MafiaBoy

Michael Calce (born 1986, also known as MafiaBoy) is a security expert and former computer hacker from Île Bizard, Quebec who launched a series of highly publicized denial-of-service attacks in February 2000 against large commercial websites, including Yahoo!, Fifa.com, Amazon.com, Dell, Inc., E*TRADE, eBay, and CNN.[1] He also launched a series of failed simultaneous attacks against nine of the thirteen root name servers.[2]

Early life

Calce was born in the West Island area of Montreal, Quebec. When he was five, his parents separated and he lived with his mother after she had won a lengthy battle for primary custody.[2] Every second weekend he would stay at his father's condo in Montreal proper. He felt isolated from his friends back home and troubled by the separation of his parents, so his father purchased him his own computer at the age of six. It instantly had a hold on him: "I can remember sitting and listening to it beep, gurgle and churn as it processed commands. I remember how the screen lit up in front of my face. There was something intoxicating about the idea of dictating everything the computer did, down to the smallest of functions. The computer gave me, a six-year-old, a sense of control and command. Nothing else in my world operated that way."[2]

Project Rivolta

On February 7, 2000, Calce targeted Yahoo! with a project he named Rivolta, meaning "rebellion" in Italian.[2] Rivolta was a denial-of-service attack in which servers become overloaded with different types of communications to the point where they become unresponsive to commands.[3] At the time, Yahoo! was a multibillion-dollar web company and the top search engine.[4] Mafiaboy's Rivolta managed to shut down Yahoo! for almost an hour. Calce's goal was, according to him, to establish dominance for himself and TNT, his cybergroup, in the cyberworld.[2] Buy.com was shut down in response. Calce responded to this in turn by bringing down eBay, CNN, and Amazon via DDoS over the next week. Calce attempted but was unsuccessful in bringing down Dell during this DDoS attack.

In a 2011 interview,[5] Calce claimed that the attacks had been launched unwittingly, after inputting known addresses in a security tool he had downloaded from a repository on the now defunct file-sharing platform Hotline, developed by Hotline Communications. Calce would then have left for school, forgetting the application which continued the attacks during most of the day. Upon coming home Calce says that he found his computer crashed, and restarted it unaware of what had gone on during the day.[6] Calce claimed when he overheard the news and recognized the companies mentioned being those he had inputted earlier in the day, that he had "started to understand what might have happened".[5]

Aftermath

The U.S. Federal Bureau of Investigation and the Royal Canadian Mounted Police first noticed Calce when he started claiming in IRC chatrooms that he was responsible for the attacks. He became the chief suspect when he claimed to have brought down Dell's website, an attack that had not been publicized at that time. Information on the source of the attacks was initially discovered and reported to the press by Michael Lyle, chief technology officer of Recourse Technologies.[7]

Calce initially denied responsibility but later pleaded guilty to most of the charges brought against him.[8] His lawyer insisted the child had only run unsupervised tests to help design an improved firewall, whereas trial records indicated the youth showed no remorse and had expressed a desire to move to Italy for its lax computer crime laws.[9] The Montreal Youth Court sentenced him on September 12, 2001 to eight months of "open custody," one year of probation, restricted use of the Internet, and a small fine.[1][10]

Matthew Kovar, a senior analyst at the market research firm Yankee Group, generated some publicity when he told reporters the attacks caused US$1.2 billion in global economic damages.[11] Media outlets would later attribute a then-1.45:1 conversion value of 1.7 billion CAD to the Royal Canadian Mounted Police. Computer security experts now often cite the larger figure[12] (sometimes incorrectly declaring it in U.S. dollars),[13][14] but a published report says the trial prosecutor gave the court a figure of roughly $7.5 million.[9]

Significance

While testifying at a hearing before members of the United States Congress, computer expert Winn Schwartau said that "Government and commercial computer systems are so poorly protected today they can essentially be considered defenseless - an Electronic Pearl Harbor waiting to happen."[15] The fact that the largest website in the world could be rendered inaccessible by a 15-year-old created widespread concern. By this time, the internet had already become an integral part of the North American economy. Consumers lost confidence in online business and the American economy suffered a minor blow as a result.[4] Former CIA agent Craig Guent credits Mafiaboy for the significant increase in online security that took place over the decade.[3]

Later years

During the latter half of 2005, he wrote a column on computer security topics for Le Journal de Montréal.[16]

In late 2008, with journalist Craig Silverman, Calce announced he was writing a book, Mafiaboy: How I Cracked the Internet and Why It's Still Broken.[17][18]

On October 26, 2008, he appeared on the television program Tout le monde en parle to discuss his book.[19][20][21] The book received generally positive reviews.[22]

Calce appeared on a TV show, Last Call with Carson Daly, talking about his days as a hacker, how President Clinton became involved, and how it ultimately landed him in jail all at age 15.[23]

In 2014, Calce appeared on the twelfth episode of the Criminal podcast.[24]

References

1. FBI Facts and Figure 2003, archived from the original on 2007-03-26, retrieved 2007-03-27
2. Calce, Michael. Mafiaboy: How I Cracked the Internet and Why It's Still Broken. Toronto: Penguin Group, 2008.
3. Majid, Yar. Cybercrime and Society. Thousand Oaks: Sage Publications, 2006.
4. Davis, Wall. Crime and the Internet. New York: Routledge, 2001.
7. Hot On the Trail of Mafiaboy, Wired, 2000-02-15
8. "Mafiaboy given eight months", The Register, 2001-09-13, retrieved 2007-03-27
9. "Prison Urged for Mafiaboy", Wired magazine, 2001-06-20, retrieved 2007-03-27
10. "Mafiaboy given eight months", The Register, 2001-09-13, retrieved 2007-03-27
11. Niccolai, James (2000-02-10), Analyst puts hacker damage at $1.2 billion and rising, InfoWorld, archived from the original on 2007-11-12, retrieved 2007-04-22
12. Harris, James K. (2006), "Ethical Perspectives in Information Security Education" (PDF), Issues in Information Systems, VII (1): 181, archived from the original (PDF) on 2007-09-29
13. Robert, J.M.; Cosquer, F. (2002), "Protecting Data Network Availability" (PDF), Alcatel Telecommunications Review, 2002 (Q3): 2, archived from the original (PDF) on 2007-09-27, retrieved 2007-03-28
14. Dept. of Computing Science, Computer Crime (lecture slides) (PDF), University of Alberta.
15. Winn. "Winn Schwartau – Biography". winnschwartau.com. Archived from the original on 14 May 2017. Retrieved 16 May 2017.
16. "Mafiaboy's columns", Le Journal de Montréal, 2005, archived from the original on 2005-12-03, retrieved 2007-03-27
17. Mafiaboy: How I Cracked the Internet and Why It's Still Broken, 2008, archived from the original on 2008-10-02, retrieved 2008-10-06
18. "Canadian teen hacker reveals secrets in tell-all book". Retrieved 2008-10-09.
19. "Mafiaboy to appear on Tout le monde en parle". Retrieved 2008-10-26.
20. Radio-Canada.ca, Télévision -. "Émission du 26 octobre 2008 - Tout le monde en parle - Radio-Canada.ca". Tout le monde en parle - Radio-Canada.ca. Retrieved 16 May 2017.
21. "Archived copy". Archived from the original on 2008-12-12. Retrieved 2008-11-24.CS1 maint: archived copy as title (link)
22. "Archived copy". Archived from the original on 2009-06-01. Retrieved 2009-06-10.CS1 maint: archived copy as title (link)
23. "Last call with carson daly - Michael "Mafia Boy" Calce". www.demonstech.com. Archived from the original on 12 June 2017. Retrieved 16 May 2017.
24. "EPISODE TWELVE: BREAK THE INTERNET (11.25.2014) - Criminal". thisiscriminal.com. Retrieved 16 May 2017.