, this was also back in the days before broadband so I had some people that I used to automatically share anything I got with before I downloaded it myself. On the first inboxing, I forwarded all of the contents to some of my trading partners. And THEN I downloaded the pictures and saw things that no normal person should ever have to see.
I deleted the jpgs and gifs from my computer, deleted the emails from my inbox, and at that time AOL allowed you to unsend an email if it had not been read. I believe that I was able to unsend them all, but if I hadn't been, I shudder to think of the things I could have been charged with. All because I wanted to see naked 18-24 year old girls...
LK
Re:Think of the children too (Score:5, Interesting)
As you suggest above, I knew it wasn't my place to investigate, but that sounded pretty serious, so I told my GF's mother, who immediately went to the principal and school counselor, and they took the girl out to question her right away.
In the retelling later, my GFM said that the little girl clammed right up, refused to talk, until finally, out of exasperation, she explained that her mother is a dancer at a club, and doesn't want her little girl to follow her career path, so she forbids her to dance. At all. But she (the little one) loves to dance, so as soon as mommy goes to work in the evenings, she and daddy put on a record and dance all over the house. Clothes on, no touching.
I was soooo relieved to hear that it was nothing.