ADVERTISEMENT

No indictment for alleged Palin e-mail hacker

A federal grand jury today decided not to indict a University of Tennessee student in connection with the hacking of Republican vice presidential pick Sarah Palin's personal e-mail. The panel let David Kernell, the son of Democratic state Rep. Michael Kernell of Memphis, off the hook—for now—but the Justice Department told the Tennessean that its  "inquiry into this matter is ongoing."

The Alaska governor's Yahoo! e-mail account was broken into last week by someone with an Internet address traced to the younger Kernell's apartment complex in Knoxville, Ars Technica reports. Someone visited Yahoo!'s mail service, reset Palin's password and announced results of the break-in on the Wikileaks.org Web site.

The FBI and U.S. Secret Service are investigating the incident, which was a multi-step process made possible by weaknesses in the password reset feature (found on many Web sites—not just Yahoo!) as well as proxy servers that allow people to cover their tracks as they navigate the Web. The hacker (or hackers) may have exploited the password resetting system of Yahoo's e-mail service using details about Palin's life—her birth date and zip code, for example—pulled from sources freely available on the Web.

Share this Article:

Comments

You must sign in or register as a ScientificAmerican.com member to submit a comment.
Scientific American Holiday Sale

Black Friday/Cyber Monday Blow-Out Sale

Enter code:
HOLIDAY 2014
at checkout

Get 20% off now! >

X

Email this Article

X