Adrian Lamo

From Wikipedia, the free encyclopedia

Adrian Lamo
Adrian Lamo (left) with contemporaries Kevin Mitnick (center) and Kevin Poulsen.
Born	1981 Boston, MA
Other name(s)	Adrián Lamo
Notable roles	The Screen Savers Can You Hack It?

Adrian Lamo (born 1981) is an infamous former grey hat hacker and journalist, principally known for breaking into a series of high-security computer networks, and his subsequent arrest. Best known among these were his intrusions into The New York Times and Microsoft. He is also known for attempting to identify security flaws in computer networks of Fortune 500 companies and then notifying them of any found; while still illegal in many places without permission, this can be seen as a form of unsolicited penetration testing.

Contents 1 Personal 2 Professional 3 Activities and techniques 4 DNA controversy 5 Can You Hack It? 6 Trivia 7 In popular culture 8 Notes 8.1 References 9 External links

[edit] Personal

Lamo was born in Boston, Massachusetts to Mario Lamo and Mary Lamo-Atwood.^[1] Dubbed the "homeless hacker" for his transient lifestyle, Lamo spent most of his travels couch-surfing, squatting in abandoned buildings and travelling to Internet cafes, libraries and universities to investigate networks, and sometimes exploit security holes. Despite performing authorized and unauthorized vulnerability assessment for several large, high-profile entities, Lamo refused to accept payment for his services. In the past, his lifestyle allowed him to travel up and down the coasts of the United States, often by coach, carrying all necessary possessions in a backpack.

[edit] Professional

Since Lamo's sentencing, he has entered the early stages of a career as an award-winning^[2][3] journalist, studying at American River College, with writing, photography, and editorial work / collaboration appearing in Network World, Mobile Magazine, 2600 Magazine, The American River Current, XY Magazine, and others. Lamo has interviewed personalities ranging from John Ashcroft, to Oliver Stone^[4] to alleged members of the Earth Liberation Front. Lamo also has a history of public speaking - he was a keynote speaker at a government security conference in 2005 alongside Bruce Schneier, and a panelist at the Information Security In the Age of Terrorism conference.^[5]

Lamo has shown signs of increased cooperation with media since his release from federal custody, including a podcast interview with Patrick Gray in Australia, and a recent segment ^[6] on 88.1 WMBR out of Cambridge.

[edit] Activities and techniques

Adrian Lamo is perhaps best known for breaking into The New York Times internal computer network in February 2002, adding his name to confidential databases of expert sources, and using the paper's LexisNexis account to conduct research on high-profile subjects, although his first published activities involved operating AOL watchdog site Inside-AOL.com.^[7][8][9] The Times filed a complaint and a warrant for Lamo's arrest was issued in August 2003 following a 15 month investigation by federal prosecutors in New York. At 10:15 AM on September 9, after spending a few days in hiding, he surrendered to the US Marshals in Sacramento, California. He re-surrendered to the FBI in New York City on September 11, and pleaded guilty to one count of computer crimes against Microsoft, Lexis-Nexis and The New York Times on 8 January, 2004.

Later in 2004, Lamo was sentenced to six months' detention at his parents' home plus two years probation, and was ordered to pay roughly $65,000 in restitution. He was convicted of compromising security at The New York Times and Microsoft, and is alleged to have admitted to exploiting security weaknesses at Excite@Home,^[10][11] Yahoo!,^[12] Microsoft, MCI WorldCom,^[13] Ameritech, Cingular and has allegedly violated network security at AOL Time Warner, Bank of America, Citigroup, McDonald's and Sun Microsystems.^[14] Companies sometimes use proxies to allow their employees access to the internet, without giving the internet access to their internal network. However, when these proxies are improperly configured, they can allow access to the company's internal network. Lamo often exploited this, sometimes using a tool called ProxyHunter.^[14]

Critics have repeatedly labelled Lamo as a publicity seeker or common criminal, claims that he has refused to publicly refute. When challenged for a response to allegations that he was glamorizing crime for the sake of publicity, his response was "Anything I could say about my person or my actions would only cheapen what they have to say for themselves." When approached for comment during his criminal case, Lamo would frequently frustrate reporters with non sequiturs such as "Faith manages"^[15] and "It was a beautiful day."^[16]

At his sentencing, Lamo expressed remorse for harm he had caused through his intrusions, with the court record quoting him as adding "I want to answer for what I have done and do better with my life."^[17]

As of 16 January 2007, Lamo's probation was terminated, ending a three-year period during which the American government stripped him of certain opportunities, including the ability to employ any privacy protection software, travel outside certain established boundaries, socialize with security researchers, and other activities enjoyed by the public.

[edit] DNA controversy

On May 9, 2006, while 18 months into a two year probation sentence, Adrian Lamo refused to give the United States government a blood sample they demand so as to record his DNA in their CODIS system.^[18] According to his attorney, Adrian Lamo has a religious objection to giving blood, but is willing to give his DNA in another form. "He went in there with fingernail clippings and hair, and they refused to accept it, because they will only accept blood" said federal public defender Mary French. A 26 March 2007 extended evidentiary hearing is scheduled to address a motion to dismiss filed by Lamo's counsel.

On June 15, lawyers for Lamo filed^[19] another motion citing the Book of Genesis as one basis for Lamo's religious opposition to the frivolous spilling of blood: "The Book of Genesis leaves unambiguous this matter. Therein, those who would spill the blood of man are rebuked as follows: "Whoever sheds the blood of man, by man shall his blood be shed; for in the image of God has God made man." Genesis 9:6 (New International Version)."

Lamo continued: "Under this admonition, not only would I be blinding myself to the direct instructions of scripture by shedding blood, but I would similarly be casting whomever facilitated this act into sin, multiplying my culpability," setting the basis for defense counsel Mary French to urge US District Court Judge Frank Damrell to exempt Lamo from the sampling entirely, or to order his probation officer to accept some other biological product in lieu of blood, as previously offered by Lamo.

[edit] Can You Hack It?

Can You Hack It?, a documentary covering Lamo's life and times, is slated for release under the care of Trigger Street Productions.^[20] Directed by Sam Bozzo, it features Apple Computer co-founder Steve Wozniak, TechTV personality Leo Laporte, and narration by actor Kevin Spacey. The film explores the practical and ethical themes of modern computer hacking, intertwining Lamo's story with those of controversial figures throughout history.

[edit] Trivia

• Lamo remains a senior staff writer at The American River Current, and works with 2600 Magazine and XY Magazine.
• In his spare time, he donates his time and expertise to Voluntary Legal Services of Northern California, a Sacramento-based nonprofit organization providing assistance to indigent and low-income clients involved in civil litigation.
• Lamo was appointed to the Lesbian, Gay, Bisexual, Transgender, Queer and Questioning Youth Task Force by San Francisco Supervisor Tom Ammiano.^[21]
• Lamo was bumped from a segment of NBC Nightly News when, after being asked to demonstrate his skills for the camera, he hacked NBC in under five minutes.^[22]

[edit] In popular culture

• The Wholly Book of Clichés & Cabbages, a Discordian RPG based on the RISUS system cites Lamo as an embodiment of the Discordian Hacker character class, an AD&D-style prestige class of Hacker, noting "A Discordian Hacker has the abilities of the pulp hacker, but utililizes them much differently." .^[23]

[edit] Notes

[edit] References

• Losing His Religion: Techfocus interviews Adrian Lamo Bill Royle, TechFocus.
• Slashdot.org Discussion regarding TechFocus interview 09 April 2004.
• Inside The Hacker Mind Chris Null, New Architect December 2002.
• New York Times Internal Network Hacked Kevin Poulsen, SecurityFocus 26 February 2002.
• Lamo Bumped from NBC After Hacking Them Kevin Poulsen, SecurityFocus 27 August 2002.
• Adrian Lamo charged with computer crimes Kevin Poulsen, SecurityFocus 5 September 2003.
• Lamo Pleads Guilty to Times Hack Kevin Poulsen, SecurityFocus 8 January 2004.
• Off the Hook Interview - April 7, 2004; with Emmanuel Goldstein and Bernie S. on the phone with Lamo's comments recorded here
• 'Homeless Hacker' speaks out Tech News on ZDNet
• He Hacks by Day, Squats by Night Noah Shachtman, Wired News 6 March 2002.
• Hollywood.com Preliminary documentation of Trigger Street Productions documentary involving Lamo.
• BusinessWeek Stop Him Before He Hacks Again
• MacUser.com Woz + Kevin Spacey + Adrian Lamo = A Movie about Hacking?

[edit] External links

• Lamo, Adrian. Just Breathe. Resist!ca. Retrieved on October 20, 2006.
• TechTV Video - Adrian Lamo interviews prior to arrest.
• Articles about Adrian Lamo dating back to 2001 and pro-Lamo advocacy. FreeLamo.org. Retrieved on October 20, 2006.
• Adrian Lamo at the Internet Movie Database
• Can You Hack It? at the Internet Movie Database

Persondata
NAME	Lamo, Adrian
ALTERNATIVE NAMES	"Doctor" Lamo
SHORT DESCRIPTION	American programmer and writer
DATE OF BIRTH	1981
PLACE OF BIRTH	Boston, Massachusetts
DATE OF DEATH
PLACE OF DEATH