Attacks/Breaches
9/24/2008
04:57 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Sarah Palin E-Mail Hacking Grand Jury Returns No Indictment

A Tennessee Democratic state representative's son was linked last week to involvement in the breach of the Republican vice presidential candidate's Yahoo Mail account.

A federal grand jury convened in Chattanooga, Tenn., to hear evidence in the alleged hacking of vice presidential candidate Sarah Palin's Yahoo Mail account ended its session on Tuesday without an indictment against University of Tennessee student David Kernell.

Kernell, the 20-year-old son of Tennessee Democratic state representative Mike Kernell, was linked last week to an e-mail account that was used to post a purported confession of involvement in the breach of Palin's Yahoo Mail account that was posted to an online forum.

According to Wired.com and Portfolio.com, the IP address used to access Palin's Yahoo account belongs to Pavlov Media, an Illinois-based ISP that provides Internet service to the Knoxville, Tenn., housing where Kernell lives.

Federal investigators searched Kernell's apartment in Knoxville, Tenn., over the weekend, local newspapers report.

Three of Kernell's friends testified behind closed doors at the grand jury hearing, according to The Chattanoogan.

U.S. Department of Justice spokesperson Laura Sweeney declined to discuss the grand jury's actions. She said that the DOJ's review of the allegations that Alaska Gov. Sarah Palin's personal e-mail account had been hacked is ongoing.

Kernell's family has retained Wade V. Davies, a Knoxville attorney with Ritchie, Dillard & Davies PC, to represent him.

In a statement to the media, Davies said, "This is a difficult time for David and his family. The Kernell family wants to do the right thing, and they want what is best for their son. We are confident that the truth will emerge as we go through the process."

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8370
Published: 2015-01-29
VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allow host OS users to gain host OS privileges or cause a denial of service (arbitrary write to a file) by modifying a configuration file.

CVE-2015-0236
Published: 2015-01-29
libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.

CVE-2015-1043
Published: 2015-01-29
The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS users to cause a guest OS denial of service via unspecified vectors.

CVE-2015-1044
Published: 2015-01-29
vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to cause a host OS denial of service via unspecified vectors.

CVE-2015-1422
Published: 2015-01-29
Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) horder[], (2) jak_catid, (3) jak_content, (4) jak_css, (5) jak_delete_log[], (6) jak_email, (7) jak_extfile, (8) jak_file, (9) jak_hookshow[], (10) j...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.