◆ SpookStack

[___Sht:04 Pa 12/5/2001 -0500, No Subject Page 2.0f2y6 5 b7C -5 Lamo said he found the hole by poking through Worldcom's public Web site. "Tons of times there's data that shouldn't be available to anybody that is out on a public Web server," Lamo said. Lamo praised Worldcom's security procedures, and said he used an unconventional way to enter the company network that is not often addressed by security experts. He stressed that he didn't attempt to damage the internal networks. Within the last several months, Lamo has found security problems at several major computer firms, including Microsoft and AOL Time Warner. : In September, he discovered a hole on Yahoo's news site that allowed him to alter several stories. In addition to Worldcom's clients, the company itself was also at risk, Lamo said. Lamo found ways to reset company passwords, give himself all the computer power of a company dixector, redirect e-mail and find personal information for Worldcom's employees. "It would have been possible for anyone who was really motivated to change direct deposit information for employee paychecks to arbitrary accounts without the employee being notified,” Lamo said. { i i bé -2 BIC -2 FBI(19-cv-1495)-2151