Language Selection

English French German Italian Portuguese Spanish

Teenager gets suspended sentence for Internet worm

Filed under
Legal

The German teen-ager who wrote the Sasser Internet worm was convicted of computer sabotage on Friday and given a suspended jail sentence of one year and nine months.

A court in the northwestern German town of Verden said Sven Jaschan, 19, concocted his plans over a long period and worked with "mischievous delight" to create new, better and faster versions of the worm, which spread over the Microsoft Windows operating system in May 2004. "His goal was to improve the computer worm he programmed, especially increasing the speed with which it spread and thus to maximize the damage he intended to cause," the court said.

"He was in competition with others and caused immense, incalculable damage."

Jaschan had confessed to creating the worm, which knocked out an estimated one million computers in homes and businesses.

Sasser victims ranged from the British Coastguard to the European Commission, Goldman Sachs and Australia's Westpac Bank. Some security firms called it the most destructive worm ever.

Described by authorities as a "computer freak," he pleaded guilty to charges of data manipulation, computer sabotage and interfering with public services.

However, because he was 17 when the crimes were committed, Jaschan was tried in a youth court and his punishment was far short of the maximum sentence of five years in jail for computer sabotage under German law.

The court said that, while Jaschan had acted with "great intensity and shown enormous criminal energy," he had not done so for material gain. It noted he had been in a "difficult social situation."

NEED FOR RECOGNITION "He was very introverted and extremely shy at that time and was not integrated into his school class, which meant he had a strong need for recognition which he could achieve through his special abilities as a programmer," the court said.

"In addition, the court took into account the behavior of the accused after the act. He showed it was possible for him to complete a decent education with obvious success and achieve stable relationships."

Prosecutors had called for a two-year suspended sentence and 200 hours of community service. The defense argued for a maximum sentence of one year's probation.

Court spokeswoman Katharina Kruetzfeldt said Jaschan had also been ordered to do 30 hours' community service.

Microsoft, which offered a $250,000 reward for information leading to Jaschan's arrest, told Reuters the case showed it was ready to move quickly to identify and hold responsible the authors of damaging computer worms and viruses.

"Microsoft Corp. commends German law enforcement for its work on the arrest and conviction of the Sasser worm author," the company added.

Source.

More in Tux Machines

Kernel: Linux 4.15 and Intel

  • The Big Changes So Far For The Linux 4.15 Kernel - Half Million New Lines Of Code So Far
    We are now through week one of two for the merge window of the Linux 4.15 kernel. If you are behind on your Phoronix reading with the many feature recaps provided this week of the different pull requests, here's a quick recap of the changes so far to be found with Linux 4.15:
  • Intel 2017Q3 Graphics Stack Recipe Released
    Intel's Open-Source Technology Center has put out their quarterly Linux graphics driver stack upgrade in what they are calling the latest recipe. As is the case with the open-source graphics drivers just being one centralized, universal component to be easily installed everywhere, their graphics stack recipe is just the picked versions of all the source components making up their driver.
  • Intel Ironlake Receives Patches For RC6 Power Savings
    Intel Ironlake "Gen 5" graphics have been around for seven years now since being found in Clarkdale and Arrandale processors while finally now the patches are all worked out for enabling RC6 power-savings support under Linux.

Red Hat: OpenStack and Financial News

Security: Google and Morgan Marquis-Boire

  • Google: 25 per cent of black market passwords can access accounts

    The researchers used Google's proprietary data to see whether or not stolen passwords could be used to gain access to user accounts, and found that an estimated 25 per cent of the stolen credentials can successfully be used by cyber crooks to gain access to functioning Google accounts.

  • Data breaches, phishing, or malware? Understanding the risks of stolen credentials

    Drawing upon Google as a case study, we find 7--25\% of exposed passwords match a victim's Google account.

  • Infosec star accused of sexual assault booted from professional affiliations
    A well-known computer security researcher, Morgan Marquis-Boire, has been publicly accused of sexual assault. On Sunday, The Verge published a report saying that it had spoken with 10 women across North America and Marquis-Boire's home country of New Zealand who say that they were assaulted by him in episodes going back years. A woman that The Verge gave the pseudonym "Lila," provided The Verge with "both a chat log and a PGP signed and encrypted e-mail from Morgan Marquis-Boire. In the e-mail, he apologizes at great length for a terrible but unspecified wrong. And in the chat log, he explicitly confesses to raping and beating her in the hotel room in Toronto, and also confesses to raping multiple women in New Zealand and Australia."

Review: Fedora 27 Workstation

On the whole there are several things to like about Fedora 27. The operating system was stable during my trial and I like that there are several session options, depending on whether we want to use Wayland or the X display server or even a more traditional-looking version of GNOME. I am happy to see Wayland is coming along to the point where it is close to on par with the X session. There are some corner cases to address, but GNOME on Wayland has improved a lot in the past year. I like the new LibreOffice feature which lets us sign and verify documents and I like GNOME's new settings panel. These are all small, but notable steps forward for GNOME, LibreOffice and Fedora. Most of the complaints I had this week had more to do with GNOME specifically than Fedora as an operating system. GNOME on Fedora is sluggish on my systems, both on the desktop computer and in VirtualBox, especially the Wayland session. This surprised me as when I ran GNOME's Wayland session on Ubuntu last month, the desktop performed quite a bit better. Ubuntu's GNOME on Wayland session was smooth and responsive, but Fedora's was too slow for me to use comfortably and I switched over to using the X session for most of my trial. Two other big differences I felt keenly between Ubuntu and Fedora were with regards to how these two leading projects set up GNOME. On Ubuntu we have a dock that acts as a task switcher, making it a suitable environment for multitasking. Fedora's GNOME has no equivalent. This means Fedora's GNOME is okay for running one or two programs at a time, but I tend to run eight or nine applications at any given moment. This becomes very awkward when using Fedora's default GNOME configuration as it is hard to switch between open windows quickly, at least without installing an extension. In a similar vein, Ubuntu's GNOME has window control buttons and Fedora's version does not, which again adds a few steps to what are usually very simple, quick actions. What it comes down to is I feel like Ubuntu takes GNOME and turns it into a full featured desktop environment, while Fedora provides us with just plain GNOME which feels more like a framework for a desktop we can then shape with extensions rather than a complete desktop environment. In fact, I think that describes Fedora's approach in general - the distribution feels more like a collection of open source utilities rather than an integrated whole. Earlier I mentioned LibreOffice can work with signed documents, but Fedora has no key manager, meaning we need to find and download one. Fedora ships with Totem, which is a fine video player, but it doesn't work with Wayland, making it an odd default choice. These little gaps or missed connections show up occasionally and it sets the distribution apart from other projects like openSUSE or Linux Mint where there is a stronger sense the pieces of the operating system working together with a unified vision. The big puzzle for me this week was with software updates. Linux effectively solved updating software and being able to keep running without a pause, reboot or lock-up decades ago. Other mainstream distributions have fast updates - some even have atomic, on-line updates. openSUSE has software snapshots through the file system, Ubuntu has live kernel updates that do away with rebooting entirely and NixOS has atomic, versioned updates via the package manager, to name just three examples. But Fedora has taken a big step backward in making updates require an immediate reboot, and taking an unusually long time to complete the update process, neither of which benefits the user. Fedora has some interesting features and I like that it showcases new technologies. It's a good place to see what new items are going to be landing in other projects next year. However, Fedora feels more and more like a testing ground for developers and less like a polished experience for people to use as their day-to-day operating system. Read more