The Inquirer-Home

Fannie Mae 'hacker' says he didn't do it

Nibble FBI said he tried to wipe 4000 servers
Mon Feb 02 2009, 13:08

AN INDIAN computer programmer has pleaded not guilty to charges that he planted a computer virus to wipe 4,000 Fannie Mae computer servers on the day he was fired.

Rajendrasinh Babubhai Makwana, is charged with setting virus to propagate throughout the Fannie Mae network on January 31. It was discovered five days later and removed.

If convicted, Makwana faces a maximum sentence of 10 years in prison.

Fannie Mae was the once largest US mortgage finance company and lost loads of money and evicted loads of poor souls after lending billions to people never likely to be able to pay the money back. Bank staff earned massive bonuses out of the scam which was eventually financed by US taxpayers. µ

L'Inq
AP

Share this:

Comments
Dennis notwithstanding.

In order to get a trial in the USA you must plead innocent. If you plead guilty you cannot get a trial as the issue has been decided in your plea. You can however, plead innocent, and then when the trial begins change to a guilty plea which will end the trial and move into sentencing.

posted by : Wandering, 02 February 2009 Complain about this comment
some guy

Often the first responder muddies up the evidence. If you worked where this guy works, you might see the use of common logons tracked by paper logs. You might see a failure to maintain and archive security logs in a sound manner. The fact that the unauthorized modification had to be discovered by someone indicates that they do not have a decent system to maintain system integrity, such as TripWire. If they do have the system, they clearly do not regularly look at their alerts. As is too common in alleged computer crime, the management did not take the initiative to protect their information assets and this management failure allows unauthorized activities to occur without consequence.

The time to deal with serious security incidents is before the occur. You would have the incident response team execute the plan spelled out in your system accreditation. The response will have been tested and would have the admissibility you may lack. Management’s lack of a incident response plan and incident response team would just mean the cat is away (for you non English speakers, the colloquialism is “When the cat is away, the mouse will play”). Well, this mouse just might get more than a day in court.

posted by : Scott, 02 February 2009 Complain about this comment
IF YOU ASK ME...

I'd say the FEDS ARE PARANOID. IT GOES AROUND YOU KNOW. They are "sending a message" with this guy.

posted by : Elaine Cherry, 02 February 2009 Complain about this comment
When did Fannie Change it's business?

"Fannie Mae was the once largest US mortgage finance company and lost loads of money and evicted loads of poor souls after lending billions to people never likely to be able to pay the money back."

When did Fannie start loaning money? Fannie buys up mortgages that the bank lends. Please ensure that you report factually information!!! Also, they probably bought those bad mortgages because they were force by regulators and government to provide housing to low income people, possibly people that could not afford and should not be buying a home. If you want to blame someone, why don’t you blame the banks then. They originated the loan, not fannie.

posted by : Lonely Bull, 02 February 2009 Complain about this comment
programmer

Evidence should show when the program was updated showing the first time the malicious code was inserted. This should correlate to guilt or innocence of the accuse.

posted by : Tony, 02 February 2009 Complain about this comment
Best argument

This case will probably be so technical that jurors or judges will not be able to determine what is fact. I think its going to come down to the lawyer's arguments and which expert witness is believed. Part of the issue is that it could be argued that the defendant was also a victim of some super hacker and was chosen as the super hacker's proxy because of the defendant's terminated status and high privileges.

posted by : Tavi, 02 February 2009 Complain about this comment
Ahhhh! Lawyers!

Look what happened! You turned over a rock and layywers cam wigglwing out! Sqush-em Sqush-em!

posted by : BigDave, 02 February 2009 Complain about this comment
Hold the phones first

Let's make sure this guy isn't autistic first. Maybe he was just looking for UFOs in those servers.

posted by : Dan, 02 February 2009 Complain about this comment
Not true

Not true. You can always go to trial and plead Guilty. Happens somewhat regularly. It allows you to introduce mitigating circumstances in the penalty phase.

posted by : Dennis, 02 February 2009 Complain about this comment
That's not what an "innocent plea" means.

Suppose you were guilty of a crime in America, and you believed the prosecutor was unwilling to view any mitigating circumstances, and would only offer a deal of the maximum for the most severe form of the crime. It happens a lot.

Then suppose you felt a jury of your peers might see things in a better light, and you wanted to go to trial and present your side of the matter.

In America you can only get a trial by jury by pleading "innocent". No one seriously believes you are declaring you did not do it, it's just how you get a trial rather than judgement by a judge and prosecutor.

posted by : Wandering, 02 February 2009 Complain about this comment
aboutus
Advertisement
Subscribe to INQ newsletters
Advertisement
INQ Poll

Authorities in several countries raided Megaupload recently, shut down all of its services, seized hundreds of servers and arrested several of its executives on criminal charges.

Do you think the move was justified?