maia arson crimew | |
---|---|
Born | Tillie Kottmann August 7, 1999 |
Nationality | Swiss |
Other names | Tillie Kottmann, Deletescape, Tillie crimew |
Occupation(s) | Software developer, computer hacker |
Known for | No Fly List leak, source code leaks, Verkada hack, Lawnchair Android launcher |
Website | maia |
Maia arson crimew [a] (born August 7, 1999), formerly known as Tillie Kottmann, is a Swiss developer and computer hacker. Crimew is known for leaking source code and other data from companies such as Intel and Nissan, and for discovering a 2019 copy of the United States government's No Fly List on an unsecured cloud server owned by CommuteAir. Crimew was also part of a group that hacked into Verkada in March 2021 and accessed more than 150,000 cameras. She is also the founding developer of the Lawnchair application launcher for Android. [4] [5]
In March 2021, crimew was indicted by a grand jury in the United States on criminal charges related to her alleged hacking activity between 2019 and 2021. The charges were unrelated to the hack of Verkada. Her home and her parents' home were raided by the Swiss police at the request of United States authorities, and her electronic devices were seized. People used the hashtag "#freetillie" to express support for her following the raid, and the Swiss magazine Republik compared her to Jeremy Hammond and Aaron Swartz. [6]
Crimew was born on August 7, 1999 [7] in the Bruch district of Lucerne in the German-speaking region of Switzerland. [8] [9] As a teenager, she worked in information technology. [10] She was the founding developer of the popular Android launcher "Lawnchair", which has been maintained by a different development team since February 2021. [4] [5] A member of the Young Socialists Switzerland, [9] crimew was a candidate for Lucerne City Council in 2020. [10]
In July 2020, crimew posted source code from dozens of companies to a GitLab repository. [11] She was credited by Bleeping Computer with originating the Nintendo Gigaleak, but she later told Tom's Guide that Nintendo data was not included in the July leak, and that she had never posted Nintendo code to GitLab because the company was "notorious for quick takedowns". [12] On August 6, 2020, crimew uploaded more than 20 gigabytes of Intel's proprietary data and source code to Mega. [13] She obtained the data from another hacker who claimed to have breached Intel around May 2020, [14] and described it as a first installment which would be followed by more leaks related to Intel. [13] [15] In January 2021, crimew was involved in a source code leak from Nissan, stating that she acquired the leaked code after learning from an anonymous source about a Bitbucket server [16] that was set up with the default username and password. [17] [18]
Crimew said in March 2021 that most of her breaches did not require much technical skill. [19] In addition to leaking data herself, she maintained a Telegram channel called "ExConfidential" [20] where she shared details about leaks by others. [11] [15] In March 2021, Distributed Denial of Secrets created a torrent of data from the channel after crimew's home was raided and her devices were seized. [21]
On March 8, 2021, a group of hackers including crimew and calling themselves "APT - 69420 Arson Cats" [22] [23] gained "super admin" rights in the network of Verkada, a cloud-based security camera company, [24] using credentials they found on the public internet. [25] The group had access to the network for 36 hours. [24] They collected about 5 gigabytes of data, including live security camera footage and recordings from more than 150,000 cameras in places like a Tesla factory, a jail in Alabama, a Halifax Health hospital, and residential homes. [26] [27] The group also accessed a list of Verkada customers and the company's private financial information, [25] and gained access to the corporate networks of Cloudflare and Okta through their Verkada cameras. [26] [28]
Crimew acted as the spokesperson for the group of hackers; [29] during the hack, she tweeted "What if we just absolutely ended surveillance capitalism in two days?" [30] Her Twitter account was suspended for violating Twitter's terms of service after she used it to share multiple screenshots of live security camera feeds. [30] She contacted a Bloomberg journalist shortly after the breach, who in turn contacted Verkada, which removed the hackers' access to the network. [31] [6] [32] She told Bloomberg that the hack exposed "just how broadly we're being surveilled, and how little care is put into at least securing the platforms used to do so, pursuing nothing but profit". [26] An acquaintance of crimew told zentralplus that they thought she would have carried out the hack for fun regardless of her political views. [10]
In March 2021, crimew was indicted by a grand jury in the United States District Court for the Western District of Washington on charges related to several hacks she allegedly carried out between 2019 and 2021. [8] [33] The twelve-page [29] indictment alleged that crimew hacked dozens of entities, [34] published proprietary information and code from more than 100 entities including government agencies, [35] and sold hacking-related merchandise such as t-shirts. [36] It charged her with counts of computer fraud and abuse, wire fraud, and identity theft. The indictment, and a raid by the Swiss police in which crimew's electronic devices were seized at the request of United States authorities, came shortly after she claimed involvement in the Verkada hack, but did not contain charges related to it. [31] [37] [38] Seven police officers searched her home during the raid and fifteen searched the home of her parents. [6] The website git.rip, through which photos from the hacked Verkada cameras were originally shared, [39] was seized by the FBI. [40] She later described this raid as a traumatizing experience, stating she felt she was "made an example of". [41]
As of March 19, 2021, crimew was being represented by lawyer Marcel Bosonnet in Switzerland. [34] [42] A crowdfunding campaign was created in April 2021 to raise money for her to retain a lawyer in the United States. [43]
People used the hashtag "#freetillie" to express support for crimew after the raid of her home. [10] [44] Hacking researcher Gabriella Coleman said that she expected crimew to gain more support in "the hacker community" as a result of the indictment, stating that, in some cases, the United States government has been overly aggressive in prosecuting "hacktivists", who "[pursue] a variety of leftist and anti-authoritarian ideals", and that "the hacker community has this in mind". [36] An article in Republik described crimew as "[following] in the tradition of hackers like Jeremy Hammond or Aaron Swartz." [6] Hernâni Marques, a board member of the Swiss chapter of Chaos Computer Club, called for "solidarity" with crimew. [45] Seattle prosecutors rebuked the view that the leak had "any redeeming quality", with U.S. Attorney Tessa M. Gorman stating that "publishing source code and proprietary and sensitive information on the web is not protected speech — it is theft and fraud," and that "[w]rapping oneself in an allegedly altruistic motive does not remove the criminal stench from such intrusion, theft, and fraud". [36]
After the indictment, a United States Department of Justice spokesperson told Blick that proceedings had been suspended, explaining that the United States would not continue with the case unless crimew was present in the US and defended by a lawyer. [29] Crimew has expressed confidence that she will not be extradited to the United States. [8] Swiss lawyer Roman Kost stated that Swiss extradition law does not allow extradition of citizens without their consent, but that Swiss hackers "can be tried in Switzerland if there is sufficient suspicion and evidence, and if they are found guilty, they can be punished”. [36] Switzerland's Federal Department of Justice and Police confirmed to zentralplus that it does not extradite Swiss nationals against their will. [46] Swiss newspaper Le Temps reported that crimew would not be extradited and would instead be tried in Switzerland. [47]
20 Minuten reported that if crimew was tried in Switzerland, she would face a maximum of four and a half years in prison. [45] Hernâni Marques said that "much of what [she] did would not be punishable in Switzerland," additionally stating that much of the data crimew leaked was publicly available on the internet and arguing that the hack of Verkada was "legitimate and useful for society" because of the privacy issue it exposed. [6] In March 2021, Blick reported that a potential warrant for crimew's arrest issued by the United States would likely be executed by all countries that share a border with Switzerland. [29] In September 2021, crimew told null41 that she was certain she would never be able to travel to certain countries again, and that even if she was able to travel in the future, it would be risky because of the possibility of extradition from other countries. She noted that, unlike Julian Assange, she was not relying on the goodwill of a country, because the Swiss constitution prohibits her extradition. [48] In October 2021, Zeit Magazin reported that, while Interpol does not publicize most of its investigations, it was likely that an international arrest warrant had been issued for crimew, which would potentially render her unable to leave Switzerland. [49]
In July 2022, crimew discovered and reported a vulnerability in the mental health app Feelyou, which exposed the email addresses of its nearly 80,000 users and allowed anyone to connect supposedly anonymous posts to the email addresses of the users who posted them. [50]
On January 19, 2023, crimew reported that she had gained access to 2019 versions of the US government's No Fly List of 1.56 million entries and Selectee List of 250,000 entries hosted by CommuteAir on an unsecured Amazon Web Services cloud server. [51] [52] [53] Crimew noted that, despite the size of the Terrorism Screening Database, there were "very clear trends towards almost exclusively Arabic and Russian sounding names throughout the million entries"; [54] over 10% of the listed entries contained "Muhammad" in either the first or last name fields. [53]
In 2024, crimew began writing for Das Lamm, a self-organised Swiss German-language online magazine collective, in a new column titled cyber_punk. [55]
Crimew describes herself as a musician and DJ; [56] she has performed on releases from music collectives involved in the hyperpop scene such as Sleepy.zone and Goop House, [57] [58] with the former listing her as a current member as of June 2024. [59] She has also self-released tracks on SoundCloud. [60]
Crimew lives in Switzerland. [8] She is non-binary [43] and uses it/its and she/her pronouns, [61] with a strong preference for it/its. [3] She is autistic [62] and identifies as both bisexual and a lesbian. [63] She is a member of the Young Socialists Switzerland, [9] and has run for political candidacy on socialist platforms. [10] [44] Crimew has cited curiosity, [10] anti-capitalism, anarchism, and opposition to the concept of intellectual property as motives for her hacking, [64] [65] stating that "caring about literally nothing but profit definitely doesn't result in security". [19] She has additionally stated that she believes source code and documentation should be public, and that she thinks of herself as a hacktivist. [48] Crimew has stated that being queer and experiencing discrimination contributed to the development of her political views. [66] [43]
Crimew has also been known as Tillie Kottmann, "deletescape", and "tillie crimew". [33] In 2022, she legally changed her name to maia arson crimew, which is stylized in all lowercase. [67]
Lucerne or Luzern is a city in central Switzerland, in the German-speaking portion of the country. Lucerne is the capital of the canton of Lucerne and part of the district of the same name. With a population of approximately 82,000 people, Lucerne is the most populous city in Central Switzerland, and a nexus of economics, transportation, culture, and media in the region. The city's urban area consists of 19 municipalities and towns with an overall population of about 220,000 people.
An internet leak is the unauthorized release of information over the internet. Various types of information and data can be, and have been, "leaked" to the Internet, the most common being personal information, computer software and source code, and artistic works such as books or albums. For example, a musical album is leaked if it has been made available to the public on the Internet before its official release date.
Julian Paul Assange is an Australian editor, publisher, and activist who founded WikiLeaks in 2006. He came to international attention in 2010 after WikiLeaks published a series of leaks from Chelsea Manning, a United States Army intelligence analyst: footage of a U.S. airstrike in Baghdad, U.S. military logs from the Afghanistan and Iraq wars, and U.S. diplomatic cables. Assange has won multiple awards for publishing and journalism.
Kottmann may refer to:
LulzSec was a black hat computer hacking group that claimed responsibility for several high profile attacks, including the compromise of user accounts from PlayStation Network in 2011. The group also claimed responsibility for taking the CIA website offline. Some security professionals have commented that LulzSec has drawn attention to insecure systems and the dangers of password reuse. It has gained attention due to its high profile targets and the sarcastic messages it has posted in the aftermath of its attacks. One of the founders of LulzSec was computer security specialist Hector Monsegur, who used the online moniker Sabu. He later helped law enforcement track down other members of the organization as part of a plea deal. At least four associates of LulzSec were arrested in March 2012 as part of this investigation. Prior, British authorities had announced the arrests of two teenagers they alleged were LulzSec members, going by the pseudonyms T-flow and Topiary.
Maia is a feminine given name. It may be in reference to the mythic mother of Hermes. It is also a popular Māori name meaning "brave or confident."
Filip Ugrinić is a Swiss professional footballer who plays as a central midfielder for Swiss Super League club Young Boys and the Switzerland national team.
Géraldine Joséphine Reuteler is a Swiss footballer who plays as a defender for German Bundesliga club Eintracht Frankfurt and the Switzerland national team.
Okta, Inc. is an American identity and access management company based in San Francisco. It provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, website, web services, and devices. It was founded in 2009 and had its initial public offering in 2017, reaching a valuation of over $6 billion.
Rahel Graf is a Swiss women's footballer, who has 62 appearances for the national team. At club level, she plays for FC Luzern Frauen.
Joshua Adam Schulte is a former Central Intelligence Agency (CIA) employee who was convicted of leaking classified documents to WikiLeaks. WikiLeaks published the documents as Vault 7, which The New York Times called "the largest loss of classified documents in the agency's history and a huge embarrassment for C.I.A. officials." After his conviction, the Department of Justice called it "one of the most brazen and damaging acts of espionage in American history."
In 2012, while on bail, Julian Assange was granted political asylum in the Ecuadorian Embassy in London, where he sought to avoid extradition to Sweden, and what his supporters said was the possibility of subsequent extradition to the US. On 11 April 2019, Ecuador revoked his asylum, he was arrested for failing to appear in court, and carried out of the embassy by members of the London Metropolitan Police. Following his arrest, he was charged and convicted, on 1 May 2019, of violating the Bail Act, and sentenced to fifty weeks in prison. While in prison the US revealed a previously sealed 2018 US indictment in which Assange was charged with conspiracy to commit computer intrusion related to his involvement with Chelsea Manning and WikiLeaks.
The 2025 UEFA Women's Championship, commonly referred to as UEFA Women's Euro 2025 or simply Euro 2025, will be the 14th edition of the UEFA Women's Championship, the quadrennial international football championship organised by UEFA for the women's national teams of Europe. The tournament will be played in Switzerland from 2 to 27 July 2025. It will be the third edition since it was expanded to 16 teams. The tournament will return to its usual four-year cycle after the previous tournament was delayed to 2022 due to the COVID-19 pandemic.
The Nintendo data leak, also known as the Nintendo Gigaleak, is a series of leaks of data from the Japanese video game company Nintendo on the anonymous imageboard website 4chan. The leak started in March 2018, but became most prominent in 2020. Ten main sets of data leaked on 4chan, ranging from game and console source code to internal documentation and development tools. The name "Gigaleak" mainly refers to the second leak on July 24, 2020, which was 3 gigabytes in size. The leaks are believed to have come from companies contracted by Nintendo in the design of these consoles, and/or from individuals previously convicted of intrusion into Nintendo systems. An earlier, much smaller leak had also occurred in 2018 which contained the Nintendo Space World 1997 demos for Pokémon Gold and Silver.
Verkada Inc. is a San Mateo, CA-based company that develops cloud-based building security and operating systems. The company combines security equipment such as video cameras, access control systems and environmental sensors, with cloud based machine vision and artificial intelligence.
Judith Stamm was a Swiss jurist and politician of the Christian Democratic People's Party (CVP). She was seen as an influential women's rights activist.
Hasan Candan is a Swiss politician who currently serves as member of the National Council (Switzerland) for the Social Democratic Party after being elected during the 2023 Swiss federal election. He assumed office on 4 December 2023. He served on the Cantonal Council of Lucerne between 2011 and 2023.
Sacha Wigdorovits is a Swiss journalist, entrepreneur and lobbyist.
Judith Schmutz is a Swiss lawyer and politician who has served as president of the Cantonal Council of Lucerne since 2023. She is the youngest president of the council in the canton's history, and one of the youngest in all of Switzerland. She was first elected to serve on the council in 2019, and represents the Hochdorf District.
i hereby confirm that i was born on august 7th 1999 and that my pronouns are it/its fae/faer she/her they/them.