Summary of Mafiaboy

Mafiaboy: how I cracked the internet and why its still broken By Michael Calce Published by Penguin

Chapter one – Chapter four

February 2000, the writer went to spend the night at his friend, Patrick’s house, soon got a call from his father. Over the news and on his father’s call he soon found out that his deeds have caught up with him. The FBI and RCMP have come to arrest him for run a DDoS attack on some organisations like Yahoo, CNN, etc. Placed under arrest over the weekend and granted bail on Monday, came home to meet the media representatives at his neck.

Chapter five: Portrait of the Hacker as a young man

It is believed that every 15 years old has a life before becoming 15. Here the writer shared with us his life before he was 15, explicitly, began with when his grandfather first stepped on the Canadian soil. Lorenzo Calce, who happens to be the writer’s grandfather and of whom bares the same name with the writer’s elder brother, came to Canada in 1954 from Italy. As a teenager and a young man determined to make a new life but barely had enough money upon arrival, he went ahead to do a couple of minor jobs, from washing taxis, shining shoes up until shinning Hershom’s fleet of limousines. Then after, he learnt how to fix Hershom’s company cars, because of his hard-work he already had his own bus company, Autocar Connaisseur Inc., at age 47, which would grow to have annual revenues of more than $20 million up until it was sold off in 1997. Married to Immacolata, the writer’s grandmother and had a son, the writer’s father. We could observe that it wasn’t mentioned in this chapter that Lorenzo, the writer’s grandfather had another child, so it suffice to assume that the writer’s father was the only child of Lorenzo. The writer, who had to witness his parents’ divorce at the age of 5, couldn’t prevent the ‘heat’ from having the best of him for a while. He didn’t forget to mention their parental care and formation which didn’t always go down well with him both at home and in school, as playing by the rules has never being his thing, especially when the rules are designed by someone else other than him. This notion not only made him curious, persistent but also negatively impacted on him. After his father bought a computer for him, which he described to be much slower than an average PC now, he then had no idea of how to operate it, but his interest in playing video games, curiosity, consistency, persistence, research and exceptional interest in being one of the play makers in the world of computer made him explore, learn, take advantage of already existing apps to escalate privileges and run other minor attackers. He described himself as script kiddie who performs those acts just for fun and not minding or even knowing cyber laws that forbids that. “Everybody has to start somewhere. You can’t just know everything right away”, his words, from being a script kiddie, he grew into modifying codes to suit him before executing, to what he then call, a hacker.

Chapter seven: The birth of Archangel Michael

The term ‘hacker’, started building up as the writer adopts a new identity “Archangel” in the hacker’s online community. It all started when he located a pirated copy of @Hackers@, a movie he felt was made for him. Seen how one of the characters, Dave, made use of computer skills and social engineering to instigate an attack; then felt the need to go beyond AOL, then to BBSs, EFnet, IRC; all in search of warez. He then seek online membership of several hackers crew including IWC, which seems to be a nice channel to develop his hacking skills while interacting and completing projects with other hackers. Drackus, the alias name of the owner of the channel, at first denied the writer’s plea to be granted access to the channel but later relented as a result of his commitment. The writer who was interested in being recognised, relevance and respected on IWC, had to let Drakus guide him through the basic training and tools to run exploits. He learned techniques used for exploitation and worked had not only to know more but to also maintain grounds and reputation in the channel. The writer’s dedication to his computer hadn’t prevented him from having a life outside the channel. He had to change school because he wasn’t having enough extra-curricular activities in his previous school. There he became friends with Nick and Brain. Nick almost had the same interest with the writer, video games and passion for computer. He was smart enough to keep away what he did over the weekend from Nick, because though Nick loves computer but he doesn’t know about hacking. Brain on the other hand loves sports, still the kind of person the writer would love to associate with. His life outside the computer wasn’t important enough that he wasn’t ready to sacrifice it in order to achieve his goal as a hacker. Moments he was away from the computer, he worried about losing his achievements in the channel, he knows that his computer wasn’t safe or exempted from being attacked by other hackers in the channel.

“The Archangel was now out for vengeance”, this sentence says a lot about this chapter. At grade eight, age 12, heartbroken and sad over the death of his best friend Nick, who was knocked down by a car. The writer had to add ‘anger’ to his collection when his fellow students posed to had known Nick as a friend, some even had to emphasise that Nick was gone and never coming back. The writer reached out to Nick’s family, participated at his funeral and had always visited his grave with Brain every year on the anniversary of his death.
This feeling bottled up to break the bridge between his online and offline world, which Nick’s presence made possible. Soon he felt no interest I his offline life, became a nuisance in school and at home. He maintained presence online with more dedication than before. Being a sad tenager, he seek for a place he could let loose of his anger, speak indiscriminately and not get parental caution and monitoring, the online world was a perfect place. Chapter nine: Call me Mafia boy After the disbandment of IWC because of Drakus disappearance online, the writer set out join another crew, but first needed to draw attention to him online. He took over twelve channels and had compromised three hacking crews, simply by attracting bandwidths, building botnets, gaining operator access and knocking out other operators on the network. This then gave a slot as Apha crew member. He got to change his name from Archangel to Mafiaboy after he logged into his computer one day and found out that his brother used his computer to download music under an alias, ‘Mafiaboy’. He liked the name and then went ahead to introduce himself as Mafiaboy to his crew.

Chapter ten: I’m TNT

The writer was expelled from Lindsay Place High school at grade nine, and his mom had to send him to fully stay with his father. He then continued grade ten at Riverdale High School, he continued being a nuisance in school, but was excited of being with his father and in a relent environment. He was also excited of getting to spend more time with his computers as he cared less of his studies in school. He stayed in his father’s house with unlimited access to the computer. The writer left Apha crew and joined TNT/PH ORce crew. Showing commitment to his crew, fought to maintain dominance of the crew on EFnet. He performed DoS on rival network and some other network just to maintain dominance. This act he succeeded with the help of the servers he compromised. The first contact the law enforcement (FBI) made with his family over a suspected fraudulent act was on February 2000. The warning came as result of his activity on Outlawnet, owned by Sisters High School. His stay with TNT crew members was resourceful, as sinkhole, a crew member helped him develop Rivolta. Rivolta, used to run DDoS, a more sophisticated attack, something different from what every other hacker was doing on EFnet and what seems to be the future of TNT. After the tool was built, tested and confirmed to be effective, he saw yahoo as one of the big fishes I the river to taste his wrath.

Chapter Eleven

Rivolta: The Attacks The writer who was 15, woke up one monday morning, February 7, 2000, set for school, while making arrangement to lunch an attack on Yahoo.com. he already programmed his computer to lunch the attack on a designated time, though hoping the attacked fails but seem more intrested in learning from the attack than actually having a successful one. Unfortunately, the attack exacuted successfully while he was in school that faithful day, he came home shocked to see the impact this attack had on yahoo but got carried away by quest for power and recongnition on IRC. This happened to be his first big attack but a misleading motivation for him , he went on to lunch attack on other major websites owned by Ebay, CNN, Amazon, Dell and E.Trade, but clearly disassociated himself from attacks on Buy.com, ZDNet.com and Datek.com. obccessed with the idea of making a name, legacy and celebrating his legendary name (Mafiaboy), he paid little attention to the consequences of his action. But he being discovered wasn’t much a big deal to him because he wanted to show the world that he was cut-out for something great. Rivolta, the tool he used for the DDoS, which he occasionally called MDDoS (Mass Distributed Denial of Service) which to him was the future was gradually leading him into the hands of the law enforcement agency as the US has made contact with the Canadian police.

Chapter Twelve

Wanted: Mafiaboy The cyber warfare against the US government and NATO in 1999 soon brought about the idea of the US Department of Defence having undercover agents. This agents sitting in front of the computer monitor watched the Mafiaboy run his mouth over his achievements in the chat room. His mouth, the log files found in the UC Santa Barbara and other compromised servers, helped in the investigation of who the Mafiaboy really is, in early 2000. just a matter of time, the FBI and the RCMP was already pointing fingers at the writer’s house.

Chapter thirteen: Dad, It Was Me

On February 15, 2000, the Mafiaboy was officially name as a suspect. Then, Clinton, the US president held cyber security summit at the white house to reassure the citizens of the government’s commitment towards cyber safety, ways to protect privacy online and as well ways to maintain cyber safety. The writer who first got hold of the news at Brian’s house while scanning through stations bombed into the CNN news broadcast. Scared, he decided to confine in Brain, though it took Brain some time to absorb the information, proud of his friend and quiet worried about him being caught. The writer who didn’t bother answering Brain’s question felt a little relieved for confiding in someone he trusts but knew right then that he has to tell his father as well. Looking out for a perfect timing to speak to his father about it, finally gets it. That faithful day he went to his father in the kitchen and narrated the story to him, though shocked but the father emphasised the need to be proactive and speak to a lawyer about it, indirectly tendering his support to his son. Meeting a lawyer wasn’t a good idea for the writer but seems to be out of options. Narrating the story to Lawyer Yan Romanowski wasn’t such a bad idea as he not only appeared as a friend but was ready to be of help as well cautioned the writer to be careful and mindful of who he speaks to about this.

Chapter fourteen: Suspicious Minds

The writer’s suspense on people grew as the story of someone who claimed to know him reflected in “mirror” article and on the later published book “The Hacker Diaries” in 2002, which identified the contributions of an informant on the case. Confirming the info, the RCMP and FBI had during the court proceedings mentioned having and informant too. The writer went on to compare the credibility of info existing between the two sources, the mirror article and the Hackers Diaries. Though with some untrue info, the writer didn’t stop building up suspense among his hacking crew, most especially T3 and Mshadow ( who got invited to the TNT crew after their crew was disbanded and knocked out by TNT on IRC). He couldn’t suspect his relatives, as the strange man who spoke to the Mirror newspaper (reflected in the mirror article as mentioned above) claimed to be his cousin, because none of his relatives performed the hacking or knew what he was doing up until ‘he let the cat out the cage’.

Chapter Fifteen: Wiretapped

The FBI and the RCMP working together, obtained a court order on February 25, 2000, to wiretap the writer’s house for sixty days. During the period the house was under serious monitoring by the law enforcement agency, the writer, his brother Lorenzo and father gave the law enforcement agency more than enough evidence to curb and pin point who the mafiaboy is and end the investigation before the sixtieth day, as a bounce, his father’s incriminating phone calls and conversations in the house over a distraught business partner made them arrest the mafiaboy and his father on the same day. As a result of the writer’s negligence to Yan’s caution, he went on maintaining presence on IRC chat room and running malicious activities, as well as making implicating comments about the mafiaboy over the phone with his friends, brother and father, which the RCMP was listening to in real time. So on April 14, 2000, the decision was made to raid the writer’s house.

Chapter Sixteen: “Open the Door or We’ll Break it Down”

On that faithfull day the police raided Calce’s home, the writer was passing a night at his friend’s house and his brother Lorenzo was out for a party. Storming into their residence, arrested the writer’s father and hurriedly demanded the writer is notified and asked to surrender himself to be brought in . The corps who were in their numbers, while scanning round the house , assembled and moved the computer in the house , as well moved the father before the writer could be brought home by another set of dispatched corps. The father went before the judge later in the morning via video conference and posted $1000 bail to secure his release on account of his incriminating comments and threat to a former business partner. He had to agree to stay away from the man in question. The writer went home after the pickup, knowing Yan had things under control but wasn’t so fortunate to have been granted bail that same day, rather was released after two days with conditions set out. He was outrageously instructed not to use computer and internet, had a curfew and was prevented from seeing his three best friends. The last condition seemed unfair to him and difficult to obey. Had to face two days detention one summer he disobeyed the last condition and decided to see his two best friends. Yet at school, after days of staying back home, waiting for te media to leave, the writer continued being mischievous and cared less about disciplinary action, paid more attention on what the finds of the corps would be. This find would determine the way forward for him in the case, aid Yan, whether to plead guilty or not guilty. The writer know that the corps might have collected logs from the university servers he compromised in USA, the transcript of his conversation on IRC and conversation with pals on phone, this was enough to keep him busy and worried through the summer.

Chapter Seventeen : Eighteen days in Hell

The writer who didn’t stop being a nuisance at school soon got back to detention for violating one of the bail conditions, which clearly stipulated good conduct at school. At the first appearance at court after the second detention, the judge denied him bail. Yan came up with an idea for him to quit school and carry on with a full time job, at the second hearing, the judge then granted him bail and release Northview Unit with a more tight bail condition. The writer who regretted his actions, which to him was mare high school misconduct soon became responsible and well-mannered at Le Biftek, where he worked. The documents of the evidence against the writer soon started dropping at Yan’s office. Yan would invite the writer for clarity of the technicalities involved, then in the company of his father for decision on a way forward. Clouded with pride and ego, at first saw no reason to plead guilty but soon felt the need to take responsibility of his action, with the thoughts of receiving a fair and lenient verdict from the judge.

Chapter Eighteen: Guilty

On January 18, 2001, the judge was informed of the writer’s intent to plead guilty to fifty-six of the sixty-six charges laid against him. The court then assigned a social worker from the provincial Young Offenders Service, Hanny Chung to the writer for evaluation, and recommendation for the sentencing stage. Hanny Chung’s report came in filled with insincere or misunderstood comments, according tto the writer. Chung’s inability to keep up with the technicalities involved in the crime made the writer unable to communicate his intent and be understood. The writer identified that at the cause of the evaluation, he has no intent of opening up to him as he restrained some of his words, not trusting him because he work for the government was the deal. Chung’s recommendation came in on February 19, 2001. The writer appreciates one his recommendation of him not serving his sentence in a place like Northview.

Chapter Nineteen: My day in Court

Around mid-June 2001, Standing before Judge Gilles Ouellet, the writer was nervous and worried about the ability of the judge to address the cyber crime case unlike the usual criminal cases he had years of experience in. Allan Paller, the director of research for the SANS institute, among other education degrees. He appeared as the prosecution’s witness to speak about the technical nature of the crime. With such qualification and experience the was soon getting intimidated , but was disappointed with some unprofessional comments he made and then through Yan capitalized on it during cross-examination. Corporal Marc Gosselin, the RCMP officer in charge of the case, just like Paller, appeared as a witness to testify against the writer. He presented logs from the US compromised systems, transcript from IRC showing the mafiaboy bragging and call recordings. According to him this clearly shows that the writer was intentionally performing those crimes against him , aware of the consequences and had no interest in testing the network security of those companies. The refusal of those companies appearing in court soon gave the writer and Yan a better stand but his big mouth from the call recordings made things a little tougher. The court reconvened on June 19, with Hannhy Chung on stand. Presented his reports but was very much questioned by Yan, as well his education qualification to handle the evaluation. nAfter Chung’s testimony, Yan decided to commission their own psychological evaluation. He then invited a criminologist, who after the evaluation sent a more lenient and authentic report to the judge.

Chapter Twenty: This Adolescent Had a Criminal Intent.

The court hearing ended in June, now in September 2001. The writer was sentenced four months for the DoS attacks and another four months for all of the networks compromised, to be served in a group home. Plus a year probation after that.
Corporal Gosselin who have been in the front line of the writer’s arrest, soon after the court hearing reached out for a truce with the writer, offering him a place with the RCMP after his detention. This gesture from him wasn’t so welcoming by the writer.

Chapter Twenty one: Final Odyssey

After the writer arrived, Odyssey group home Chung took him to meet Henry. Henry was the head of the facility; he then outlined the rules and rewards for good behaviour in the facility. He had a fun and experiences that help changed him while in the facility. Speaking of changing, while at the facility he bonded with Mary, who is a staff of the facility. He helped her with errands and they both stayed up late to watch TV. Mary in turn inspired him, making him think of a well reputable life after detention. Apart from Mary he also became close with Tanya and Gary. On May 2002, his release from the facility was due. His father picked him up and drove him home. Getting home and seeing his computer, remembering his experiences at the facility decided to stay clear from the big machine for a while. He also pointed out that the restriction and adult supervision while using the computer wasn’t the only reason he walked away from the big machine that day, but self-control played a bigger role.

Chapter Twenty-two: Life, uploaded

Different authors and articles as portrayed the flaws of the internet and technologies that comes with it. Some even went on to say that some of these vulnerabilities are created by end users because of their cyber security culture. The story of Owen Walker, an eighteen year old New Zealand man with handle name “Akill”, was narrated. His arrest, charges, act was well put into comparison by the writer. Similarities of the incidence were pointed out, but the criminal intent of Walker made the writer’s case stand out.

Chapter Twenty-Three: Hacking for Country, Hacking for Profit

In this chapter the writer emphasised the Russians contribution to the hackers’ communities, their attacks and impacts. Other western and eastern European countries wasn’t left in this act, as many incidence was recounted. He also mentioned the suspected Chinese cyber-attacks on American organisations, including government organisations. The US law enforcement angencies has also recorded successes as well, catching and persecuting cyber criminals has been a tough one.

Chapter Twenty-Four: Attack of the Botnets

A couple of botnet attacks was recounted. The experience of the botnet attack on Winkler was shared, her out-dated windows 98 software let a backdoor open for the Russian hacker to leverage. Reports from FBI, Damballa, MCafee, others identified the impact of DDoS and botnet attacks from 1999 to 2008. Stories of Adam Sweaney, John Schiefer’s cybercrime (with DDoS, Trojan, spyware, adware) and arrest was recounted.

Chapter Twenty-five: What Lurks inside Your Pc

Started with the story of Helen Barrow who experienced ransom-ware attack in 2006. Variants of malwares were also elaborated and security reports of F-Secure, Bruce Schneier, MassageLabs and others was discussed. Phising/ spam has also caused great havoc and lead and created path for other malware variants in a compromised system. The phising mail which lures a target to it through familiarity, tends to install malware to the victim’s computer if the victim clicks on the link attached to the mail, downloads an executable file or infected picture. Cloud, though is the future of information Technology, still faces cyber threat as data in the cloud aren’t 100% secure.

Chapter Twenty-Six: The Mafiaboy Guide to Protecting Yourself Online

The writer explained some proactive cyber security techniques that an average computer user should know; i. Email security awareness ii. Use of strong password iii. Activate and Update Your Antivirus Program
iv. Use of firewall v. Update every other software and operating system vi. Disconnect from internet when done vii. Backup and compartmentalize your data viii. Be obsessive about your personal information ix. Protect your wireless network x. Use a spam filter or mailing apps that has spam filter xi. Use separate personal and professional Email xii. Avoid emails that isn’t plain texts xiii. Talk to your children about the internet and privacy When the probation ended the writer tried linking up with his friends and social life, but realised a lot has change and he has equally lost more than 4 years of his life. He went on to detail his regrets, his sadness in the misinformation of his crime and his commitments towards providing a safer cyber world.