A federal judge has sentenced Andrew Auernheimer, a hacker and Internet troll better known by his online handle "weev," to 41 months in prison. Auernheimer exploited a security flaw in AT&T's iPad registration scheme in order to download contact information for thousands of iPad users. According to The Verge, he will be subject to three years of supervised release after his sentencing, and he and a co-defendant have been ordered to pay AT&T $73,000.At a press conference prior to the sentencing hearing, he stated, "I'm going to jail for doing arithmetic."Auernheimer discovered a security vulnerability in the website used to register iPad users who signed up for AT&T's 3G service. A script on AT&T's servers would accept an iPad's ICC-ID—a unique identifier embedded in the device's microSIM card—and return that user's e-mail address. Auernheimer figured out that ICC-IDs come in a predictable range, allowing him to enumerate the tens of thousands of them and obtain the corresponding e-mail addresses. In the view of federal prosecutors, this constituted a violation of the Computer Fraud and Abuse Act. Auernheimer spent some of his last hours before sentencing participating
Read @ Sourcel
-
