Feds Charge Suspected NASA Hacker

A 20-year-old hacker gained control over sensitive NASA computer systems at the Jet Propulsion Laboratory in Pasadena and at Stanford University, then used them to penetrate other government and university systems, federal prosecutors said Thursday.

Jason Allen Diekman of Mission Viejo admitted to investigators that he hacked into “hundreds, maybe thousands” of computers over the last two years, including systems at Harvard, Cornell, UCLA, UC San Diego and Cal State Fullerton, according to a government affidavit.

While Diekman’s intrusions caused some damage to NASA software, Assistant U.S. Atty. Arif Alikhan said they did not disrupt operations of the agency’s space satellites.

Diekman was charged in a federal complaint with illegal hacking and using stolen credit card numbers to buy several thousand dollars worth of electronic equipment and clothing.

He was taken into custody Thursday at the Orange County Jail, where he has been serving time on an unrelated grand theft conviction.

Diekman first gained “root level” access to two NASA computer systems at JPL in June 1998, according to an affidavit by Mark Smith, a supervisory agent with NASA’s inspector general’s office. Root access gives an intruder the ability to create, delete or modify files and to alter security on a system.

NASA’s computer security experts discovered the break-in and alerted Smith.

A review of network communications logs showed that the hacker was using the nickname Shadow Knight to exchange messages with other Internet hackers. But his identity and location remained a mystery. Smith said the intruder used the NASA systems to run Internet Relay Chat, a software program favored by hackers because it enables them to communicate without being detected.

Some clues were found, however. Other hackers referred to Shadow Knight in messages as “Jason.” In one exchange, Shadow Knight said he would be turning 18 in four days, or July 4.

The NASA investigator said a confidential source who had provided reliable information in the past identified Diekman as the NASA hacker four months later. A check of Department of Motor Vehicle records showed that Diekman was born July 4, 1980.

Despite the match, Alikhan said investigators did not have enough evidence to make an arrest.

In the meantime, Shadow Knight continued his break-ins. The FBI reported that someone using that nickname had gained entry to 24 computer systems at Stanford, including two owned by NASA, between September 1998 and March 1999.

The NASA computers at Stanford contained flight control software for NASA satellites.

Using a telephone monitoring device, investigators were eventually able to match telephone calls from Diekman’s home to the exact times Shadow Knight gained entry to NASA’s computers. Armed with that information, they obtained a warrant to search Diekman’s home in November.

Smith said that during the search Diekman admitted breaking into the NASA computer systems at JPL and Stanford along with “hundreds, maybe thousands” of other computers elsewhere in the country.

On the hard drive of one of several computers seized at Diekman’s home, investigators said they found about 500 stolen credit card numbers, which he allegedly used to buy more than $6,000 worth of computer equipment, stereo speakers and clothing.

The affidavit said they also found computer logs describing Diekman’s “carding” activities. Carding is a hacker’s term for using stolen credit card information to purchase goods.

Diekman was not arrested immediately. Alikhan declined to say why.

In August, however, he was arrested by Orange County sheriff’s detectives for allegedly stealing equipment from Cox Cable and storing it in his home. He pleaded guilty to grand theft and was sentenced to 75 days in jail.

He made an initial appearance on the hacking charges Thursday afternoon before a federal magistrate, who ordered him detained pending arraignment on three felony counts and one misdemeanor.

If convicted, he could be sentenced to a maximum of 25 years in prison and a $750,000 fine.