LIFE IN CYBERSPACE / Se7en's Sins Are Deadly For Child-Porn Dealers

By Matthew Mcallester
Staff Writer

IF ONE DAY you turn on your computer and find nothing
there but an image of a big python holding a red rock
engraved with the name ``se7en'' in its gaping mouth,
then you'll know you've been hacked. And you'll know
that an online vigilante who lives in Southern
California knows you are a dealer in child pornography.

se7en's claim is to put his image up on their web page, not
to erase their computer and make it boot up only to that image.
Either way, there is not a single documented case of this 
occuring for anyone.

Sorry. You were a dealer. Now you're just a guy with a
big hunk of Swiss for a hard drive.

Se7en, whose real name is Christian Valor, is a
28-year-old hacker with a mission: to track down traders
in child pornography and mess with their computers. So
far he's left his python calling card, or other similar
memento mori, on the hard drives of about 30 people
whose idea of fun is to deal in digitized photographs of
children engaged in sexual acts.

se7en's real name is not Christian Valor. Once again, the 
claim of 30 victims, yet not a single recorded case of this,
not a single mirror of one of these hacks.

But isn't breaking into someone else's computer and
erasing its files, like, totally breaking the law?

``It's competely illegal,'' said Valor, who works as a
computer security consultant to companies and government

So he is not with his fictitious 'Berkeley Research Group' any
longer.

agencies. ``I've been told by enough cops they're never
going to arrest me for doing this. I've been told by
judges they'd find a way to throw it out every time. You
find me a jury anywhere in the world that is going to
convict me for invading a child pornographer's computer
and destroying it. Or, in the unlikely event they find
me guilty, find one that'll send me to jail. If worse
comes to worst, guess what - you just made a national
martyr. The whole country is going to go nuts.''

Valor, who gets to socialize with a whole host of law
enforcement officials in his line of work, isn't
sweating it.

One New York law enforcement officer who works in the
area of computer crime and spoke on condition of
anonymity said that if he was aware of a hacker doing
damage to the computer system of a child pornographer,
he would look the other way.

Illegal though it may be, Valor wasn't thinking about
the law when he first came across child pornography on
the Net in May of last year.

``Some moron who thought he was going to be cute sent me
a picture of child pornography in e-mail,'' said Valor,
who had always thought the rumors of enormous stashes of
online kiddie porn to be digital myth. ``Now I thought,
uh-oh.''

Valor's previous belief that the talk of child
pornography on the Internet was pure alarmism was based
on a research project that lasted several weeks. ``I
spent an enormous amount of time trying to find it,''
Valor said. ``The fact is, it's not on the Web. People
don't throw that stuff on the Web. So now I was
wondering if this [e-mailed image] was a fluke or was
this one picture of hundreds of thousands.''

So in three weeks he couldn't find any child porn. Yet in the
next few months he claims to have hacked up to *99* child
porn sites?

Valor headed for a longtime hackers' testing ground, the
Internet Relay Chat channel, teensex. Using a ``who''
command that enables users to examine other's online
profiles, Valor started to deduce which participants in
the channel were hacker kids and which were potentially
child pornographers. From these early clues he followed
a trail of e-mails and profiles that led to the private
servers of child pornographers.

On these servers the operators used a kind of software
that required new users to upload new images of child
pornography in order to gain access to the online
library's wealth. Valor gained acceptance by stealing
legal images of kids over the age of 16 from adult Web
sites and offering them up as images of children much
younger.

Rather to his surprise, that same night the regular
operators of the channel all had other things to do, and
so he was left briefly in charge. ``They thought I was
old-school,'' Valor said.

``So I started finding out about people. I asked people
why they do this stuff. And I threw a lot of people off.
It was one night's quick introduction to the world of
child pornography.''

Once Valor knew the hidden pathways of this new world,
he set to work.

He uses a variety of tools to damage the computers of
child pornographers - viruses, Trojan horses and hostile
Java applets, for example. Classic hacker weapons.

Viruses, trojans, and java are the least of a hacker's tools
when breaking into a remote server. To do what se7en claimed in 
previous article, these tools would be near useless.

Sometimes he'll upload adult pornography into their
computers, wiping out the child images.

Giving porn to a pornographer is a bad thing in their eyes?
Just because the age of the people in the images is different
doesn't really teach them a lesson.

Another program will hunt down every jpeg image on a
hard drive and destroy it. Nearly all child pornography
images are kept in the jpeg format.

``It's so much fun,'' Valor said.

It's also his duty, he feels. And to that end, last year
he posted a manifesto on the Net explaining his
intentions and encouraging other hackers to follow his
lead.

Manifesto? Try one letter posted to the dc-stuff mailing
list which has about 750 subscribers (less then).

``No one knew who I was then,'' Valor said. ``All they
knew is once a week or every other week one of their
buddies goes down, screaming the name `se7en,' as they
go down in flames.''

This is completely fabricated. se7en often claims to have been around
for sixteen years in the scene. Yet here he says "no one knew who
I was".

They know who he is now.