Kevin Mitnick

From TinWiki.org

Kevin David Mitnick (born August 6, 1963) is a computer security consultant who was a controversial computer hacker in the late 20th century.

His known hacking achievements included using the Los Angeles bus transfer system to get free rides, evading the FBI, hacking into DEC systems to view VMS source code, gaining full admin privileges to an IBM minicomputer at the Computer Learning Center in Los Angeles, and hacking Motorola, NEC, Nokia, Sun Microsystems and Fujitsu Siemens systems. He is also linked to numerous other acts including allegedly hacking the FBI itself and the myth that he issued a false press release for Security Pacific Bank causing a $400 million loss in market capitalization.

In 1999, Mitnick admitted to the authorities to illegally gaining access to computer networks and acquiring copies of software as part of a plea bargain agreement before the United States District Court for the Central District of California in Los Angeles. Though Mitnick has been convicted of computer related crimes and possession of several forged identification documents, his supporters argue that his punishment was excessive. In his 2002 book, The Art of Deception, Mitnick states that he compromised computers solely by using passwords and codes that he gained by social engineering. Mitnick did not use software programs or hacking tools for cracking passwords or otherwise exploiting computer or phone security. In the context of other hacking during that time and since, his actions seem minor by comparison.

Mitnick served five years in prison, of which four and a half years were pre-trial, and eight months were in solitary confinement. His release from prison was on January 21, 2000. He was under supervised release until January 21, 2003. After that, he was initially restricted from using any communications technology other than a landline telephone. Mitnick fought this decision in court, and the judge ruled in his favor, allowing him to access the Internet.

Mitnick now runs Mitnick Security Consulting, a computer security consultancy.

References