Monday, December 9, 2013
The Associated Press
HOUSTON — Turns out even former presidents can fall prey to hackers.
President George W. Bush walks with his father, former President George H.W. Bush in this 2008 photo. A criminal investigation is under way after a hacker apparently accessed private photos and emails sent between members of the Bush family, including both former presidents.
A mysterious email hacker apparently accessed private photos and messages sent between members of the Bush family, including both retired commanders in chief.
The Secret Service is investigating the breach, which appeared to yield little more than a few snapshots and some family discussions. But the incident illustrated how easily hackers can pry into private lives, even those of one of the nation's most prominent and closely guarded political clans.
The Smoking Gun website displayed photos it said came from the hacker, including one that purported to show the elder Bush during his recent stay in a Houston hospital, where the 88-year-old spent almost two months undergoing treatment for complications from a bronchial infection.
The website said the hacker, who went by the online moniker "Guccifer," gained access to the material through Bush family members and friends.
That could have made George W. Bush and George H.W. Bush vulnerable, even if they have the finest security that technology can provide. A friend or relative who clicked on a deceptive link or unwittingly downloaded a suspicious program might accidentally have exposed correspondence involving the former presidents.
"We can't control what our friends do," said Dan Wallach, manager of Rice University's computer security lab and a computer science professor at the Houston school. "If my friends post a photo of me on Facebook, I can untag myself, but I can't delete it. It's not my photo. And that's just a general-purpose problem."
Reached by email, former Florida Gov. Jeb Bush called the hacking "outrageous."
The rest of the family stayed quiet.
"There's a criminal investigation and, as such, there's nothing else we can say," said Jim McGrath, a spokesman for George H.W. Bush in Houston.
Freddy Ford, a spokesman for George W. Bush, who has a home in Dallas, declined to comment.
Free email accounts from commercial providers are especially vulnerable to hackers who exploit easy-to-use features to reset email passwords. Many passwords can be reset by a hacker who discovers, for example, the birth year of a person's mother, a father's middle name or the name of a favorite pet.
That's what happened to former Alaska Gov. Sarah Palin in 2008, when she was the Republican vice presidential candidate.
"That's the first thing I thought of," said Tyler Moore, an assistant professor of computer science at Southern Methodist University in Dallas. "The key here is when you're famous or a well-known person or celebrity, there's not a lot you can do if you're targeted."
A Tennessee college student named David Kernell was convicted two years later on federal charges.
Last year, Republican presidential candidate Mitt Romney's free Microsoft Hotmail account was hacked after The Associated Press revealed that he and some top aides had used private email accounts to conduct state business at times when Romney was governor of Massachusetts.
The anonymous hacker claimed to have guessed the answer to a security question about Romney's favorite pet to gain access to the account and change the password.
Email security is "a constant concern" in presidential politics, Romney senior adviser Eric Fehrnstrom said Friday.
"What we learned is that no matter how secure you make your system, there is someone out there spending every waking minute trying to subvert it," he said.
Last year, a group of hackers known as the D33D Company published a list of what it said were usernames and passwords for more than 450,000 email accounts, including more than 25,000 AOL accounts. It was not immediately clear whether the Bush family's hacked AOL accounts were among these.
(Continued on page 2)