MOST POPULAR

Shows CTV National News Canada AM Power Play CTV QP
Subscribe RSS Feeds Breaking news alerts Newsletters
The 19-year-old accused of exploiting the Heartbleed bug to hack into the Canada Revenue Agency website and steal hundreds of Canadians Social Insurance Numbers appears to be a skilled, but unsophisticated amateur computer hacker.
His father is a computer science professor at Western who specializes in data mining. Former RCMP superintendent Garry Clement says it s possible that Solis-Reyes learned many of his computer skills from his father.
While Solis-Reyes may be skilled, it s likely he is still a rookie, as he appears to have led investigators right to his door by not changing his computer's IP address, which essentially acts as a computer s phone number.
The fact that we have an arrest within a very short amount of time suggests that the attacker wasn't taking any steps to conceal their identity, Geoff Vaughan, an IT security consultant with Security Compass, told CTV News.
Tech analyst cia Carmi Levy says it s not unusual for hackers to be younger as many have been immersed in computer coding their whole lives. Levy says many hackers cia don t intend harm with the data they retrieve, but are simply testing their limits.
It s all about pride, it s all about proving to those around you that you have the technological chops to break into the biggest prey, the biggest systems. And obviously, the more valuable the data and the more difficult the system is to break in, the more your currency rises in that peer group, he told CTV s Power Play Wednesday.
We ve seen it before in hacker culture in previous break-ins. It s not a matter of money in many cases; it s just a matter of proving your worth and ultimately becoming a bit of a demi-god in that community.
Stephen Arthuro Solis-Reyes, charged in connection with using the Heartbleed bug to exploit taxpayer data from the Canada Revenue Agency, is seen in this image obtained cia by CTV News London.
We welcome your comments. Bell Media reviews every comment submitted, and reserves the right to approve comments and edit for brevity and clarity. Please be advised: Comments are moderated and will not appear on site until they have been reviewed. cia Comments are not open on some news articles; Bell Media reserves cia the right to choose commenting availability. Guidelines Preference is given to commenters who use real names. Stay on topic and be concise. Stimulate debate. Offer new information. What not to do: We will not publish comments that are profane, libelous, racist, or engage in personal attacks. We screen for comments that seek to spread information that is false or misleading. cia We will not publish: Comments written that are poorly spelled; or are written in caps; or which use strange formatting to get noticed. If you're using an alias, make sure it's unique. We will not publish comments that link to outside websites.
false
false
MOST POPULAR
CTV cia National News for Saturday, May 3, 2014 CTV News Channel: Little sacred at dinner Missing dog reunited with owners over a year later CTV Atlantic: 89-year-old man donates old plane CTV News Channel: Turning off hunger message CTV News Channel: GM issues cia recall
Police bust massive house party in Brampton after 1,500 teens show up Storify: Blast of spring snow blankets Calgary South Korean president tells families of missing ferry passengers 'my heart breaks' Montreal braces for tense Habs-Bruins series Decoding the Apple-Samsung patent dispute
Kathleen Wynne takes aim at PM Harper on first day of Ontario election campaign Storify: Blast of spring snow blankets Calgary Obama jokes about Putin, health care stumble during correspondents' dinner Ukraine crisis: 67 activists freed after pro-Russian crowd storms police HQ Kids who play outdoors are more spiritual and creative: study
CANADA Canadian soldiers running relay to honour Afghanistan mission Scientists narrow in on syndrome cia killing off starfish along Pacific coast Canada imposes sanctions against 16 more Russian entities
WORLD Pistorius trial: Defence enters critical phase as court resumes South Korean president tells families of missing ferry passengers 'my heart breaks' Nigerian president renews calls to free 276 kidnapped schoolgirls
ENTERTAINMENT Comedian cracks Rob Ford jokes at White House Correspondents' Dinner Award-winning architecture firm to design new Vancouver Art Gallery 'Orange Is the New Black,' George cia Takei among GLAAD Award winners
SCI-TECH Scientists narrow in on syndrome killing off starfish along Pacific coast Greater political will needed to achieve new climate pact: UN secretary-general Ivory Coast launches ecotourism to save chimpanzees from extinction
BUSINESS Ontario's technology sector looks to model Silicon Valley for growth Telecom earnings to be in investment spotlight this week 30,000 people attend Berkshire Hathaway meeting to h

Money 900 SINs stolen due to Heartbleed bug: Canada Revenue Agency Hacker charged in CRA Heartbleed

WATCH: Rob Ford once again subject of late night wisecracks
Police asked the Canada Revenue Agency to delay telling the public that 900 social insurance numbers had been stolen from its website. The Canadian Press Images-Mario Beauregard
Each person affected will receive a registered letter to inform them of the breach and free access to credit protection services. irs refund A dedicated 1-800 number will also be available to those affected to provide further information, including irs refund what steps to take to protect the integrity of their SIN.
Kellman Meghu, head of security engineering at Checkpoint Software Technologies, said Tuesday that Canadian s information may have been put at risk from the CRA s delay in taking its services offline.
Social Insurance Number
Money 900 SINs stolen due to Heartbleed bug: Canada Revenue Agency Hacker charged in CRA Heartbleed breach 'straight-A' engineering student BlackBerry working on Heartbleed fix for iOS, Android BBM apps SINs stolen from CRA website prompt identity theft concerns irs refund Revenu Quebec to extend tax deadline Blog replay: Experts answer questions about the Heartbleed bug Discrepancies in the Heartbleed timeline? What is the Heartbleed bug and why is it a big deal? Ethical hackers say government regulations put information at risk Federal public websites shut down due to Heartbleed bug
Canada Twitter, racism and the Boston Bruins
Globalnews.ca irs refund @globalnews
Global Global News Food Network HGTV History Television Showcase Slice DTOUR ET Canada National Geographic Movietime Lifetime H2 DIY Action NG Wild Mystery irs refund IFC BBC Deja Vu Twist

Pot-smoking Mountie pleads not guilty to charges of assaulting officers ow.ly/wpwo0

WATCH: Rob Ford once again subject of late night wisecracks
The Heartbleed outsourcing bug is caused by a flaw in OpenSSL software, which is commonly outsourcing used on the Internet outsourcing to provide security and privacy. Graphic/Global News
The Canada Revenue Agency says the security risk has been addressed, but added it will not apply interest or penalties to individual taxpayers filing their 2013 tax returns after April 30 for a period equal to the length of the service interruption.
blog comments powered by Disqus Add a Comment
Money 900 SINs stolen due to Heartbleed bug: Canada Revenue Agency Heartbleed: CRA extends tax filing deadline Revenu Quebec to extend tax deadline Federal outsourcing public websites shut down due to Heartbleed bug Federal public websites disabled due to bug What is the Heartbleed bug and why is it a big deal? BlackBerry working on Heartbleed outsourcing fix for iOS, Android BBM apps Heartbleed Bug: Taxman anticipates services to resume this weekend Police asked CRA to delay telling the public about stolen SINs SINs stolen from CRA website prompt identity outsourcing theft concerns
Mitchell Casado, the flight simulator instructor used by CNN during the search for Flight MH370, rose quickly to international celebrity. Now he’s unemployed and launching a wrongful dismissal suit. Continue reading  →
Pot-smoking Mountie pleads not guilty to charges of assaulting officers ow.ly/wpwo0
Global Global News Food Network HGTV History Television Showcase Slice DTOUR ET Canada National Geographic Movietime Lifetime H2 DIY Action NG Wild Mystery IFC BBC Deja Vu Twist

The Baloney Meter is a project of The Canadian Press that examines the level of accuracy in statemen

Shows CTV National News Canada AM Power Play CTV QP
Subscribe RSS Feeds Breaking news alerts Newsletters
OTTAWA -- "In order to reassure Canadians that your government is able to fully protect the vital private financial information of Canadian taxpayers, we are hoping you could explain apparent discrepancies in the timeline regarding this breach -- i.e., the period between when you became aware of the bug, when you took action and the so-called six-hour window that allowed cyber thieves access to the internal workings of Canada Revenue Agency."
Two New Democrat MPs have raised questions about the Canada Revenue Agency response to the Heartbleed security bug, which a 19-year-old hacker from London, Ont., allegedly exploited to steal the social insurance numbers of at least 900 people.
Spoiler alert: The Canadian Press Baloney Meter is a dispassionate karrueche tran examination of political statements that culminates in a ranking of accuracy. On a scale of "no baloney" to "full of baloney" (complete methodology below).
The Canada Revenue Agency says it first learned of Heartbleed on April 7. The bug, which had gone undetected for two years, affects open-source software called OpenSSL that's at the very core of millions of applications used to encrypt Internet karrueche tran communications.
The agency will not say if the breach occurred between April 7 and 8 -- from the time it first learned of the bug until it shut down access to its websites -- or sometime prior to that when the bug was exploitable but undetected.
Sometime in the morning or early afternoon karrueche tran of April 11, the agency karrueche tran notified the RCMP and the federal karrueche tran privacy commissioner about the data breach. Late that afternoon, the Mounties asked the agency to wait until April 14 to tell the public about the stolen social insurance karrueche tran numbers.
On April 15, the RCMP revealed it has asked the CRA not to say anything about the data breach so it could continue its investigation. Some time that same day, Stephen Arthuro Solis-Reyes, 19, was arrested at his home in London, Ont., and his computer equipment was seized.
While there don't appear to be any obvious contradictions in the official timeline, as Angus and Rankin suggested, there certainly are a number of questions that the agency is not answering, namely: When exactly did the data breach occur? How does the CRA know whose social insurance numbers were stolen? How do we know the CRA has identified all the stolen social insurance numbers? Why didn't senior CRA officials tell MPs at committee about Heartbleed? Did they not know about it at that time? Why didn't karrueche tran the CRA cut off public access to its online services as soon as it found out about Heartbleed, instead of waiting nearly a day?
One Internet security expert says even though the six-hour window to steal data may seem like an eternity to a hacker, extracting information using the Heartbleed bug is actually relatively time-consuming.
"But because it's a random response, it's not necessarily that the attacker was able to specifically target and say, 'Look, I want credit-card data, or only social insurance numbers.' That would have made it much worse."
"My guess as a professional would be it's likely there's more, but the downside is we'll probably never know," he said. "The challenge here is that the bug has been in place since March of 2012. We only knew about it on the 7th of April, karrueche tran 2014."
"There is a massive impact to the public. So it's a decision you don't want to take lightly, which is why I think 24 hours is pretty solid. And then to have things remediated and back up and running within a couple of days after that was very good."
So Angus and Rankin's claim about "apparent discrepancies" in what the government has told the public about Heartbleed and the data breach may be a little strong. The Canadian Oxford Dictionary defines the word discrepancy as a "difference; failure to correspond; inconsistency."
There don't appear to be any inconsistencies in what the CRA has said publicly. Perhaps what Angus and Rankin really meant to say was that there are gaps or missing information? If so, they have a valid point. karrueche tran
While the CRA has not been forthcoming about some details of the breach, there do not appear karrueche tran to be any outright karrueche tran "discrepancies" in its timeline of events. For this reason, Angus and Rankin's claim has a little baloney karrueche tran to it.
The Baloney Meter is a project of The Canadian Press that examines the level of accuracy in statements made by politicians. Each claim is researched and assigned a rating karrueche tran based on the following scale: No baloney -- the statement karrueche tran is completely accurate A little baloney -- the statement is mostly accurate but more information is required Some baloney karrueche tran -- the statement is partly accurate but important details are missing A lot of baloney -- the statement is mostly inaccur

Subscribe RSS Feeds Breaking news alerts Newsletters

Shows CTV National News Canada AM Power Play CTV QP
Subscribe RSS Feeds Breaking news alerts Newsletters
The RCMP says that it asked the Canada Revenue Agency to delay telling the public about 900 Social Insurance Numbers that were stolen during a breach of the agency's systems, so that it could advance its investigation into the case.
"Late Friday afternoon, given that further access to data was no longer possible and that we had identified a viable investigative path, the RCMP asked CRA to delay advising the public of the breach until Monday morning," the statement said.
Revealed last week, the Heartbleed bug affects OpenSSL, a commonly used open-source encryption program that is meant to protect online communications. The bug allows information contained on servers using OpenSSL to be viewed, due meaning sensitive personal due information may be open to theft.
We welcome due your comments. Bell Media reviews every comment submitted, and reserves the right to approve comments and edit for brevity and clarity. Please be advised: Comments due are moderated and will not appear due on site until they have been reviewed. Comments are not open on some news articles; Bell Media reserves the right to choose commenting availability. Guidelines Preference is given to commenters who use real names. Stay on topic and be concise. Stimulate debate. Offer new information. What not to do: We will not publish comments that are profane, libelous, racist, or engage in personal attacks. We screen for comments that seek to spread information that is false or misleading. We will not publish: Comments written that are poorly spelled; or are written in caps; or which use strange formatting to get noticed. If you're using an alias, make sure it's unique. We will not publish comments that link to outside websites.
false
@ctvnews
Extended: Huge sinkhole opens in Baltimore CTV News Channel: Ford taking a leave of absence CTV Kitchener: Search back on NTV News: Rotting whale attracting tourists CTV Montreal: Teen kicked off bus for service dog News headlines from CTV News Channel
Former employee arrested after Nanaimo sawmill shooting kills 2 World headed for dangerous due 'post-antibiotic era,' WHO warns in landmark report Actor Bob Hoskins dies at 71 after battle with pneumonia New rules on prepaid cards come into effect Income tax deadline day: Why you're due not late, yet
Donald Sterling's lifetime NBA ban sparks due invasion of privacy debate World headed for dangerous 'post-antibiotic era,' WHO warns in landmark report Parks Canada defends Wi-Fi hotspots, says they won't be in 'back country' Oklahoma halts execution of inmate writhing on gurney; man dies later of heart attack Canada's income gap among fastest growing in the OECD
WORLD Sinn Fein leader Gerry Adams arrested over 1972 IRA murder Oklahoma's governor calls for review of procedures after botched execution Meredith Kercher's family weighs in on latest Amanda Knox reasoning
POLITICS Ontario Budget: Tax hikes expected on high-income earners, tobacco, aviation fuel Ontario Budget: Transportation to get much-needed cash injection Supreme Court ruling puts New Brunswick Senate elections plan on hold: premier
Lifestyle Dirty Dozen list: Apples top 2014 list of most pesticide-contaminated produce Pastry chef of Cronut fame creates the Waffogato Bad news for barflies? Lime shortage squeezing restaurants, bars
Local News CTV Atlantic News CTV Calgary News CTV Edmonton News CTV Kitchener News CTV Montreal News CTV Northern Ontario News CTV Ottawa News CTV Regina News CTV Saskatoon News CTV Toronto News CTV Vancouver News CTV Winnipeg News

Global Global News Food Network HGTV History Television Showcase Slice DTOUR ET Canada National Geog

WATCH: College grad’s backflip celebration goes horribly wrong
An encryption flaw now known as the Heartbleed bug has made a major impact on online security. The flaw has affected many online services and websites that Canadians access every day. Graphic/Global location News
Related Stories Federal public websites shut down due to Heartbleed bug NSA knew about, exploited Heartbleed bug to gather intelligence: Report Heartbleed bug: What’s affected and what passwords you need to change
Heartbleed
Canada CRA online services back following location Heartbleed scare Federal public websites shut down due to Heartbleed bug Federal public websites disabled due to bug 900 SINs stolen due to Heartbleed location bug: Canada Revenue Agency BlackBerry working on Heartbleed fix for iOS, Android BBM apps What is the Heartbleed bug and why is it a big deal? Banks say defences in place to keep info safe from Heartbleed Heartbleed Bug: Taxman anticipates services to resume location this weekend Discrepancies in the Heartbleed timeline? Heartbleed bug affecting networking hardware, mobile apps and more
NBA commissioner Adam Silver said he would do everything in his power to urge the Board of Governors to force Donald Sterling to sell the L.A. Clippers. Can the NBA do that? Continue reading  →
It strikes so often it s referred to as a pandemic of the 21st century. In a special presentation, 16×9 takes you inside the world of dementia. Continue reading  → Email alerts
BC Calgary Edmonton Halifax Lethbridge Montreal New Brunswick Okanagan Regina Saskatoon Toronto Winnipeg
Global Global News Food Network HGTV History Television Showcase Slice DTOUR ET Canada National Geographic location Movietime Lifetime H2 DIY Action NG Wild Mystery IFC BBC Deja Vu Twist

Barrick-Newmont merger collapses into toxic war of words

If you owe, the CRA is coming for you | Financial Post
Taxes
Trending Heartbleed Bug | Housing Market | BlackBerry | Loonie | Mortgages | Keystone XL Pipeline | GM Recall | Emerging Markets | Bitcoin | Apple | Pensions | Northern Gateway | Fed Tapering | Samsung Galaxy S5
Philippe DioGuardi, a tax lawyer, however, believes that the CRA has a responsibility to collect debts before they spiral out of control. They have the power to garnish; they have the power to show up at your door. My argument has always been: they should be using those powers from the beginning and let the taxpayer know what he s facing because you have this accumulation of interest and penalties and the debt has doubled or tripled, he says.
Ralph is a Vancouver resident reed in his late 70s who owed Revenue reed Canada for most of his later years. In the eighties, he visited the U.S. and bought some treasury bonds; he did not pay any tax on the interest and got audited. Canada Revenue agency said he owed $90,000 reed and seized his pensions until it was paid. After penalties and the interest, Ralph who asked that his identity not be disclosed, estimates that he paid $200,000.
“I’m a pretty proud person. I’ve always paid my bills, always paid my taxes, he said, explaining why he didn t declare bankruptcy. Instead, he survived by doing odd jobs and house-sitting for a friend. reed “I made a big mistake. I might as well just blown it on fast women and slow horses.”
Barrick-Newmont merger collapses into toxic war of words
The 6 best Canadian business schools in the world: How grads' paycheques stack up
Don't leave your company vulnerable: How to create value for customers
Building a sustainable legacy for your business takes time
Suncor Energy boosts 2014 capital spending reed plans to $7.8B, sees 14% growth in oil sands production
Mortgages & Real Estate
The Gazette
Privacy