A EECLAESIFIEB 31 on @1-09-3313 Rev 10-6-95 -1- Date oftranscription 12 18 98 336 b7C on 19114an I Id te of I for Harvard University Faculty of Arts and Sciences Computer Servic- -nce Center 1 Oxford Street Cambridge MA 0 interviewed at his place of business was act-Vise of the nature of the interview and the identity of the interviewing agent He provided the following information advised that after having the graduate student who is responsible for the systems b3 b6 administration of the computer system named jsbach harvard edu b7c with the IP address of 129 137 41 32 nothing suspicious was OTHER Sealed-Court Documents There were no suspicious logins or connections identified and no indication that the computer svstem ha in fact been compromised isbach harvard edu isl Ivoa currently at the 136 137C lthat there had been some activity on a Chemistry Department computer that appeared to be compromised A report was made by a student stating that the student had found a sniffer on the computer that had caught the students password The student notified the FAS department who administers jsbach harvard edu and her password was changed There were two terminal that were suspected one being a PC and one a Macintosh computer After a brief investigation it was discovered that the activity was not a compromise but actually generated by a Harvard researcher and student from local dialup accounts The researcher and student were working with the Dudley Group THEIR Sealed Court Documents 05 615 ve Ivu 12 14 98 1 Cambridge MA ham Al r ur 1 File# 288-CI-68562 Date dicmmd P cq rt h h x i i 1330 i b6 by SA 137 f This document contains neither recommendations nor conclusions of the FBI It IS the property of the FBI and' IS loaned to your va it and its contents are not to be distributed outside your agency A Rev 1045-95 Continuation ofFD 302 Page 3 288-CI-68562 sensitive that there was information on the system that would be sensitive to the users Lastly gave an open invitation for any FBI employee interested in looking at the computer system to come to Harvard University and do so madvised that employs wrappers on jsbach harvar e to restrict logins It is possible that an older user might have been able to gain access to the system 1 old account and password in existence prior to takin over the system administration for this stated that this was highly unlikely I also sta it was possible that an existing user could have manipulated the computer system but again this was highly unlikely lstated that neither he a any sign computer system had been compromised also advised that if there were still suspicions that the Harvard staff had missed anything or if the case agent desired would contact his Unix specialist who could'conduct extensive research into the jsbach harvard edu computer to attemp to identify any intrusions At the time of the interview I stated that he had no justification to request this type of manpower and time expenditure unless a specific compromised account could be identified or the examination was specifically requested by the FBI According activity that had been identified as suspicious has been traced back to legitimate or explainable sources if if I103 306 OTHER Sealed Court Documents