I worked at a company that had hired Mitnick as a security consultant.
His report for a client that turned out to have been rife with SQL injection at the time was largely movie plot physical security stuff. Not wrong exactly, but not the center mass of the threat model they needed either.
He seemed to lack systems thinking, producing a report that focused on calling out specific employees as dumb or incompetent. Counterproductive at best. It seemed like his PR exceeded his utility by a great deal.
I read the book by Tsutomu Shimomura, who caught Mitnick's hacking and tracked him down. It's a fascinating read. He was able to locate Mitnick in physical world based on his online activities and his cellular phone usage. In those early days, few people understood the cyber landscape and cellular technologies to exploit them.
I don’t need to know an iota of his activities as a hacker to hate him. I hate him because of how many times I had to be put through mind numbing security training with his mug as the opener. “I’m Kevin Mitnick” and KnowBe4 are seared into my brain at a ptsd level for terminal boredom.
I'm going to defend Kevin here because I see a lot of comments from people I am sure have no valid reason to be hating on him.
Kevin was particularly annoying because he never failed to penetrate a target. The reason that's annoying is it just takes one slip, one weak point, one inattentive admin and it's over. People will stay mad about that. I get it.
But those who say he had no talent are just ignorant.
His goal was to make the world safer, and making people pay attention to risk didn't make him a lot of friends. All the hate I am reading here is just sad.
If you hate Kevin and did not know Kevin, I feel bad for you. Hate is an expensive emotion, even when you're just being a keyboard warrior. It should be reserved for people who have really wronged you. Kevin is not with us anymore. The hate is hurting you, not him. And he has a son who will read this someday. Have a heart.
I did not realize Mitnick had passed away, very sad. I first learned about him as a kid through the book Takedown, and his exploits definitely fueled my early fascination with computers and hacking. It's heartwarming to see how he later befriended Shawn Nunley, though it's unfortunate that he and Shimomura apparently never buried the hatchet. He undoubtedly influenced an entire generation of hackers, RIP.
Ghost in the Wires is one of all time favorite reads, and I still hope to see it as a dramatized film. It would be a fun “period piece” taking the audience through the 80’s and early 90’s, with some hilarious social engineering scenes (kinda like Catch Me If You Can) and tense moments where the audience roots for Kevin. I really think a film adaptation would help introduce his story to a new generation and be a nice tribute to his legacy.
For what it's worth, I'm George Hotz, and Kevin Mitnick's books were a big influence on me. I ran into him at a party at DEFCON one year and we talked for 20 minutes before I found out who he was. Gave me a lock pick business card. Cool guy.
Since we're talking about Kevin Mitnick on Hacker News, I have to mention:
I recently re-read "Cyberpunk: Outlaws and Hackers on the Computer Frontier". It was published in 1991 and the first third of the book provides an early contemporary account of Kevin Mitnick. It's a great book that I first read in my high school library in the 90s and it completely captured my imagination.
However, I had never connected the dots that the subject of the last third of the book was Robert Tappan Morris, creator of the Morris worm, who went on to cofound Y Combinator! Paul Graham is also quoted in the book.
The book has aged pretty great. They added an updated epilogue in 1995 in the early part of the Free Kevin era, but honestly re-listening to the book in 2025, I was wondering where the updated Y Combinator epilogue was!
> He put himself on the proverbial map in 1979 by dialing into a software company’s server and copying its forthcoming operating system release in its entirety. Imagine convincing a Microsoft server to cough over an early copy of Windows 12 using little more than a phone number.
Windows 12 was in development back in 1979? I think that timeline is a bit off.
As kids in the 90s in eastern Europe hardly anyone of us knew the name Kevin Mitnick, but if you were interested in computers at all, you'd certainly recall Condor.
I think this was the first time I heard someone being forbidden by court from accessing the internet. At the time we had like two, maybe three kids in class who even used dial up regularly.
It's entirely possible to be on opposite sides of the fence, hate the other party's actions, but still respect (or even like) them on a personal level. Imagine yourself in their shoes & dial it up to 11.
There is a part of Ghost in The Wires that is pretty close to that:
Ring me up, Mate.
Neill.
That made me smile. But what the hell? I figured: he already knew he had been hustled, so I had nothing to lose.
I called.
“Hey, Neill, what’s up?”
“Hey, mate.” No anger, no threats, no hostility. We were like two old friends.
We spent hours talking, and I shared all the intricate details of how I’d hacked him over the years. I decided I might as well tell him, since it
wasn’t likely to work on him again.
We became telephone buddies, sometimes spending hours on the phone together over several days.
26 comments
[ 4.0 ms ] story [ 43.7 ms ] threadThis helps to fill in some of the details. It's a really nice story showing the humanity that can be found in situations when you look close.
His report for a client that turned out to have been rife with SQL injection at the time was largely movie plot physical security stuff. Not wrong exactly, but not the center mass of the threat model they needed either.
He seemed to lack systems thinking, producing a report that focused on calling out specific employees as dumb or incompetent. Counterproductive at best. It seemed like his PR exceeded his utility by a great deal.
That trend continues beyond the grave, maybe.
Kevin was particularly annoying because he never failed to penetrate a target. The reason that's annoying is it just takes one slip, one weak point, one inattentive admin and it's over. People will stay mad about that. I get it.
But those who say he had no talent are just ignorant.
His goal was to make the world safer, and making people pay attention to risk didn't make him a lot of friends. All the hate I am reading here is just sad.
If you hate Kevin and did not know Kevin, I feel bad for you. Hate is an expensive emotion, even when you're just being a keyboard warrior. It should be reserved for people who have really wronged you. Kevin is not with us anymore. The hate is hurting you, not him. And he has a son who will read this someday. Have a heart.
I recently re-read "Cyberpunk: Outlaws and Hackers on the Computer Frontier". It was published in 1991 and the first third of the book provides an early contemporary account of Kevin Mitnick. It's a great book that I first read in my high school library in the 90s and it completely captured my imagination.
However, I had never connected the dots that the subject of the last third of the book was Robert Tappan Morris, creator of the Morris worm, who went on to cofound Y Combinator! Paul Graham is also quoted in the book.
The book has aged pretty great. They added an updated epilogue in 1995 in the early part of the Free Kevin era, but honestly re-listening to the book in 2025, I was wondering where the updated Y Combinator epilogue was!
Windows 12 was in development back in 1979? I think that timeline is a bit off.
I think this was the first time I heard someone being forbidden by court from accessing the internet. At the time we had like two, maybe three kids in class who even used dial up regularly.
It's entirely possible to be on opposite sides of the fence, hate the other party's actions, but still respect (or even like) them on a personal level. Imagine yourself in their shoes & dial it up to 11.
[insert favorite movie scene here]
Ring me up, Mate.
Neill.
That made me smile. But what the hell? I figured: he already knew he had been hustled, so I had nothing to lose.
I called.
“Hey, Neill, what’s up?”
“Hey, mate.” No anger, no threats, no hostility. We were like two old friends.
We spent hours talking, and I shared all the intricate details of how I’d hacked him over the years. I decided I might as well tell him, since it wasn’t likely to work on him again.
We became telephone buddies, sometimes spending hours on the phone together over several days.
https://www.wired.com/2002/02/mitnick-meets-his-pigeon/
https://archive.is/oMcKd