TUCoPS :: Cyber Law :: bustnfo.txt

Information about RCMP and the latest Canadian BBS bust on March 31, 1994!! Download and distribute. A must for sysops!!!!

Details of the most recent board bust in Canada......

Sysop:  Xiphoid [PAW/CTA]
(604) ITS-GONE

Written by:  Xiphoid on April 2, 1994.


	On April 30, at 1:15pm, my father calls me and says that the RCMP has
called him at work concerning the bulletin board system that I run.  The guy 
says he's from the commercial crime unit.  They asked him how old I was (22) 
and then said that they were required to talk to me directly because I am not 
a minor.  Wasting no time after I get off the phone with my Dad, I delete and
format my hard drive with all the board files on it.  Ten minutes later I 
gathered up enough courage to call Bob Campbell (the fucking cop) and talk
to him.  First thing he says is that I'm running a BBS with copywrited files
on it.  I reply that 'I could have, but I don't know as I have been rather
busy at work and have not monitored the files closely'.  He seems to take this
excuse rather well at first.  The conversation goes on for 5 more minutes 
while he trys to intimidate me over the phone by reading out the maximum
penalties for violating the copywrite act ($500,000) and saying that the SPA
and like organizations in Canada will sue up to a maximum of $200,000 in 
a civil action.  He then says that I have to come down to the RCMP office so
that I can meet with him and so that 'we can get to know each other better'.
What a fucker....anyways...I agree to meet with him the next day at 4:00pm.

April 31, 1994

	I head down to the cop shop to meet with this asshole.  First thing
he does is hand me a copy of the related sections of the Canadian Copywrite
Act and the Criminal Code of Canada.  He says, "you might want to read that
over after our conversation here".  He then proceeds to open a file with my
name plastered on the top and side.  I might add that the fucking file was
full of shit and probably was at least almost an inch thick!!  He doesn't
show me what is in it, but I'm sitting across the table and I notice that
he's got a fucking file list printed out.  

	First he launches into talking about a file I had online called
ANACOOK.ZIP.  If you aren't familiar with it, it's the Anarchist's Cookbook,
which details how to make everything from blue boxes to napalm to bombs, to
how to hack UNIX systems.  He raves about this and asks me if I've ever read
that file, and I reply that I never unzipped it and read it.  He claims that
not only is this file is immoral because of the contents, it is also a crime
to distribute and I could be charged for aiding criminal activities by doing
so.  He raves about this for a very long time.  I say I never looked at it, 
but fully admit that I knew I had it online...as I didn't think I'd ever get
into much shit for having that.  I had always figured that the big stuff
like high priced money software would be what they hooked onto.  

	Anyways, he then rifles through the list of files I had online, 
randomly rhyming off names like MS-DOS, MS Word for Windows 6.0, Norton 
Desktop etc etc etc.......He doesn't name ANY games whatsoever.  He then
says, "you've got some pretty expensive software online."  I wasn't prepared 
to see a list of my files and it kind of freaked me out, and so I just nod
and grunt.  I stick to my story of "I haven't had the time to monitor what's
online."  He sits there and lectures me on how by distributing copywrited 
software I'm affecting the public market for software.  

	He then trys to intimidate me again by telling me that the public 
won't tolerate this anymore.  He explains that 50% of his day is following 
up on complaints from other people about copywrite fraud.  The other half is
more 'undercover' work.  He explains the warning system and how his superiors
didn't want to give me a second chance because of my age.  He rants and raves
about how I should know better and that they give warnings to kids just to 
scare the shit out of them and get them to stop.  He also goes into the
extent that the RCMP uses computers of their own to do their own busts.  He
says that they now have a full-time workforce of 170 for computer fraud etc.
That's a lot of manpower, and he goes into some detail about what kind of 
systems they use.  Without too much detail, it was rather impressive.  He
then said the most disturbing thing yet:  "It doesn't matter what security
blocks you have setup to get onto your system, we can gain access."  I 
address my thoughts on this in the next paragraph.  The last thing he says
to me is, "Get that Anarchist's Cookbook offline!"  Man, you would think that
having that is more illegal than $10,000 of pirated software online.  He also
said that they will be monitoring my board from now on, and if they find any
evidence of copywrited software online, then I'm pretty much fucked.  That's 
not how he said it, but he said he'd clean out my whole house and I'd be 
fucked.  I wouldn't see it for 2 years, because it's evidence.  Nice thing.

	I don't know how they obtained a copy of my file list, as I didn't
have a file list generator online, so it had to have been a screen capture.
So, there are five things that they could have done to obtained this type of
information from my board:

	1)  I had a user that captured it and phoned them and complained.
	2)  One of my user's parents thought that what I had online was 
	not morally correct, and thus sent in the capture themselves.
	3)  The RCMP gained access to my BBS through a faked new user
	4)  The RCMP hacked someone's password by tapping my phone line and
	capturing the first characters sent by the remote modem.  (the guy's
	alias and password)

Well let me tell you right now that 1,2 and 3 are totally impossible with the
users on my BBS.  I had the most secure user list I've ever seen.  With only
42 users, 5 being LD callers that I was positive were legit, that leaves 37
local callers.  Of those 37 callers, I had met 25 of them personally on more
than one occaison.  The remaining 12 were personal recommendations from the
25 that I've met personally.  Therefore, I have to believe option 4.  Since
I believe this to be true, once the RCMP gains your phone number you are 
pretty much fucked.  This only gives credit to the cop's testimony that they
can gain access regardless of what security you have online.  

	I have another theory.  The cop said that the software companies 
cooperate fully with them, and even send them original copies of software.  
A simple letter to the writers of PCBoard stating that they are 
investigating a BBS that they suspect has a cracked copy of PCBoard running 
and more pir8 files are online, and a request that they write a program that 
will get access to the board.  I have no doubt in my mind whatsoever that the 
writers for PCB wouldn't cooperate and write it.  

	Either way, there is a serious security problem in the pir8 world now.  
As the phoneco's are getting more sofisticated with their electronic telephone
monitoring technology and the cops are gaining more experience in hacking and
busting boards, the days of pirating without serious risk of being busted are
over.  I can't offer any more detail about how to tighten security, accept
that you shouldn't make the number for your BBS public.  This means:

	DON'T ADVERTISE YOUR BBS - make it for your close friends only.
	If you advertise the number, and the RCMP gets a hold of it, you 
	might as well kiss your board goodbye.

It is with much regret that I leave the scene, but the risks are too high.
If I were to try to get a job that requires a security clearance, and the 
potential employer did a police check, I'd be on record for this 
investigation.  This fucks me over right away.  Sure I wasn't charged, but
if you are an employer and have 5 applicants for a job, and 1 of them has
a record of an investigation, it's an easy screening tool.  I don't think
this will effect me in the near future, but later down the road, I might
be fucked over a job because of it.  

	My personal greets to the 'industry leaders' of the pir8ing scene in
Canada that I know really well:  

	 Newton P. Forgery
	 Boba Fet
	 Martial Artist
	 All of Pirates Analyze Warez Magazine
	 All of CTA
	 And anyone I ever talked to on IRC....too many to list off.
	 Sorry if I forgot anyone......my mind is still with the cops :)

I'll still hang around #warez everyonce and a while, so if you ever want to 
get a hold of me, I'll be there or somewhere cool....not like #warez34 :) 
If you have no idea what I'm talking about, ignore this - you're too lame
to be reading this anyways.

My closing words:


				Xiphoid -=PAW/CTA=-

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH