neidor~1.txt

黑客培训教程

are the approximate dates that the violations or the activities
occured that are alleged in the indictment.

          Specifically, in the second, the second count of the
indictment alleges that on July 22, 1988 as part of the wire fraud
scheme, Mr. Neidorf generated an issue of PHRACK World News in which

- 9 -

Cook -- opening statement

he announced the instigation of the Phoenix Project, the Phoenix
Project because it had been a year since the 1987, in their parlance,
collapse of the computer world by virtue of a series of law
enforcement raids. Mr. Neidorf announced here that he wanted the hacker
community to come together again to be more effective than ever.

          The next activity is the third count of the indictment,
September 19, 1988, a wire fraud allegation again, E-mail,
electronic mail, generated from Mr. Neidorf to Mr. Riggs and
Mr. Scott O, a computer hacker.

          This electronic mail, this electronic mail here also,
these are efforts by Mr. Neidorf reaching out to consolidate,
identify and pull together a group of hackers that he could be
working with for the publication of PHRACK, people that would supply
him with information and articles, and, as it turned out, people that
in fact, supplied him with stolen information, stolen from computers.

          These allegations refer more directly to the interstate
transportation and movement and file transfers of the E911 text file.

          Count Seven refers to the publication of a series of
computer articles that deal with how to break into a UNIX operating
system.

          Counts Eight and Nine refer to the text file being sent from
Neidorf back to Riggs, from Neidorf in Missouri to Riggs who was
physically in Atlanta, but who used the bulletin board, computer
bulletin board, in Lockport, Illinois, sending it back for review and
to make sure that Neidorf had done an adequate job of concealing the

- 10 -

Cook -- opening statement

nature of the file fro the point of view not the contents so much
of the file, but concealing where Riggs had stolen it from to protect
Riggs, and, to a large degree, to protect himself so that it couldn't
be identified exactly where the document had been stolen from.

          Finally, we have the publication of the E911 text file in
the PHRACK newsletter by Mr. Neidorf.

          you will be seeing the indictment in the jury room as you
deliberate. This is just an overview to give you an overfocus of
where the allegations are going to fall and the types of information
that you are going to be hearing about.

          Now, if I were you, if I were you, I would be sitting
there, as some of you may be, thinking to myself, "What have I gotten
myself in for? He's talking about computers. He's talking about
operating systems. Whooooaaaa!"

          First of all, you don't need to be a computer user, or a
computer ace, to understand what this case is going to be about. It
really deals with, in its most essential form, stealing property and
transferring property, the interstate transportation of stolen
property. So it's a simple stealing and a simple fraudulent
taking, taking by deception. But it just involves some relatively
high-tech tools. Don't let the tools confuse you from the fact of the
taking and the bottom-line information. I'm telling you to relax
about the computer jargon.

          There are several concepts that we're going to be talking
about here. What I'm going to give you is a kind of a lawyer's

- 11 -

Cook -- opening statement

description. That is supposed to let you know that it is far from
an expert's opinion on some of the things you're going to be hearing.

          (Blackboard) Well, let's talk about some of the technology
that's involved, and see if we can't make ourselves more comfortable
with it.

          I referred to the UNIX operating system. UNIX...U-N-I-X.
What is that? Well, computers speak a language. Computers speak
the language that the people that built the computer want them to
speak, or they speak the language that the people that run the
computer want it to speak. Sometimes computers can be set up so that
you can have them speak several different languages. UNIX is just a
language. It is just the language that the computer speaks. It
talks UNIX. Some of you talk about MS/DOS. It's a microsoft disk
operating system. Forget it! It's just the language that the
computer speaks.

          (Blackboard) Now, this is a theft of information. You are
gong to be coming in contact with the concept that when you take
information from a computer, what you really do is you order the
computer to make a duplicate original o what its memory is or what
it contains with respect to that particular item. And when you are
asking the computer to send that information to you, you are doing a
file transfer. I'll get to that later. You are just telling the
computer to send it to you. What the computer sends to you is a
copy. It's an exact copy in every respect of the original
information on the computer.

- 12 -

Cook -- opening statement

          So the value of the property comes from the fact that it
contains information. There is an expression that, "Information is
power". It is only power if it's communicated. That's where the
value of information comes from in our society.

          Certain types of information are protected by companies.
They are reasonably protected by companies, especially when they
become sensitive. The E911 road map and the information about where
all the stops along the way are, that was a sensitive piece of
information. You're going to be hearing about the protections that
BellSouth put on that information, and the efforts that they made to
safeguard it. So when the information is stolen, what is stolen is a
copy of the information. You will be receiving further instructions
>from the judge on all that. So it is the information that is being
stolen.

          (Blackboard) Now, the next concept--I talked about
protection--file transfers. File transfers. Here's a riddle for you:
                  "Why is a file transfer the same as a high
                  school graduation?"
Here's the answer. When you hear about this, think about a high
school graduation. They call your name from the audience. You come
up to the stirs, probably by the path that the nun ordered you to
take to get to the stage, and you had better not vary from the path.
You follow that route up to the stage, across the stage, and a file
transfer takes place at center stage in the auditorium. You reach
out, you shake hands with the principal, and with the other hand,
after you have shaken hands with the principal, you receive your

- 13 -

Cook -- opening statement

diploma, or you receive your information, you receive your file.
That's really all a file transfer is on a computer. You come up,
you are ordered, someone in a remote location, the principal in this
case, calls your name, you come up to the stage, you are the
computer on one side and he is the computer on the other side. You
shake hands. And in the computer world, all that means is that you
are able to communicate. It's actually called that. It is called a
"handshake relationship" with another computer. There are some other
words, like "protocol" and things like that, but, really, it is just
a handshake relationship with another computer.

          After the handshake is there and the principal recognizes
you to be the problem kid that he's glad to get rid of--he didn't
like you--then he gives you the file. That's the file transfer. It
is no different transferring information from one computer to
another.

          (Blackboard)  Computer network. Well, that is probably a
pretty easy concept to get hold of these days. It is really not much
different than with your televisions, especially if you have cable
television where you have some designated programming and it comes in
to your machine, your television in this case. Of course, the
difference is with cable television as opposed to a computer, with
the computer you are able to have more of an interchange with the TV
and what is going on with the program. So don't be concerned about
the network idea. Keep in mind the idea of a cable coming into your
computer as part of a centralized system. That is really all the

- 14 -

Cook -- opening statement

network is, a series of computers joined together.

          In the case of BellSouth, you are going to see that that is
a very expensive computer network. In order to provide service to
their customers, they hang a lot of computers on that network,
computers that do different things, computers that keep track of
where the people that are using the phones are at, computers that
keep track of what telephone number goes with what address, computers
that keep track of the switches, the computer switches. Now,
that's another concept I'll talk about for a second.

          (Chart) When people think of computer switches, they
are telephone switches. The concept of a lady at the switchboard
always comes to mind with a knob here that goes to a hole up here,
connecting one person to another person. Today, all of that is done
by high-speed computers, high-speed switches. They are electrical.
Because they are electrical, they are referred to as ESS. All this
means is an electronic switch. This is a computer. This computer
has the memory of how to get the numbers that are diales to the
phone that corresponds with those numbers. These computers also have
the information about how to get your call all the way across the
country, which route are we going to take to get there, which
road are we going to take.

          The Enhanced 911 system was built on these computers.
Part of the reason was because of the high speed that is involved.
You can get the emergency call through faster if it goes like thing.

          Now, the switches at various areas: Switch 1, Switch 2.

- 15 -

Cook -- opening statement

This is the first switch we produced, Switch 1. And the second
switch we produced, Switch 2. The fifth switch, Switch 5.

          When they increased the capabilities of those switches, the
way they kept track of which switch they were talking about was to
label the switches: 1 or 1A, 2, 3, 4, 5, a fairly easy way to keep
track of the switch development. But the idea is that all electronic
switches operate essentially the same. So if you have the key to
get into this (indicating), you have the keys to get into them all.

          The evidence will show that the hackers in the BellSouth
Region had the keys to get into them for a period of time.

          Now, another question, a riddle:
               "Why is computer security like a hotel?"
Mr. Garcia is going to be explaining that to you. Actually, it's a
lot like staying in a private hotel.

          In the case of the computers at BellSouth, the computers
that drive the E911 system and support the phone company system
aren't known to the public. They are unpublished numbers. They
have their own network. The network, to be sure, has interlinks
with the private sector and can be reached by field people in the
telephone company, but it is really a closed system. It is designed
to be for protection.

         So the hotel, the computer, is not known to the outside
world. Where the door is is not known to the outside world. When
you walk into the hotel, it's like if you try to walk into a hotel
in downtown Chicago. If you go to the desk and ask them, you know,

- 16 -

Cook -- opening statement

               "I want to have Joe Jones' room".
Well, first of all you say:

              "I want to see Mr. Jones."

                   "Well, we can't tell you if he's here."

               "Well, if you tell me he's here, I want
               to talk to him. I want to speak to him.
               Give me his room number.

                   "Well, we're not going to give you
                   his room number. You are going to
                   have to call him on the house phone
                   and he'll have to verify that you're
                   somebody he knows."

So there are a series of checks that are set up inside the system.
But once you get inside the hotel, you can make contact with Jones.
And you will see, just as in real life, you have a number of people
at one hotel. You will have people going back and forth in the
hotel. And the person that runs the hotel assumes that they're all
there for good valid reasons. He's not going to do anything but
just a cursory check to make sure that everything is still in order.

          It is really the same thing and the same principle is
involved if you are the system administrator on one of these
computers. You are in the position, in the shoes, of the hotel
operator, the guy that runs the hotel or the lady that runs the
hotel. You make sure that the right people show the right
credentials to get in and you exercise and upfront control. You also
exercise control over some of the common spaces. You make sure the
halls are lit. You make sure that things aren't being badly
destroyed to the best of your knowledge, although you don't know always

- 17 -

Cook -- opening statement

what's going on inside each of the rooms. It's very much the same.
So when you hear a person talk about running a system or computer
system security, think to the analogy of being a hotel operator.
We have a man, Mr. Garcia, from BellSouth, who will be testifying
to that and to that analogy, and I think you'll find it most
interesting.

          (Blackboard) Text file. You will hear a lot about that.
That is probably a new term for you when you walked in: text file.
Just think of it as a book or a pamphlet stored on a computer.
That's it. That's the end of the mystery. A book or a pamphlet
stored on a computer. But because it is stored on a computer, it
can be copied if you can get into the computer. That's what
happened here.

          (Blackboard) BBS. It means bulletin board system.
Sometimes it will have a "C" in front of it. All that means is
computer bulletin board system.

          Now, here's my analogy to that. The computer bulletin
board system is a lot like a private high school where you have to
have permission to get in the front door. And the people that run
the high school have to give you permission to get into their
private location. But once you get into their private high school
and as you walk through, one of the first things that meets you as
you walk into the private high school is a bulletin board with
messages posted on it. And what you will also see along the sides of
it are going to be lockers, student lockers.

- 18 -

Cook -- opening statement

          The principal bulletin board that you are going to be
hearing about during the course of this case is the Jolnet bulletin
board in Lockport, Illinois. The Jolnet bulletin board in Lockport,
Illinois, acted as a central clearing house for the information that