"Police blotter" is a weekly report on the intersection of technology and the law. This episode: An Internet credit card thief is nabbed.
What: Appeal by a Massachusetts man who had pleaded guilty to illegally possessing credit card numbers obtained from e-commerce sites.
When: Decided July 22 by the First Circuit Court of Appeals.
Outcome: Sentence upheld, including additional punishment for "special" computer skills related to Web hacking.
When Kenneth Prochner tried to enter Canada at a border crossing from New York state, police discovered he was carrying papers and a notebook with "numerous" credit card numbers.
A quick investigation revealed that the credit card numbers had been reported as lost or stolen, and Prochner confessed to obtaining them from the Internet. In a written statement, he described altering Web sites' cgi-bin addresses in a way that let him view order logs with credit card numbers.
After his confession, Prochner seemed to realize he had little chance in court. He plead guilty in July 2003 to violating a federal law prohibiting the possession of 15 or more credit card numbers with intent to defraud. He was sentenced to a 25-month prison term and three years of supervised release.
His attorney appealed, saying the sentence, which included $2,610.19 of restitution, was too harsh. Prochner also challenged a requirement barring him from working with children while on supervised release--a condition imposed because entries in his journal talked about wanting to have sex with boys and, in the court's words, indicated that he "may have" done so.
A three-judge panel of the appeals court rejected all of his arguments.
They concluded Prochner had "special skills"--a phrase used in federal sentencing guidelines--because he knew how to rewrite the input sent to Web sites' cgi-bin interfaces. "Prochner's affidavit supports finding a level of sophistication well beyond the ordinary," the judges concluded. (Without the special skills enhancement, his sentence would have been as low as zero to six months.)
The court also concluded that "Prochner might pose a threat to children, and that evaluation for participation in a sex offender treatment program, and participation if further ordered, was reasonably related to the purposes of supervised release."
Quote from Prochner's written statement: (As released by the court; some parentheses and brackets have been removed for clarity.) "After accessing the Internet, via telnet and MIRC/PIRCH and accessing websites' order logs via Cart32 (an Internet credit card ordering program), I scanned twenty some credit cards... credit cards can be checked for validity via bots (i.e. scripts that check cards are still active/inactive), and I used a MIRC based program via Windows 98SE, on an Undernet channel and a Dalnet based channel to check three or four AMEX cards and found them to be 'extremely' valid."