用 heart bleed 漏洞偷盗900加拿大人sin卡号的黑客已被抓获

[Riven]

首位"心血漏洞"攻击者被捕
网易科技报道　04-17 04:02
　　据国外媒体报道，加拿大官员周三表示，上周对国税部门发起“心脏出血”漏洞攻击，并成功窃取900位公民隐私数据的黑客目前已被抓到。经过5天的调查审讯，该名19岁的英国黑客已被加拿大官方以“非法使用电脑”和“恶意破坏数据”两项罪名正式起诉。

　　该名黑客名叫斯蒂芬·阿瑟罗·索利斯-莱斯 （Stephen Arthuro Solis-Reyes），现年19岁，居住在伦敦。上周五，在“心脏出血”漏洞被公布后不久，尽管加拿大国税局随之紧急撤下了一切对公共开放的服务，但最后人发现有人利用漏洞成功窃取了900位加拿大公民的个人数据。

　　目前，加拿大当局已正式以“非法使用电脑”和“恶意破坏数据”两项罪名对索利斯-莱斯提出起诉。

 

[笨妈笨爸]

首位"心血漏洞"攻击者被捕
网易科技报道　04-17 04:02
　　据国外媒体报道，加拿大官员周三表示，上周对国税部门发起“心脏出血”漏洞攻击，并成功窃取900位公民隐私数据的黑客目前已被抓到。经过5天的调查审讯，该名19岁的英国黑客已被加拿大官方以“非法使用电脑”和“恶意破坏数据”两项罪名正式起诉。

　　该名黑客名叫斯蒂芬·阿瑟罗·索利斯-莱斯 （Stephen Arthuro Solis-Reyes），现年19岁，居住在英国伦敦。上周五，在“心脏出血”漏洞被公布后不久，尽管加拿大国税局随之紧急撤下了一切对公共开放的服务，但最后人发现有人利用漏洞成功窃取了900位加拿大公民的个人数据。

　　目前，加拿大当局已正式以“非法使用电脑”和“恶意破坏数据”两项罪名对索利斯-莱斯提出起诉。

He should do this two years ago.

 

[向问天]

天网恢恢， 疏而不漏。

CRA V5！

 

[ccc]

看了英文报道，清楚了。是个加拿大人，住在安省伦敦！～

Stephen Arthuro Solis-Reyes charged in Heartbleed-related SIN theft
Western University student Stephen Arthuro Solis-Reyes, 19, arrested in London, Ont.

The lawyer of a 19-year-old London, Ont., man charged with exploiting the Heartbleed bug to steal over 900 SIN numbers says his client has been devastated by the arrest.

Stephen Arthuro Solis-Reyes, a student at Western University and the son of Roberto Solis-Oba who teaches computer science at Western, was arrested late Tuesday afternoon. The RCMP says Solis-Reyes is charged with one count of unauthorized use of a computer and one count of mischief in relation to data.

“He is an 'A' student and a very, very bright young man,” Solis-Reyes’s lawyer Faisal Joseph said.

• NDP want answers on timing of CRA website shutdown
• Heartbleed bug: What you need to know
• Heartbleed bug shows governments slow to react

Joseph said he his client was too emotional to speak about the charges against him on Tuesday night, and police haven’t told him anything, either.

“I don’t have any evidence,” he said.

Joseph said his client voluntarily turned himself in to police on Tuesday, after officers threatened to arrest him in the middle of one of his classes. Days earlier, Joseph said, RCMP officers served a warrant at Solis-Reyes’s house at around 1 a.m., but left without advising of a charge.

“He didn’t hear anything until yesterday,” Joseph said, adding his client feels “sucker-punched.”

Joseph also alleges police kept Solis-Reyes in custody for over five hours without access to a lawyer on Tuesday, something he said he’ll file a complaint about.

Solis-Reyes is set to appear in an Ottawa court on July 17, when the RCMP is set to lay out its case against him.

Until then, Joseph said, Solis-Reyes’s family has been “absolutely devastated” by the charges.

The RCMP allege that Solis-Reyes was able to extract the private information from the CRA by exploiting the Heartbleed security vulnerability in the OpenSSL encryption software used by many internet servers.

Computer equipment was seized from Solis-Reyes’s home, the RCMP said.

Website shutdown
The CRA temporarily shut down some access to its website late on April 8 in response to security concerns about the Heartbleed bug. This security flaw in its website encryption left it vulnerable to hackers.

The CRA says it realized last Friday that 900 social insurance numbers had been stolen during a six-hour attack. The agency notified the privacy commissioner on Friday and referred the matter to the RCMP. But the breach was only made public on Monday.

• RCMP asked Revenue Canada to delay news of SIN thefts

The RCMP said this week it had asked the CRA not to tell Canadians on Friday about the breach so the force could look into a "viable" lead in their investigation.

"The RCMP treated this breach of security as a high-priority case and mobilized the necessary resources to resolve the matter as quickly as possible," Assistant Commissioner Gilles Michaud said in a statement released Wednesday to announce the arrest.

Solis-Reyes is scheduled to appear in court in Ottawa on July 17 and could face a maximum of 10 years in prison if found guilty.

The RCMP said the investigation is ongoing.

 

[raid]

被盗的人，应该有啥补偿吧

 

[ccc]

天网恢恢， 疏而不漏。

CRA V5！

RCMP V5!

 

[老酒客]

国内的编辑好像不知道这世界上还有一个地方叫伦敦。

 

[ccc]

19岁的英国黑客已...，居住在英国伦敦。

中文媒体，你如何让我信任你啊！

 

[ccc]

国内的编辑好像不知道这世界上还有一个地方叫伦敦。

美国有近20个London，还有个Ottawa (in Illinois)呢。

只能说素质低下。我看了看英文报道，都说得很清楚，RCMP抓了人，疑犯为London, Ontario人，七月份将在Ottawa出庭。

而且都提到他是The University of Western Ontario/Western University的学生。

 

[向问天]

RCMP V5!

英国伦敦V5！

 

[小 篆]

英国伦敦V5！

老向V5！
我今天刚找了你的茬，现在拍一下马P补偿下。你爽不爽？

 

[ccc]

英国伦敦V5！

 

[heureux]

美国有近20个London，还有个Ottawa (in Illinois)呢。

只能说素质低下。我看了看英文报道，都说得很清楚，RCMP抓了人，疑犯为London, Ontario人，七月份将在Ottawa出庭。

上次查过，美国有五个 Ottawa

 

[Riven]

村长威武，我一直以来的感觉是村长以前做过文稿校对工作！或者是村头月报的总编。

 

[ccc]

上次查过，美国有五个 Ottawa

我只知道美国有两个Ottawa.