Justin Shafer, who last year sparked a complaint to the FBI for discovering a dental software vendor’s unprotected FTP server, will walk free until his trial begins.
Although his vulnerability work upset some of his targets, Shafer’s detention wasn’t directly about hacking: he took exception to repeated FBI raids, went public about the issue on Facebook, and was cuffed as a cyberstalker.
Under charges of violating 18 U.S. Code § 119 and 18 U.S. Code § 2261 (the first is “Protection of individuals performing certain official duties”, which prevents naming people like FBI investigators or their families; the second law covers “Interstate domestic violence”), Shafer has been held without bail since April.

He’s now been released for trial under conditions [PDF] that include restricted access to computers or the internet for work purposes only, even then subject to monitoring and approval by a probation officer.
Other conditions of the release include that he’s not to make any further posts naming the officers, but a report at Databreaches report quoted the judge as saying criticising the FBI won’t count as a breach of conditions.
A tale of escalation
Shafer’s imprisonment followed what was clearly an escalation of behaviour through 2016 that arguably had the judge worried, since another of the release conditions is that he submit to a mental health assessment.
The case started quietly enough, with a February 2016 vulnerability disclosure. Patterson Dental’s Eaglesoft practice management system contained an unchangeable, hardcoded password, and the company had left an FTP server unsecured.
The first complaint to the FBI was from Patterson Dental, leading to the May 2016 raid. What aggrieved Shafer was that two further raids followed – but when he complained in posts on Twitter and Facebook, Shafer was breaching his bail conditions.
江华国税开展网络信息安全教育培训
多家银行的客户遭遇银行借记卡存款“不翼而飞”事件,猜想黑客盗银行卡和密码的技术又有了新的突破。
Shafer still faces the cyberstalking charges; the date of that trial is yet to be set. ®
要在技术上紧跟甚至超载网络犯罪份子,我们首要的日常工作是进行各类系统的更新,唯有不断地更新才能生存,唯有及时地更新才能安全,也唯有执着地更新才能进步。

猜您喜欢

北京烟花再次恢复禁放令:从民意中来
信息安全知识考卷
网络安全法宣传片 002 国家网络安全的现状与重要性概述
为这事 特朗普今年至少打了25通电话
CPNSONLINE NEODYM
网络安全公益短片扫描二维码的安全风险