Campus Cards, College and University Identification and Security
CBORD: Securing buildings, transactions, and the bottom line. www.cbord.com

Blackboard reaches settlement with hacker duo

Wednesday, July 16, 2003

Washington, DC - July 16, 2003 - Blackboard has announced a settlement with Billy Hoffman and Virgil Griffith relating to the lawsuit filed previously by Blackboard.  The full settlement statement appears below but includes the following highlights:


“Defendants Billy Hoffman and Virgil Griffith each apologize to Blackboard and Blackboard™s clients.”

“Hoffman and Griffith each do hereby state under penalty of perjury that neither of them, at any time, created or otherwise built a drop-in compatible reader or transaction processing system.”

“Consistent with the fact that they did not build any such readers, Hoffman and Griffith each also state, under penalty of perjury, that neither of them distributed any such reader or transaction processing system, and that neither of them distributed any plans for such a reader or transaction processing system to any third-parties.”

“Hoffman and Griffith shall, within one hundred twenty (120) days after execution of this Agreement, each perform forty (40) hours of community service for the charitable organization(s) or educational institution(s) of Blackboard™s choice as approved by Defendants.”

- - - - - - - - - – - - - - - - - - - - - - - - - - - - - - - - – - - - - - - - - -

EXHIBIT D

SETTLEMENT ANOUNCEMENT

Blackboard Inc. and Defendants Billy Hoffman and Virgil Griffith have agreed to settle and resolve the lawsuit filed by Blackboard against for Defendants Hoffman and Griffith on the following terms:

A. Defendants Hoffman and Griffith each agree that it would be wrong to use any instrument to open a closed circuit box attached to the System without Blackboard’s permission, to tap into the wires of the Blackboard Transaction System™ (“System”) to capture or analyze electronic communications transmitted over the System, to use or disclose any information concerning the System obtained through such improper means, to engage in unauthorized use of or access to computer systems (including computers, computer networks, computer programs, and associated data) such as the System comprises, or to enable or solicit financial fraud through the use of counterfeit debit cards or unauthorized “drop in” card readers. To the extent Defendants’ conduct gave the appearance of any of these categories of improper conduct, Defendants Billy Hoffman and Virgil Griffith each apologize to Blackboard and Blackboard’s clients.

B. The Defendants shall refrain from any further unauthorized access to or use of the System. Defendants may only use or access the System for routine transactions conducted in their status as authorized users of an installed System or as expressly authorized by Blackboard. For purposes of this paragraph, any transaction designed to better understand or determine how the System works is not a “routine” transaction.

C. The Defendants will not use or display any name, trademark or logo of Blackboard publicly or commercially, without the consent of Blackboard, and will not again represent or suggest that any products or services they participate in providing can legitimately be used or interfaced specifically with a Blackboard system without the express prior approval of Blackboard.

D. Notwithstanding statements made by Hoffman in anticipation of his planned Interz0ne II presentation in April 2003, Hoffman and Griffith each do hereby state under penalty of perjury that neither of them, at any time, created or otherwise built a drop-in compatible reader or transaction processing system, including any reader or transaction processing system that would work with an existing RS-485 or IPC network (including the System), and that they do not know of any such reader or transaction processing system ever being created, except by Blackboard. Consistent with the fact that they did not build any such readers, Hoffman and Griffith each also state, under penalty of perjury, that neither of them distributed any such reader or transaction processing system, and that neither of them distributed any plans for such a reader or transaction processing system to any third-parties. Any contrary impression created by comments on their websites would be wrong and false.

E. Hoffman and Griffith shall, within one hundred twenty (120) days after execution of this Agreement, each perform forty (40) hours of community service for the charitable organization(s) or educational institution(s) of Blackboard’s choice as approved by Defendants, with said approval not to be withheld unreasonably.

Based on the above covenants of Billy Hoffman and Virgil Griffith, as more fully described in a confidential Settlement Agreement among the parties, Blackboard has agreed to dismiss its lawsuit against Defendants Hoffman and Griffith with prejudice.

EXHIBIT E

STATEMENT OF BILLY HOFFMAN AND VIRGIL GRIFFITH

 

In connection with the settlement of a lawsuit brought against them by Blackboard Inc., Billy Hoffman and Virgil Griffith hereby issue the following joint public statement:

A. Billy Hoffman and Virgil Griffith each agree that it would be wrong to use a sharp instrument to open a closed circuit box attached to the Blackboard Transaction System™ without Blackboard’s permission, to tap into the wires of the System to capture or analyze electronic communications transmitted over the System, to use or disclose any information concerning the System obtained through such improper means, to engage in unauthorized use of or access to computer systems (including computers, computer networks, computer programs, and associated data) such as the System comprises, or to enable or solicit financial fraud through the use of counterfeit debit cards or unauthorized “drop in” card readers. To the extent that their conduct gave the appearance of any of these categories of improper conduct, Billy Hoffman and Virgil Griffith each apologize to Blackboard and to its clients.

B. Notwithstanding statements made by Billy Hoffman in anticipation of his planned Interz0ne II presentation in April 2003, Billy Hoffman and Virgil Griffith each do hereby state under penalty of perjury that neither of them, at any time, created or otherwise built a drop-in compatible reader or transaction processing system, including any reader or transaction processing system that would work with an existing RS-485 or IPC network (including the System), and that they do not know of any such reader or transaction processing system ever being created, except by Blackboard. Consistent with the fact that they did not build any such readers, Billy Hoffman and Virgil Griffith each also state, under penalty of perjury, that neither of them distributed any such reader or transaction processing system, and that neither of them distributed any plans for such a reader or transaction processing system to any third-parties. Any contrary impression created by comments on their websites would be wrong and false.

 

 

 [end] 

The U.S. government has settled an infringement case with Leighton Technologies by agreeing to license its smart cards.

Leighton Technologies, a subsidiary of General Patent, filed a case against the federal government in the U.S. Court of Federal Claims in January 2010. Leighton alleged that 54 federal agencies used its six smart card patents without authorization. Leighton’s technology was also used in e-passports.

read more »

Using smart phones for online banking and shopping has been promoted as the next big thing, but adoption has been slow, partly due to the fact that smart phones have security issues. Scientific American reports that this might change with the development of quantum cryptography.

read more »

Returning students to Biola University, a private Christian university in Southern California, were all issued new campus ID cards to support the switch to a new system run by Blackboard, according to Biola’s student newspaper.

read more »

More than a million users have chosen the latest release of Blackboard Connect 5 for their mass notification service needs.

According to Blackboard, after just 90 days in the marketplace the service now serves clients in the U.S., Canada and the United Kingdom. More than 200 school districts, higher education institutions and local governments have signed on.

read more »

When Blackboard deploys Sony’s FeliCa contactless smart cards, the credentials have two areas, one that is a secure area where payment and physical access control transactions take place and an open area where the school can add its own applications, says Jun Shionozaki, technical consulting manager, FeliCa Business Division at Sony.

read more »

Bradley University in Peoria, Ill. and Salt Lake Community College are the latest to sign on for Blackboard Pay, the prepaid card program that enables institutions to disburse financial aid and student payroll to the campus ID card.

read more »