But at what point did he penetrate the system? He did not take over the system, he did not try to figure out the administrator password, he did not exploit any buffer overflows. McCarty asked the database the right question. He did grab a few records which maybe not have been the smartest thing in the world to do without a get-out-of-jail letter, but he needed something to make USC standup and take notice.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/191/974#974