Mendax thought how strange it was to be such good friends with someone, to work so closely with him, and yet to always run out of conversation.
"OK, well, I better go. Things to do," Mendax said in a friendly voice.
"Yeah, OK. Bye Mendax," Prime Suspect said cheerfully.
Mendax hung up.
Prime Suspect hung up.
And the AFP stayed on the line.
In the twelve months following the initial line trace in late 1990, the AFP continued to monitor the RMIT dial-up lines. The line traces kept failing again and again. But as new reports of hacker attacks rolled in, there seemed to be a discernible pattern in many of the attacks. Detectives began to piece together a picture of their prey.
In 1990 and 1991, RMIT dial-ups and computers were riddled with hackers, many of whom used the university"s systems as a nest--a place to store files, and launch further attacks. They frolicked in the system almost openly, often using RMIT as a place to chat on-line with each other. The inst.i.tute served as the perfect launchpad. It was only a local phone call away, it had a live Internet connection, a reasonably powerful set of computers and very poor security. Hacker heaven.
The police knew this, and they asked computer staff to keep the security holes open so they could monitor hacker activity. With perhaps a dozen different hackers--maybe more--inside RMIT, the task of isolating a single cell of two or three organised hackers responsible for the more serious attacks was not going to be easy.
By the middle of 1991, however, there was a growing reluctance among some RMIT staff to continue leaving their computers wide open. On 28 August, Allan Young, the head of RMIT"s Electronic Communications Group, told the AFP that the inst.i.tute wanted to close up the security holes. The AFP did not like this one bit, but when they complained Young told them, in essence, go talk to Geoff Huston at AARNET and to the RMIT director.
The AFP was being squeezed out, largely because they had taken so long conducting their investigation. RMIT couldn"t reveal the AFP investigation to anyone, so it was being embarra.s.sed in front of dozens of other research inst.i.tutions which a.s.sumed it had no idea how to secure its computers. Allan Young couldn"t go to a conference with other AARNET representatives without being ha.s.sled about "the hacker problem" at RMIT. Meanwhile, his computer staff lost time playing cops-and-robbers--and ignored their real work.
However, as RMIT prepared to phase out the AFP traps, the police had a lucky break from a different quarter--NorTel. On 16 September, a line trace from a NorTel dial-up, initiated after a complaint about the hackers to the police, was successful. A fortnight later, on 1 October, the AFP began tapping Prime Suspect"s telephone. The hackers might be watching the police watch them, but the police were closing in. The taps led back to Trax, and then to someone new--Mendax.
The AFP considered putting taps on Mendax and Trax"s telephones as well. It was a decision to be weighed up carefully. Telephone taps were expensive, and often needed to be in place for at least a month.
They did, however, provide a reliable record of exactly what the hacker was doing on-line.
Before police could move on setting up additional taps in Operation Weather, the plot took another dramatic turn when one of the IS hackers did something which took the AFP completely by surprise.
Trax turned himself in to the police.
On 29 October Prime Suspect was celebrating. His mum had cooked him a nice dinner in honour of finishing his year 12 cla.s.ses, and then driven him to Vermont for a swot-vac party. When she arrived back home she pottered around for an hour and a half, feeding her old dog Lizzy and tidying up. At 11 p.m. she decided to call it a night.
Not much later, Lizzy barked.
"Are you home so soon?" Prime Suspect"s mother called out. "Party not much fun?"
No-one answered.
She sat up in bed. When there was still no answer, her mind raced to reports of a spate of burglaries in the neighbourhood. There had even been a few a.s.saults.
A m.u.f.fled male voice came from outside the front door. "Ma"am. Open the door."
She stood up and walked to the front door.
"Open the door. Police."
"How do I know you"re really the police?"
"If you don"t open the door, we"ll kick it in!" an exasperated male voice shouted back at her from her front doorstep.
Prime Suspect"s mother saw the outline of something being pressed against the side window. She didn"t have her reading gla.s.ses on, but it looked like a police badge. Nervously, she opened the front door a little bit and looked out.
There were eight or nine people on her doorstep. Before she could stop them, they had pushed past her, swarming into her home.
A female officer began waving a piece of paper about. "Look at this!"
She said angrily. "It"s a warrant! Can you read it?"
"No, actually I can"t. I don"t have my gla.s.ses on," Prime Suspect"s mother answered curtly.
She told the police she wanted to make a phone call and tried to ring her family solicitor, but without luck. He had been to a funeral and wake and could not be roused. When she reached for the phone a second time, one of the officers began lecturing her about making more phone calls.
"You be quiet," she said pointing her finger at the officer. Then she made another unfruitful call.
Prime Suspect"s mother looked at the police officers, sizing them up.
This was her home. She would show the police to her son"s room, as they requested, but she was not going to allow them to take over the whole house. As she tartly instructed the police where they could and could not go, she thought, I"m not standing for any nonsense from you boys.
"Where"s your son?" one officer asked her.
"At a party."
"What is the address?"
She eyed him warily. She did not like these officers at all. However, they would no doubt wait until her son returned anyway, so she handed over the address.
While the police swarmed though Prime Suspect"s room, gathering his papers, computer, modem and other belongings, his mother waited in his doorway where she could keep an eye on them.
Someone knocked at the door. An AFP officer and Prime Suspect"s mother both went to answer it.
It was the police--the state police.
The next-door neighbours had heard a commotion. When they looked out of their window they saw a group of strange men in street clothes brazenly taking things from the widow"s home as if they owned the place. So the neighbours did what any responsible person would in the circ.u.mstances. They called the police.
The AFP officers sent the Victoria Police on their way. Then some of them set off in a plain car for the Vermont party. Wanting to save Prime Suspect some embarra.s.sment in front of his friends, his mother rang him at the party and suggested he wait outside for the AFP.
As soon as Prime Suspect hung up the phone he tried to shake off the effect of a vast quant.i.ty of alcohol. When the police pulled up outside, the party was in full swing. Prime Suspect was very drunk, but he seemed to sober up quite well when the AFP officers introduced themselves and packed him into the car.
"So," said one of the officers as they headed toward his home, "what are you more worried about? What"s on your disks or what"s in your desk drawer?"
Prime Suspect thought hard. What was in his desk drawer? Oh s.h.i.t! The dope. He didn"t smoke much, just occasionally for fun, but he had a tiny amount of marijuana left over from a party.
He didn"t answer. He looked out the window and tried not to look nervous.
At his house, the police asked him if he would agree to an interview.
"I don"t think so. I"m feeling a little ... under the weather at the moment," he said. Doing a police interview would be difficult enough.
Doing it drunk would be just plain dangerous.
After the police carted away the last of his hacking gear, Prime Suspect signed the official seizure forms and watched them drive off in to the night.