Quantcast StorefrontBacktalk » Blog Archive » Gonzalez Pleads Not Guilty To New Jersey Charges
advertisement
advertisement

Gonzalez Pleads Not Guilty To New Jersey Charges

Written by Evan Schuman
October 15th, 2009
Like this story? Share it
To share this story with people in your social network, please click on the network icons below.

Albert Gonzalez, the man who U.S. federal authorities have accused of masterminding the cyber attacks of more than a dozen of the nation’s largest retail chains, pled not guilty Tuesday (Oct. 13) to charges from a New Jersey retail breach indictment.

Gonzalez was whisked from his federal prison cell at the Central Falls Detection Center in Rhode Island to face U.S. District Court Judge Jerome Simandle in Camden, New Jersey. (Yes, I know. “He was forced to spend hours in Camden. Hasn’t the man been punished enough?” Hey, I’ll make the New Jersey jokes around here. At least he was spared a trip to the federal courthouse in Newark. When you’re indicted in Jersey, you count your blessings.)

Having had just about all of his money confiscated by the feds, Gonzalez could no longer pay his attorney and was assigned a federal public defender, Christopher O’Malley, who said he was only told of the case the day of the plea. Judge Simandle set pretrial motions due from Gonzalez on December 11, with the government’s reply due January 8, 2010. A trial date has been scheduled for January 25, 2010.

As a practical matter, though, it’s highly unlikely that this case will ever get to trial. First, there are quite a few major retailers named as victims in the New Jersey case—including Hannaford and 7-Eleven, along with processor Heartland—in addition to at least two more major retail chains that the feds have yet to publicly identify. (StorefrontBacktalk has identified one of the unidentified New Jersey chains as J.C. Penney and Target as one of the unidentified chains in the Boston indictment, based on information from officials involved in those cases.)

Both chains would really rather not have to testify, a concern shared by federal officials, who would prefer to have as few of their investigative techniques as possible discussed publicly.

Gonzalez himself has already pled guilty to similar charges in New York and Boston and he was in extensive plea negotiations with Newark, which seems to indicate a willingness to consider pleading guilty. Indeed, with the years of prison already awaiting him in connection with the Boston and New York guilty pleas, it’s unclear how much more punishment federal officials truly think they could get by forcing the New Jersey case to go to trial.

With both sides having a strong incentive to settle this case, it’s quite unlikely it will get to trial. Then again, with Gonzalez’s day-to-day existence now consisting of being in federal prison, a lengthy courtroom trial might prove a welcome diversion, and there’s always the chance of a jury acquittal. Either way, we’ll be tracking this case closely.


advertisement

Leave a Reply

Newsletter

Quickly catch-up on the latest in E-Commerce and Retail Tech with our free weekly newsletter, with urgent bulletins as news merits.
advertisement

Most Recent Comments

Kill All The Passwords

This article does mention, but does not give enough attention to, the fact that the attacks discussed are only feasible when the encrypted password file can be copied and subjected to an offline attack. The trick is to have authentication performed on a separate, much more strongly secured host - such as an Active Directory Domain Controller, or a Kerberos server, or a NIS+ server, or even using something as banal as an LDAP-over-SSL authentication dialog. In these environments, the odds of the "password file" being stolen and subjected to an offline attack go to near zero, and only online attacks may be carried out by the attacker. With sensible exponential backoff between failed password attempts, lockout after a modest number of failed attempts on a single account, and pattern detection, that minimum 7 character password is quite secure enough. Passwords aren't dead yet for security purposes, and they will be with us for a very long while to come for practical purposes. The trick is to employ them correctly. Read more...
The possibilities you describe are years away from being implemented at best, so for the moment passwords are an ugly reality. Luckily, password managers can easily manage hundreds of passwords of any length. The only thing a user needs to remember is the master password. It seems like an easier task to educate users on how to use password managers rather than implement complex security technology on a global basis. Read more...