One of the more memorable stories (at least to us tech types) to come out of the 2008 presidential campaign was the compromise of Republican vice presidential candidate Sarah Palin’s email account.
A college student named David Kernell gained access to Palin’s personal email account here at Yahoo! through what is becoming the most popular and simple way to gain access to all manner of protected websites: by guessing the answer to the security question used to reset her password. Palin had her service configured such that only her birth date, ZIP code, and a single additional piece of information was needed: Where did Palin meet her husband? (All together with the answer: Wasilla.) Since all of this information was either public or easily guessable, getting in was almost trivial for Kernell.
And that’s all it took for Kernell to make headlines for a day.
Then the cops came knocking. The 22-year-old (and the son of a Democratic legislator from Tennessee), quickly landed in hot water, and a weeklong trial over the issue has just wrapped up.
After facing the jury, the news isn’t good for the young man: After four days of deliberation, Kernell was found guilty Friday of one felony and one misdemeanor charge against him. The felony charge — obstruction of justice — is the whopper here. It carries a potential sentence of 20 years in prison. The misdemeanor, unauthorized access of a computer, has a maximum sentence of only one year served.
Kernell was acquitted of wire fraud, and the judge declared a mistrial on charges of identity theft after the jury deadlocked. It is unclear if he’ll be retried for identity theft, but I suspect not.
Judge Thomas Phillips has not set a date for sentencing yet, and Kernell — who is out on bond, forbidden to use a computer — has not released a comment.
Computer News brought to you by Metrand Corp. Metrand Corp is a Software Developer for Electronic Health Records (EHR) or Electronic Medical Records (EMR), Medical Billing Software, Home Health Billing Software, and any medical practitioner's electronic software systems.