[Source: Lucie Morris, Security Risk Claim Computer Ace Cleared, *PA News*,21 Nov 1997; PGN Abstracting]

[DMK: Two of the best publications regarding the Rome Air Force Base
hack-ins are the GAO Report available online through
http://www.gao.gov/reports.htm under title [AIMD-96-92] Information
Security: Computer Attacks at Department of Defense Pose Increasing Risks
and the Fall 96 Computer Security Institute’s journal, both articles written
in whole or in part by Jim Christy, the Air Force investigator involved.
Mixed messages. Is the interpretation to be, if you hack, you’ll get off?

Or if you hack some other country’s computers, you won’t be prosecuted
because it costs too much? Of if your partner in crime gets off with just a
fine, prosecutors won’t spend a lot of money going after you?
So Bevan *may* have hacked into computers worldwide. But he has no
convictions. How long until he’s peddling his skills as a computer security
expert, or even on a “Tiger Team” or penetration testing group?]

Dave Kennedy [CISSP] Director of Research, National Computer Security Assoc.