What Lyttle did was against the law and he knew it. He needs to be taught something here. All this was an exuse to hack. As far as a terrorist copying vital info, those servers don't carry any. There are a few servers that are accessible from the net that do, but if you think that the also store publically addressible files as well, you're mistaken. The servers that were defaced have NO sensitive data. And as for Lyttle doing the public a favor, thats a load of crap. Lyttle didn't once try to contact anyone and tell them about the problem he discovered. If he was genuinly concerned about the security of some little web server, then as soon as he found an opening, he would have sent an email or called. Especilly if he knew he wasn't supposed to be hacking. He's just a punk id out for kicks. Real hackers don't just deface a web site, and they don't just go for default passwords or downloaded scrips.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/414/12686#12686