Sunday, August 24, 2008

Der Echte Clark Rockefeller, Bitte

Although the news of Clark Rockefeller has begun to die down, it is still disturbing that evil doers can hide in plain sight under assumed names after the war on terrorism has been waged for the better part of a decade. If anonymity were the goal, an alias like John Smith would have been a more suitable choice. Apparently "Clark Rockefeller" was only feeding his ego.

Fox News reported the following story on August 9th regarding details in the Clark Rockefeller case that seemed to confirm some of the other names police suspect he used.

----------------------

A German man who lives in a small mountain town called Bergen positively identified photographs of Rockefeller and a man known as Christopher Chichester as his long-lost older brother, Christian Karl Gerhartsreiter, who left home at age 17.

Alexander Gerhartsreiter, 34, who was only 5 or 6 when his brother left home, said the man told the family in his last phone call to them in 1985 that he had changed his name to Christopher Chichester because Americans were unable to pronounce his birth name.

"It seems you found my brother," Alexander, who was only 5 or 6 when his brother left home, said to the Boston Herald from his home in Upper Bavaria, Germany. "It really is a shock. That is definitely him. ... This is quite heavy."

Rockefeller's attorney, Stephen Hrones, had an hourlong jailhouse meeting with his client Friday afternoon and said Rockefeller speaks German but only remembers "bits and pieces" of his childhood, according to The Boston Globe.

Rockefeller, 48, who is in a Boston jail, is accused of parental kidnapping for allegedly snatching his 7-year-old daughter, Reigh "Snooks" Storrow Mills Boss, from a city street on July 27 during a supervised visit.

He was caught in Baltimore with the child, allegedly using another assumed name, Charles "Chip" Smith, and had purchased a home and boat in an apparent attempt to start a new life. About $12,000 in cash and 300 1-ounce gold coins also were found in his apartment after his arrest, police said.

Christopher Chichester has been wanted for questioning in the 1985 disappearance and presumed murder of Jonathan and Linda Sohus, a San Marino, Calif., couple from whom he rented a carriage house.

In 1994, bones believed to be those of John Sohus were found in three separate bags on the property when the residents were installing a swimming pool. But police have never been able to positively identify the skeleton as belonging to the missing man, and the remains of his wife have never been found.

Shortly after the newlywed couple vanished, their tenant Chichester did, too.

Detectives allege Rockefeller is a con artist who has for decades been traveling across the United States, concocting stories and using multiple aliases to live a lavish life.

Authorities have not confirmed that Christian Gerhartsreiter, Christopher Chichester and Clark Rockefeller are the same person. Gerhartsreiter was a German exchange student who lived with at least two Connecticut families when he came to the United States.

But the Suffolk District Attorney's Office in Massachusetts estimates that Rockefeller has at least a dozen different aliases. Another they're investigating is Christopher Crowe, the name of a Connecticut man who tried to sell a pickup truck belonging to John Sohus after he disappeared.

Rockefeller's attorney said his client's memory is spotty. He recalls, for instance, a Scottish nanny and a family road trip to Mount Rushmore in a station wagon, Hrones said.

"He has no memory of being from Germany or of having a German brother," his lawyer told the Globe on Friday. "He tells me he's Clark Rockefeller. I believe him. I haven't been shown any hard evidence that he's something other than what he tells me he is."

Hrones said his client has no recollection of coming to the United States in the late '70s and living in Berlin, Conn., as an exchange student, according to the Globe. He also doesn't remember marrying a Wisconsin woman named Amy Jersild in 1981 at the very young age of 19, only to leave her a day after their wedding, according to marriage papers.

Rockefeller doesn't recall being a tenant of John and Linda Sohus, though he remembers living in California. And though he has memories of working on New York's Wall Street as a stockbroker, he doesn't know what name he used or where and when he had the job.

"He tells me he still doesn't remember about the past. He remembers bits and pieces, silly sorts of things," Hrones told the Globe. "He doesn't remember murdering anybody ... and he doesn't remember being a tenant of the couple that were murdered."

Germany's BKA, the equivalent of the FBI, told FOX it has no criminal record associated with anyone by the name of Christian Gerhartsreiter.

U.S. law enforcement officials have enlisted the help of German authorities to figure out Rockefeller's identity, the Foreign Ministry in Berlin confirmed to the Globe.

"We are now checking if he could be the German citizen Christian Karl Gerhartsreiter," a spokeswoman told the paper during an interview in German.

Police in Boston and Los Angeles say they have no record of Rockefeller before 1993, which is about when his foggy memories become clearer. He remembers marrying Reigh's mother, Sandra Boss, in 1995. The couple divorced in December, in large part because she grew suspicious about his past.

Childhood friends have described Gerhartsreiter as a mischievous, restless loner, the Globe and the Herald reported.

Alexander and Christian Gerhartsreiter's ailing mother, 78-year-old Irmengard Gerhartsreiter, told the Herald that she didn't know the man in the pictures of Rockefeller and Chichester.

But her younger son recognized him right away.

Alexander said the older brother he barely knew was born in Siegsdorf, Germany, in 1961, left home as a teenager to move to Connecticut as a student and then cut ties with the family about 20 years ago, around the time the Sohus couple disappeared.

Germany and his hometown in the Alps were "too small" for Christian, who had his sights set on bigger and better things, his brother told the Herald.

"He wants always to be in a big world," Alexander said.

When the Herald reporter informed him of the Clark Rockefeller alias, Alexander wasn't surprised.

"Sounds like my brother."

Wednesday, August 6, 2008

Justice: Hackers Steal 40 Million Credit Card Numbers

(CNN) -- Eleven people were indicted Tuesday for allegedly stealing more than 40 million credit and debit card numbers, federal authorities said.

The indictments, which alleged that at least nine major U.S. retailers were hacked, were unsealed Tuesday in Boston, Massachusetts, and San Diego, California, prosecutors said.

It is believed to be the largest hacking case that the Justice Department has ever tried to prosecute.

Three of the defendants are from the United States; three are from Estonia; three are from Ukraine, two are from China and one is from Belarus.

The remaining individual is known only by an alias and authorities do not know where that person is.

Under the indictments, three Miami, Florida, men -- Albert "Segvec" Gonzalez, Christopher Scott and Damon Patrick Toey -- are accused of hacking into the wireless computer networks of retailers including TJX Companies, whose stores include Marshall's and T.J. Maxx, BJ's Wholesale Club, OfficeMax, Barnes and Noble and Sports Authority, among others.

The three men installed "sniffer" programs designed to capture credit card numbers, passwords and account information as they moved through the retailers' card processing networks, said Michael Sullivan, the U.S. attorney in Boston.

"This has other personal numbers that could give them access to credit or debit cards that have already been issued and are active," Sullivan told CNN.

The probe began in late 2006, Sullivan said. In addition to the Justice Department, the Secret Service has been conducting an undercover investigation for more than three years through the U.S. attorney's office in San Diego, he said.

The three then concealed the data in encrypted computer servers they controlled in the United States and eastern Europe, the Justice Department said.

Some credit and debit card numbers were sold on the Internet, and were "cashed out" by encoding the numbers on the magnetic strips of blank cards. "The defendants then used these cards to withdraw tens of thousands of dollars at a time from ATMs," authorities said.

Gonzalez and the others used anonymous Internet-based currencies to conceal and launder their proceeds, as well as channeling funds through bank accounts in Eastern Europe, the department said.

"There are ties between all three districts and ties internationally that go all the way to the Ukraine and Latvia," Sullivan said. "The 41 million credit and debit numbers were used internationally."

Gonzalez was previously arrested in 2003 by the Secret Service on suspicion of access device fraud, the Department of Justice said, and was working as a confidential informant for the agency. However, the Secret Service discovered during the investigation that Gonzalez was involved in this case, authorities said.

The California indictment charged eight others with operating an international stolen credit and debit card distribution ring, selling stolen card information for personal gain -- millions of dollars, in at least one case, authorities said.

Three of the defendants in the most recent case, among them Gonzalez, were also charged in May in a related indictment in New York, Justice said. Those charges allege the three were engaged in a scheme to hack into computer networks run by the Dave & Buster's restaurant chain and steal credit and debit card numbers from at least 11 locations.

The three installed "sniffer" programs at the cash register terminals of the locations, capturing credit and debit card numbers, authorities said. At one location, the sniffer captured data for some 5,000 cards, causing some $600,000 in losses to the banks that issued the credit and debit cards.

Gonzalez is awaiting trial on the New York charges. The other two of the international defendants are also in custody, police said.

"Identity theft can involve a single criminal stealing the personal financial information of a single victim or, as it did here, it can involve a group of criminals stealing the credit card numbers of millions of people, many of whom may not even learn that they were victims for months or years," said Attorney General Michael Mukasey.

"Identity theft victims suffer well beyond the immediate financial costs; they suffer lost confidence in their privacy and security, as well as the emotional strain and the time it can take to repair damaged financial lives and credit histories. In many cases, the effects of these crimes can be felt for years after they are committed."

Mukasey and other officials said the case serves as a reminder that computer crimes can cross international borders.

"We have been working with countries around the world to identify and address technical vulnerabilities in computer networks, and to ensure that laws and procedures are adequate to deal with these kinds of crime," Mukasey said. "And we have been working closely with our international partners to crack specific cases when they take us beyond our borders."

(http://www.cnn.com/2008/CRIME/08/05/card.fraud.charges/index.html)

Tuesday, August 5, 2008

Police Director Sues for Critical Bloggers' Names

Site popular with citizens, officers

By Amos Maki (Contact), Memphis Commercial AppealTuesday, July 22, 2008

Memphis Police Director Larry Godwin and the city of Memphis have filed a lawsuit to learn who operates a blog harshly critical of Godwin and his department.

The lawsuit asks AOL to produce all information related to the identity of an e-mail address linked to MPD Enforcer 2.0, a blog popular with police officers that has been extremely critical of police leadership at 201 Poplar.

"In what could be a landmark case of privacy and the 1st Amendment," the anonymous bloggers write on the site, "Godwin has illegally used his position and the City of Memphis as a ram to ruin the Constitution of the United States.

"Some members of the Enforcer 2.0 have contacted their attorneys and we are in the process of filing a lawsuit against Larry and the City of Memphis. What's wrong Larry? The truth hurt?"

It wasn't clear if the lawsuit is aimed at shutting down the site or if it's part of an effort to stop leaks that might affect investigations.

Many of the documents in the case, filed in Chancery Court on July 10, have been sealed by Chancellor Kenny Armstrong. Police officials would not discuss the action, citing pending litigation.

Whatever the reason, Internet and free-speech advocates said they had serious problems with the city's actions.

"You can complain about the government, and you should be able to do that without fear of retaliation or threatening actions on the part of the people in these positions," said Lillie Coney, associate director of the Electronic Privacy Information Center, a Washington-based watchdog group. "I guess they've kind of annoyed them at some level, but you really don't want to see law enforcement or government resources spent in this way."

AOL has been ordered to turn over similar records in the past.

In 2001, Japanese company Nam Tai filed a complaint in California state court against unknown Web posters claiming they committed libel and violated the state's unfair business practices statute.

Nam Tai was able to obtain the e-mail address of one of the posters and then obtained a subpoena from a Virginia state court to AOL seeking the name behind the e-mail address.

AOL filed a motion to have the order quashed, but lost that bid in trial court and the Supreme Court of Virginia.

Officials with the American Civil Liberties Union of Tennessee said they will be watching the case closely and that anonymous speech is essential to the free flow of ideas in a democracy.

"We are quite interested in preserving the anonymity of the bloggers," said Hedy Weinberg, executive director of the ACLU of Tennessee. "Anonymous speech has long been protected speech under the First Amendment."

The bloggers, who operate under the name of Dirk Diggler -- the name of the porn star in "Boogie Nights" -- say their site provides an important service to officers and citizens.

"This is another attempt at disrupting an outlet for officers to gather and complain about the administration," they said on the site.

"Further, this allows us unrestricted communication with the citizens of Memphis. The citizens should be made aware of the scandals that rock the administration and shudder the rocky foundation in which they operate today."

The bloggers also said city attorneys earlier this year wrote a threatening letter on city letterhead to a company that produced T-shirts for the bloggers.

(http://www.commercialappeal.com/news/2008/jul/22/police-director-sues-find-identity-blogger-critica/)

Monday, August 4, 2008

New Systems Keep a Close Eye on Online Students at Home

By ANDREA L. FOSTER

Tucked away in a 1,200-page bill now in Congress is a small paragraph that could lead distance-education institutions to require spy cameras in their students' homes.

It sounds Orwellian, but the paragraph — part of legislation renewing the Higher Education Act — is all but assured of becoming law by the fall. No one in Congress objects to it.

The paragraph is actually about clamping down on cheating. It says that an institution that offers an online program must prove that an enrolled student is the same person who does the work.

Already, the language is spurring some colleges to try technologies that authenticate online test takers by reading their fingerprints, watching them via Web cameras, or recording their keystrokes. Some colleges claim there are advantages for students: The devices allow them to take tests anytime, anywhere. Many students must now travel to distant locations so a proctor can watch them take exams on paper.

But some college officials are wary of the technologies, noting that they are run by third-party vendors that may not safeguard students' privacy. Among the information the vendors collect are students' fingerprints, and possibly even images from inside their homes.

"This is taking a step into a student's private life," said Rhonda M. Epper, co-executive director of Colorado Community Colleges Online. "I don't know if we want to extend our presence that far."

The officials also want flexibility to comply with the proposed law. They worry that the government will force them to use a particular method that could be too expensive or that would emphasize exams over other assessments. They also complain that the provision implies that cheating is more of a problem among students online than among students in a classroom.

Biometric Solutions

Three technologies, which vendors have been promoting at college conferences and which colleges are evaluating, illustrate the promises and pitfalls of this kind of monitoring.

Troy University, in Alabama, has been testing a gadget that features a mirrored sphere suspended above a small pedestal. Called Securexam Remote Proctor, it's about the size of a large paperweight and plugs into a standard port on a home computer. The pedestal includes a groove for scanning fingerprints, a tiny microphone, and a camera. The sphere reflects a 360-degree view around the test taker, which the camera picks up.

Students are recorded during exams, and anything suspicious — such as someone else's presence or voice in the room — is flagged.

To use the system, a student sits in front of a computer and places a finger on the pedestal. Securexam checks whether the digital fingerprint and the image of the student match those the student provided at registration. Then the test opens online via a course-management system. The student is prevented from viewing anything else online.

The system is not cheap. Students pay $150 for the device. Further, it works only with the Windows operating system and an Internet Explorer browser, creating a problem for students who have Macs, for instance.

Software Secure Inc., based in Cambridge, Mass., developed the device with $1.1-million in seed money from Troy. In return, the university gets the first 10,000 Securexams that the company produces. If it sells more than that, the university receives a share of the proceeds.

By the end of this fall, the university anticipates that about 800 of its 17,000 eCampus students from across the world will have used Securexam. Thousands more will begin using the device in January.

World Campus, the online arm of the Pennsylvania State University system, is testing another system called Webassessor. It uses proctors, Web cameras, and software that recognizes students' typing styles, such as their speed and whether they pause between certain letters. Students purchase the cameras for $50 to $80 apiece. They allow proctors to view a student's face, keyboard, and workspace.

The Phoenix-based provider of the system, Kryterion Inc., employs proctors who remotely observe and listen to as many as 50 students at a time. If the keystroke pattern of a student who is taking an exam does not match the one he or she provided at registration, or if the image of a student taking an exam does not match a digital photograph that the student provided at enrollment, then the student cannot start the exam. A proctor can also stop a student who is acting suspiciously from completing an exam. Students must have a broadband connection to use the service.

Kryterion charges institutions $20,000 to customize the software and for training. It also charges colleges each time students sit for an exam.

World Campus has been trying out Webassessor this summer on undergraduates in two courses. "At the moment, things look promising for a complete rollout," says Rick L. Shearer, interim director of World Campus Learning Design, a division of World Campus.

Challenging Questions

Several other universities are forming partnerships with Acxiom Corporation. The company's system relies on test takers' answering detailed, personal "challenge" questions. Acxiom, based in Little Rock, Ark., gathers information from a variety of databases, including criminal files and property records. The company uses the data to ask students questions, such as streets they lived on, house numbers, and previous employers. If students answer the questions correctly, they proceed to the exams.

National American University Online is testing the system on its students, and the Colorado community-college consortium is also considering using it.

Jeffrey L. Bailie, dean of online instruction for National, says he anticipates that the system will be used on students when they take final exams or other high-stakes assessments. "We want to take just one added step to make sure that the person on the other end is who they're reporting to be," he says.

He declines to reveal how much the system costs. But Michael A. Jortberg, who is leading Acxiom's higher-education efforts, says it costs roughly $10 a student.

Unfair Burdens?

Despite the lure of these technologies, many college officials have decided to wait to test them on their students, noting the cost. Furthermore, officials say, it's unclear what requirements the Education Department would impose on institutions to comply with the proposed law.

"It's going to reduce access," says John F. Ebersole, president of Excelsior College, an online institution based in Albany, N.Y. "It's going to increase costs."

Other officials are disturbed that the proposed law singles out online education.

"We're feeling a little picked on," says Lori McNabb, assistant director of student and faculty services at the UT TeleCampus, the online arm of the University of Texas system.

She says there's no evidence that cheating or fraud happens more often with its students than with students in face-to-face classes.

How do professors know that a student enrolled in a large lecture class is the same one handing in an assignment or test, she asks?

She and others say online instructors rely more on discussions, writing assignments, quizzes, group work, and "capstone" projects to judge their students' performance, and less on big exams. Tests, when they are administered, are often randomized so students in the same class get different questions, which must be answered quickly, making it difficult for those unfamiliar with the material to take tests for students. Instructors become familiar with students' writing styles so they can spot fraudulent work, officials add.

Mr. Ebersole, despite his worries about reduced access for students, does see one upside to the proposed law. If the provision causes online colleges to document that their enrolled students are indeed the same ones completing course work, online education could garner more respect, he says.

"If it raises confidence and credibility in the eyes of regulators and traditional educators," says Mr. Ebersole, "it's worth it."

(http://chronicle.com/temp/email2.php?id=wHYRmQ5ZKbyGxBHvt8Q6WmmgVs4qfzpB; from issue dated Jul 25, 2008)