Gary McKinnon deserves prosecution not extradition
Posted on 26 Nov 2009 at 11:39
Davey Winder argues for Gary McKinnon's prosecution and against his extradition
Is Gary McKinnon merely a UFO-obsessed celebrity nerd with Asperger’s syndrome, who deserves a slap on the wrist (and his own newspaper column) for hacking into US military and NASA computer networks?
Or is he a cyberterrorist responsible for the biggest hack in US military history, a fugitive from justice who deserves prosecution in the US and possibly 60 years in a “supermax” prison? Actually, he’s neither.
Media coverage of his case has offered little room to reach anything beyond these two extremes, and he’s become a cause célèbre with everyone from politicians – Gordon Brown expressed sympathy, and Labour MP Andrew MacKinlay will stand down at the next election in protest at the handling of his case – to celebs such as Sting and Stephen Fry.
As for the man on the Clapham Twitterbus; more than 2,000 Twits display “Free Gary” ribbons on their profiles...
Now I disapprove of McKinnon’s extradition – which might surprise you, as I’m an IT security consultant – but that’s because it depends on a one-sided, flawed, knee-jerk agreement reached after the 9/11 attack as part of the War Against Terror, and some loner poking around in NASA computers for little green men barely constitutes a terrorist threat.
A senior Pentagon officer has stated that McKinnon left “silly and anti-American messages” as a measure of how serious the breach was. I’m not alone either, as a Sophos poll of IT professionals showed that 71% feel that McKinnon should be prosecuted but not be extradited.
His Asperger’s condition needs to be taken as greater mitigation than the court appears to have allowed, and sending him for trial and almost certain lifetime detention in the US may be life-threatening, which looks like a cruel and unusual punishment.
What I will not support is the Free Gary campaign. McKinnon is a self-confessed hacker, known as Solo, who denies causing damage but admits accessing secret military and government systems by using a Perl script to search for blank, default passwords.
He doesn’t deserve to go scot-free, because that would send entirely the wrong message to other hackers. He doesn’t deserve to go scot-free, because he’s broken the law. And he certainly doesn’t deserve to go scot-free simply because he’s become the focus of a campaign that has more to do with public distrust of the current UK Government than with the nature of his crime.
It may be too late to get beyond the media hype and back to the core issues, but what I’d like to see is McKinnon admit his guilt to a UK court, accept his punishment like a man – be that prison or a fine – and then move on.
I’d also like to hear more people asking how it was so easy for one UFO-obsessed nerd to break into so many supposedly important and secret military networks, just after the US had experienced 9/11 and was on the highest possible terrorist alert status.
Download a year of Davey Winder's Online Security columns by heading to our Free Downloads site
From around the web
Gary DID admit to charges in writing!
Great articles, I agree with most points.
However, you have incorrect information: Gary DID admit to charges of computer misuse and unauthorised files access at NASA and Pentagon.
His solicitors submitted it to High Court in late 2008 but the court refused to prosecute him sighting lack of evidence as the reason (the US side failed to provide any proof other than their allegations).
The danger here is because UK courts were told all the evidence is in US (which by US prosecution's own admission will be the 'hardest thing to prove' as they did not manage to record anything properly) Gary will be prosecuted in US regardless because they've since changed the law whereby prosecutors are not required to provide any proof when it comes to military computers - only an accusation is enough to convict ANYONE!
That's not justice. That would not be allowed in UK.
And the worst thing about it is Gary is not really fit to stand trial because of his other impairments on top of just Asperger's. He is clinically depressed and has had paranoid delusions for quite some time: he actually believes in UFO's and aliens and is terrified that he'll be tortured by aliens once he sets foot in US. That fear alone will push him over the edge - a clear case of someone being literally driven mad if there ever was one.
By Rozagy on 26 Nov 2009 ![]()
I think that's splitting hairs. He's admitted guilt but the question the court's been dealing with at the time has been if he should go to America - it's just off topic. Legally he might as well have worn a sandwich board and stood on the street. If he's prosecuted (like in the headline) for the hacking offence in the UK then that's the right result. The article seems right.
By steviesteveo on 26 Nov 2009 ![]()
apply some common sense
i think gary certainly should be prosecuted for hacking, however the possible sentence for conviction in the US dosen't fit the crime. The americans should accept some responibility for leaving it so easy for someone to hack their systems! 60 years in jail is extreme and ridiculous for this crime. The hacking took place from the UK, so the prosecution should take place in the UK. Also, the UK government and prosecution service should stop pandering to every whim of the US!
By lablarry on 26 Nov 2009 ![]()
Three points
First, as the last paragraph say, someone should be pulled up about how easy it was to get into the U.S. Military system - but that's not going to happen in the U.K. - it must be brought up in a U.S. court and followed up there.
Secondly, I'm getting fed up with hearing about how he WILL get 60 years in a max security centre - that's for the court to decide and I very much doubt if it will happen. They do have lawyers over there and quite likely some very good ones will take the case- high profile stuff.
As for the prosecution not having to submit evidence... Sorry, but unless he really chooses some seriously bad representation, this will be thrown out - there is something about having a written constitution that is very helpful for stupidity in legislation
By greemble on 27 Nov 2009 ![]()
When interviewed on tv he sounded ok to me. Can't do the time? Don't do the crime!
By CaptStan on 28 Nov 2009 ![]()
Prepare the noose
Deserves prosecution, not extradition? Bull. He didn't hack into MI5/6 computers, he allegedly committed a crime or crimes against the U.S. Don't like the extradition treaty signed between the US and UK after 9/11? Elect new leaders and get them to change or rewrite the treaty. Especially now that you have leverage over how many troops to commit to Afghanistan.
Only on trial, after the facts are heard in court, might we really find out what this individual was up to. Aspergers? Little green men? All after the fact. It's a very good defense to claim a diseased mind AFTER allegedly committing a crime leading to possibly serious jail time. As for searching for UFOs? Is that what he really was doing? Or might any actions he took that will be revealed in court show something else instead of, or in addition to, the "cover story" of looking for aliens. Well thought out defense if he thought of using this as a defense prior to his actions, or was it invented by his attorney, we'll probably never know.
He doesn't admit damage but admits cracking government and military systems? Well, you know what, there's the damage. Someone, or some others will need to conduct a forensic examination of those systems to find out exactly what happened, how, when, etc. That's a cost, regardless of the original security in place prior to the break-in that will be born by the US taxpayer. That in itself is damage. Cleaning up the anti-US "messages" left behind, and just finding them, is more "damage" as time and money needs to be spent looking for the unauthorized entries. And are these really just "messages" or perhaps scripts that take other actions as well? We'll find out in court.
Barely constitutes a terrorist threat? Your opinion. The fact that time and energy, IT investigators and forensic examinations of the affected systems with people with very high security clearances had to investigate, document and then help secure the systems pulled those individuals with their very high security clearances away from other critical work needed to be done during the war against the terrorists, part of which we all know is online, tech related, or disk/encryption cracking related or steganography related, and in all likelyhood is the work performed by US government workers who would also be tasked with investigating the Gary case. As has been noted repeatedly in Congressional testimony, the US is shorthanded in many areas in conducting the types of electronic investigations required to stop a terrorist attack/cell, crack a hard drive possibly containing Al Qaeda operations details, or sift through and interpret audio intercepts.
Don't like the possible jail sentence involved in breaking into US military or government computers? Don't do the crime. Decrying the possible long jail sentences involved in such crimes won't win you any sympathy. Just don't do it. Just as Gary McKinnon should rot in prison for f*cking with government and military computers while that government is fighting a war to prevent possible weapons of mass destruction from falling into the wrong hands and being unleashed upon one or more US cities, or those of our allies if they can't get into our borders, just as the government is saying, better there than here, Gary McKinnon decides he has the right to crack US government and military computers and express his opinion of the US in messages left on those computers, regardless of any cover story of little green men? Well, you know what? Having personally been affected by 9/11, I hope if convicted, once convicted, he is required to grab his ankles nightly for the duration of his sentence here in the US. The short sentence that it will be. Should an individual be caught cracking a US government and military computer system and that individual is identified as an Al Qaeda agent, then it's possible that the individual may receive something halfway or more than the halfway reaching the maximum sentence. Gary McKinnon otoh will likely be sentenced following some guidelines as a first time offender, and will very likely be sentenced to little or no jail time, especially if his "aspergers" excuse stands up. In all likelyhood, Gary McKinnon will be tried in New York or Virginia, both places where a liberal "progressive" jury with the same ideals as it seems as those in the UK (slap on the wrist, he's just a misguided youth, it's society's fault...) will in all likelyhood choose or recommend a minimal sentence with little or no jail time.
Just as the blind phone phreaker finally got some jail time, no sympathy should be given to Gary McKinnon, using a difficult to diagnose, opinion-based rather than science-based "condition" of Aspergers, diagnosed AFTER getting caught. He understands what he did? He's not mentally retarded or "challenged"? Then convict and sentence. As long as possible. And with a lonely, tall, fat, linebacker of a cell mate to keep Gary warm at night.
By storm311 on 28 Nov 2009 ![]()
Nic
Personally, for the 'damage' he caused (PR damage being the main kind it seems) US sentences are way too harsh. Anyway, he committed and admitted the crime here so he should be charged here. If the US refuses to hand over evidence to facilitate a UK trial then they should let him go...
By longn on 28 Nov 2009 ![]()
Medical note
Asperger Syndrome does not mean that the person cannot tell right from wrong. AS is included in the autistic spectrum; it involves a complete lack of empathy and understanding emotions. Any person with AS is simply different, not ill or unintelligent. Indeed those of Asperger Syndrome are usually very clever in maths, physics, music or art and this explains his ability to be a successful hacker.
Knowing right from wrong obviously reveals his actions to be knowingly illegal and that he ran the risk of prosecution. However, prosecution in the US appears to be almost entirely as a result of their appalling lack of security and wanting to make an example of him. But there are many hackers in the US and some of those have caused severe problems for various agencies, all of which should have had better protection. Presumably this case has enabled the US to tighten up security; but there are cleverer hackers out there that the US should be much more concerned about, and this prosecution is not going to deter them. The US should concentrate on getting their systems so secure that hackers cannot gain access let alone do damage.
By Jaguar on 29 Nov 2009 ![]()
Non-terrestrial officers don't need passwords
What the consensus media is ignoring is that McKinnon found a list of "non-terrestrial" officers, as well as uncovering information about "Building 8″ -- the place at NASA where teams of workers supposedly sanitize all the moon photos before allowing the public to see them.
If McKinnon had deleted critical files and caused damage to the various Pentagon/NASA networks in 2001/2002, then a 3 year sentence sounds reasonable, I suppose, seeing as some of the systems McKinnon supposedly "hacked" had had no passwords or firewalls -- he just logged on, as I understand it, so using the term "hacker" is really a contradiction in terms.
By popeye91 on 30 Nov 2009 ![]()
Spot the one who believes the US hype in the above comments...
To quote Bill Hicks:-
Go back to bed, America, your government has figured out how it all transpired. Go back to bed America, your government is in control. Here, here's American Gladiators. Watch this, shut up, go back to bed America, here is American Gladiators, here is 56 channels of it! Watch these pituitary retards bang their skulls together and congratulate you on living in the land of freedom. Here you go America - you are free to do what well tell you! You are free to do what we tell you!
By mspritch on 3 Dec 2009 ![]()
The Poor Lad
Daddy was no doubt a drunk that beat him. Mommy ran a daycare and fondled all the little boys. Big sister worked the streets - no wonder the poor lad turned out this way. I heard it all in my 23 years working jails. Wake up - this guy is a hacker and he belongs in a crowded cell with other hackers, all spammers, and about a dozen very large computer-literate sex deviats.
By POKOman on 8 Dec 2009 ![]()
Realities
The only (to me) worrying thing is that a man sat (probably) in a darkened room. He accessed a system expected to be impenetrable, left a few messeges and not really anything more. There's not really that much evidence either. In such a situation any (IT included) security operation would/should have kept exceptionally silent. Instead the might of the USA on its 52nd state (called the UK) demands in a high profile manner to extradite him.
So if he goes to the US he gets 60 years. OTOH murderers don't get that long - do they?
Michael
By photomanlondon on 12 Dec 2009 ![]()
Further Bullshit
storm911 Missing a repeat of Friends because of the 9/11 news coverage doesn't really constitute "Having personally been affected by 9/11". Now f u c k off.
By dodge1963 on 17 Dec 2009 ![]()
dodge1963
Can't stand friends. It's a waste of television space. As for missing a television show as being my "having personally been affected" reason, wtf do you know? With the large number of people dead and injured on 9/11, many, many people have been personally affected. I lost a friend who was one of the firefighters that rushed into the buildings that day, my cousin who worked for one of the brokerage firms was able to get out in time otherwise he would have been killed as well, and one of my business associate's wife was killed as well. I worked in those buildings years earlier, and guys I worked with were stationed in each of those buildings on 9/11. Some got out, some didn't.
I repeat what I said earlier, Gary knew what he was doing when he did it, according to the allegations. If proven, he deserves the maximum sentence allowed under the law, but most likely will receive a slap on the wrist like you hope. If you can't do the time, don't do the crime. Crying over the harshness of the time? Then don't do it. Simple.
"Nic:
Personally, for the 'damage' he caused (PR damage being the main kind it seems)"
Do you have access to evidence we don't know about? Perhaps you should join the defense team?
"US sentences are way too harsh."
Then don't break US law and you won't worry about how "harsh" they are. You could always emigrate to the US, become a US citizen and then lobby to change the "harshness" of the penalties, and vote out law and order type reps and vote in liberal reps to hopefully get the "harshness" removed from the sentences. Or just advocate for not doing the crime to begin with.
"Anyway, he committed and admitted the crime here so he should be charged here. If the US refuses to hand over evidence to facilitate a UK trial then they should let him go...
By longn on 28 Nov 2009"
He remotely accessed US military or government computers. So the crime was committed where the computers are located. It would be interesting to know what the law is if Gary M accessed US military computers that resided on UK soil (not US embassy soil). But that aside, just because he sat in a basement in the UK while he hacked into US government computers "across the pond" doesn't make it a UK crime, or a non-extraditable crime. As to the US handing over evidence for a UK trial, that is negated by the crime occuring on US government computers located in the US. And even if it were a UK trial, and the US decided not to hand over some evidence because of national security or other reasons, you really believe he should go free? Will you throw him a party as well?
Gary McKinnon is the perfect example. Don't hack into US computers if you can't do the time, or don't like the time. Further, it should be a lesson to all, don't hack into any government's computers. For any justification to be posted later as extreme examples of certain circumstances it would be ok to hack into government computers, there are government workers who are professionals at this, leave it to them. If you face jail time for actions you take in gaining unauthorized access to government computers, then you should consider whether it is worth the risk. If not, don't do it. If it is worth the risk, save us you whining and crying and mental retardation excuses and take your punishment like a man.
By storm311 on 30 Dec 2009 ![]()
Gary McKinnon
No-one has mentioned the fact that Gary appeared on a lengthy Youtube session, speaking alone to camera. This was some years ago, closer to the time of the actual hack, before the tumult and the shouting. He showed no sign of Aspergers or autism generally, and was completely eloquent in everything he said. And before someone bleats that I am not an expert in autism, I will say that if someone shows no symptoms of a disease or a mental problem, it is reasonable to say that even if he has it, it isn't affecting him in his relations with the world. He said that he hacked into the American computer with nothing special in mind, and while there, happened to see a mention of UFOs. This inspired him to delve further in the hope of discovering something secret about the subject, or something indicating the existence of UFOs that was being hidden by the American government. So, no obvious Aspergers, and no intent to find UFOs. When caught, he says he was offered a plea bargain in which he would serve four years in an American jail. Not sixty years or anything like it. He agreed to this, he said, and asked for the offer to be put in writing. This was not forthcoming, apparently. All this was to camera, in his own words, with no visible lawyers or even mum. He said his girlfriend had dumped him, likely because of his obsession with computers, much as sportsmen and others get dumped when they don't pay enough attention to the girlfriend. He did not seem bitter at all, and in fact was completely calm and rational throughout the clip, which lasted about twenty minutes.
Since then, people have claimed all sorts of things on his behalf, like the threat of sixty years in jail, and the mental damage to him, and his alleged Aspergers, and anything else the lawyers and his mother can dream up. Remember Ernest Saunders, who was able to get his trial stopped because he claimed he had Alzheimers? Very unusually for an Alzheimers sufferer, he got better as soon as he left the court. And the Libyan bomber, who had three months to live, but is still socially active and apparently thriving months later? And the huge uproar about some thug who was jailed for something it was claimed he didn't do - when he got out, he shot three policemen, if I remember correctly.
Gary should have been allowed to get his trial over and done with in the US years ago; by now it would probably be just a distant memory. Instead, the agony has been prolonged for years by well-meaning but misguided people. It's enough to give anyone mental problems.
By davidkelsey3 on 25 Mar 2010 ![]()
Davey Winder
Davey is a contributing editor to PC Pro, having covered the internet as a topic since the magazine started in 1994. Since that time he's won numerous awards for his journalism, but remains a small-business consultant specialising in privacy, security and usability issues.
advertisement
- Why virtualisation hasn't slowed the growth of data
- How to make Google AdWords work for your business
- The curse of sloppily written software
- Paying for your crimes with Bitcoin
- Behind the scenes: tech support for Formula 1
- The security risk of fat fingers
- Why Windows Phone 7 isn't quite ready for business
- When will Microsoft stop fiddling with Windows 8?
- Flash down the pan?
- Metro Style apps vs desktop applications
- Chrome's shine getting lost in translation
- BytePac: the cardboard hard disk enclosure
- How tech loosens our grip on reality
- Hokum watch: Safer Internet Day
- Why I'm deleting Adobe from my PC
- Prepare to be patronised: it's Safer Internet Day
- Dear Sony, Samsung and every other tech company in the world: stop trying to be Apple
- Will Apple's Final Cut Pro X update placate the pros?
- Smartr Contacts for iPhone review
- Switching to Office 365's Outlook Web App
- VeriSign slammed for security breach cover-up
- SAP willing to share HANA with Oracle
- Why using a tablet could harm your health
- New RIM boss: no need for drastic change
- RIM founders fall on their swords
- Slow economy helps boost Red Hat revenue by 23%
- Google+ pages get multiple admins
- One in five companies lack card industry compliance
- Oil industry warns hacking attacks could kill
- British workers fear email monitoring
advertisement

