Although the details of this story are interesting and compelling, my initial read of this story left me thinking, "Six years is lengthy, eh? I don't think that's considered 'lengthy' in the USA." Our prison system terrifies me.
What's the longest anyone's actually served in custody for breaking into computers in the US, and what's the median sentence actually served? I don't have the data at my fingertips but if I had to bet, I'd bet that it's much less than 6 years. Google: [popehat whale sushi]. One reason you're terrified is that our system (idiotically) goes out of its way to deceptively terrify people. It is in practice not as bad as i…
Here's a list for you: http://www.fierceitsecurity.com/story/hackers-chains-13-bigg...
Up until this week it was Albert Gonzalez for got 20 years for his role in the TJX retail break in. Remember, these are federal sentencing guidelines so no time off for good behavior. You get sentenced to 20 years, you do 20 years, period.
>>> Six years is a long time for what this offense appears to be, though.
This guy is also a repeat offender. In the US, I'm pretty sure with prior offenses with computers, they'd go for a 20-30 year sentence.