Hacking damages 'routinely' overstated

Victims of hacking attacks are routinely overstating the damage costs and, in the case of Gary McKinnon, may be using them for other purposes, according to experts.

Speaking at the Infosecurity conference, McKinnon stated that the damages being claimed by the US government have been overstated and are being used as an extradition tool.

His comments came during the Hacking panel that closed the security event in London yesterday.

"The US government overestimates damages. To extradite someone they have to prove the crime has cost at least $5,000 or would result in at least one year in prison," he said.

"I was charged with causing $5,000 worth of damage to each computer I accessed. I do not know where they got that figure from but they are not shopping at PC World."

McKinnon is not alone in this assumption. Another hacker, known only as 'Mark', detailed a case in which a legal firm had been hacked in an attempt to find information about an ongoing case.

When the perpetrators were caught the firm tried to claim £10,000 per server, an amount thrown out by the judge.

"It does not work like that in crime. You get only the damages done. That was done in Gary McKinnon's case as well," said 'Mark'.

"The US included the cost of investigation of the case, which was paid for by the taxpayer in the form of police funding anyway."

See also:

IT workers back 'Nasa hacker' McKinnon

Community service or a fine a better sentence, survey claims  09 Apr 2007

Home Secretary sanctions McKinnon extradition

Pentagon hacker 'surprised' by speed of decision  07 Jul 2006

US wins extradition of British hacker McKinnon

McKinnon wins all inclusive holiday to Cuba  10 May 2006

McKinnon slams gung-ho US hacking law

Alleged hacker not looking forward to being fitted for an orange jumpsuit  28 Apr 2006

British hacker out on bail

McKinnon vows to fight on  09 Jun 2005

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!