THE INCIDENT

WHAT WE KNOW SO FAR:

- Very recently an anonymous poster on /b/ claimed to have hacked Sarah Palin's Yahoo e-mail account.

- Sarah Palin used the e-mail address gov.sarah@yahoo.com for public communication. Several media outlets have confirmed this fact prior to this "incident".

    SOURCE: http://thinkprogress.org/2008/09/10/palin-email-privilege/
    SOURCE: http://www.commondreams.org/headline/2008/09/15-7

- The e-mail address that the poster hacked was gov.palin@yahoo.com. This second e-mail address, previously unknown publicly, was used for private communcations.

- Yahoo e-mail addresses, unlike .gov e-mail addresses, are not subject to archiving and oversight. This fact has led to controversy from several sources, including fellow Republicans, asking her to release e-mails from her Yahoo account.

- The anonymous poster apparently panicked, and released the password onto /b/.

- Several other posters on /b/ took screenshots of the Inbox and various e-mails.

- Some of the screenshots reference several people in Alaska state government. One of these people is Sean Parnell, Lieutenant Governor of Alaska. Parnell mentions KFQD Radio's Dan Fagan, to whom he gave an interview about Palin's ACES initiative. Lt. Gov. Parnell's e-mail address is verified via an Alaska Republican Central Committee contact listing.

    SOURCE: http://gov.state.ak.us/aces/
    SOURCE: http://www.alaskarepublicans.com/centralcommittee.aspx

- One of the screenshots references the Yahoo account fek9wnr, Todd Palin, Sarah's husband who is at the heart of the controversy over her use of Yahoo e-mail for public dealings. The fek9wnr account was verified as being Todd Palin via a public posting to an automotive enthusiast BBS from August 2006.

    SOURCE: http://autos.groups.yahoo.com/group/centurionconversions/message/2309

- Several photographs of her family were allegedly downloaded from the e-mail account.

- A scan of profiles.yahoo.com put gov.palin@yahoo.com's profile update date at 04/05/2008, long before any VP nod was apparent. If this were a fake, the perpetrator would've had to travel into the past and create an account or be very good at guessing who the VP candidate would be 5+ months later, not to mention faking an overwhelming amount of e-mails, photographs, verified private cellphone numbers, and other information.

- A good samaritan in the /b/ thread reset the password account with the intention of handing it over to Palin, a process known on /b/ as "white knighting". This locked everyone else out of the account. The "white knight" posted a screenshot to /b/ of his pending message to one of Palin's contacts about how to recover the account, but made the critical mistake of not blanking out the new password he set.

- Several other people in the /b/ thread then apparently logged in using this new password, and they all attempted to reset the password at once, causing a security trap at Yahoo to automatically put a 24-hour lockout on the account.


THE AFTERMATH:

- Sarah Palin was likely notified of the breach by morning, as she had then deleted both the gov.sarah@yahoo.com address (the one subject to the disclosure controversy in the media) as well as the gov.palin@yahoo.com address (the one that was hacked).

- The outright deletion of the accounts can be verified by attempting to pull up the public profile on both addresses, which both existed during the incident.

    SOURCE: http://profiles.yahoo.com/gov.palin
    SOURCE: http://profiles.yahoo.com/gov.sarah

- Both accounts were deleted simultaneously, thus linking the publicly-known e-mail address "gov.sarah" and the private e-mail address "gov.palin".

- This outright deletion may have the potential to be viewed as destruction of evidence, considering that the e-mails in the now-deleted accounts are the subject of several legal controversies.

    SOURCE: http://www.washingtonpost.com/wp-dyn/content/article/2008/09/03/AR2008090303210_pf.html

- Several ZIP, RAR, and 7Z compilations of the downloaded screenshots, contacts, and photos were made available by anonymous individuals.

- 4chan is actively (some say over-actively) banning and deleting any posts of the screenshots of Palin's account, contacts, or family photos.

- An anonymous poster to 420chan, using information from the e-mail account's contact list, attempted to call Bristol Palin's cellphone number using the AT&T phone relay service. Several others allegedly called the cellphone number itself and got Bristol's voicemail. These posts were quickly deleted by 420chan moderators.

- A poster on /b/ did a lookup on the cellphone number which returned this information:

    Type: Cell Phone
    Provider: Dobson Cellular Systems
    Location: Palmer, AK

- An anonymous individual has uploaded some of the screenshots to a photobucket account.

    SOURCE: http://s405.photobucket.com/albums/pp134/anoncrack/

- A poster in /r9k/ e-mailed the compilations to ABC News producer Eamon McNiff who he/she claims is a personal contact of his/hers.

- Someone submitted a summary to Digg. As of this writing it has only 12 diggs.

    SOURCE: http://digg.com/2008_us_elections/The_Incident_Did_4Chan_Anon_Hack_Palin_s_Yahoo_Email

- As of right now the media related to the incident sits mostly confined to 4chan and rapidshare, and thus either deleted, censored or under the radar.