Attacks/Breaches
10/8/2008
12:51 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

Sarah Palin E-mail Hack Suspect Indicted

A Tennessee Democratic state representative's son faces a maximum of five years in prison, a $250,000 fine, and three years of supervised release if convicted.

The U.S. Department of Justice on Wednesday said that David C. Kernell, 20, the University of Tennessee student tied by Internet sleuths to the hacking of Alaska governor Sarah Palin's Yahoo Mail account, has been indicted.

A federal grand jury in Knoxville, Tenn., indicted Kernell on Tuesday for intentionally accessing Palin's e-mail account without authorization. The indictment alleges that Kernell reset the account's password by answering several password recovery security questions, that he read Palin's e-mail, made screenshots, and that he posted that information and the account's password on a public Web site.

Kernell, the son of Tennessee State Rep. Mike Kernell, a Democrat, faces a maximum of five years in prison, a $250,000 fine, and three years of supervised release if convicted.

In contrast to the recent "failure of citizen journalism," when an Internet user's false report that Apple CEO Steve Jobs had suffered a heart attack led to a decline in Apple's stock, citizen forensics pointed to Kernell's possible involvement in the Palin e-mail hack long before the legal system reached the same conclusion.

Days after the breach was disclosed in mid-September, bloggers had identified an association between the alias "rubico" and Kernell. The indictment alleges that Kernell used the online nicknames "rubico" and "rubico10."

According to The Tennessean, Kernell was arraigned on Wednesday, arriving at the courthouse in shackles and handcuffs. He was released without bond. Under the terms of his release: he cannot leave the Eastern District of Tennessee without permission; he cannot have a computer, though he can access e-mail and the Internet for class work; and he cannot have any contact with Governor Palin or her family.

The trial date is scheduled for December 16.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading, September 16, 2014
Malicious software is morphing to be more targeted, stealthy, and destructive. Are you prepared to stop it?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3090
Published: 2014-09-23
IBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

CVE-2014-3101
Published: 2014-09-23
The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

CVE-2014-3103
Published: 2014-09-23
The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http...

CVE-2014-3104
Published: 2014-09-23
IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

CVE-2014-3105
Published: 2014-09-23
The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account n...

Best of the Web
Dark Reading Radio