LuEllen had programmed Bloch’s phone number into her cell phone earlier in the evening, and dialed the number as she got out of the car. The hallway leading past Bloch Tech was empty. I walked to the door, LuEllen close behind, and mimed a knock: we could hear the phone ringing inside. No answer.
As I mimed another knock, LuEllen turned off her phone and pointed a little battery-operated black light, the kind teenagers used to buy in head shops, at the keypad. The powdery crystals in the deodorant fluoresced in the light—except for the three that had no powdery crystals.
“Four-six-seven,” she said. “But there are four digits in a Vermond lock. In this model. So they repeated one of them.”
Nobody in the hall: I took a dime notebook out of my pocket and began scrawling number combinations as quickly as I could write, calling them out as I jotted them down. The thing about number pads is, with ten digits, there are 10,000 possible combinations. Getting inside with a brute-force attack is tough. And a few locks, but not this one, were alarmed, or would lock up, after a certain number of incorrect combinations. Then they could only be opened with a key.
But if you know the four digits involved in the combination . . . ah, then there were only twenty-four possible combinations. If one of the digits is repeated, like it was here, and you don’t know which, the number goes up to thirty-six. But most people start their combination with the lowest number, in this case, a four. We started with four-four-six-seven, and went to four-four-seven-six, and to four-six-four-seven, and so on. We were lucky, hit it on the eighth combination, and pushed into the darkened office.
“Gloves,” LuEllen said.
We pulled on vinyl gloves, and followed the hair-thin beams of the flashlights into the server room. The Dell servers looked like five little dwarfs, lined up for breakfast; the room was windowless, and windowless was good. The futon was rolled into a corner of the third room, with a fuzzy blue blanket tossed carelessly on top of it. LuEllen, using her flash, found a roll of tape in the outer office, and brought the blanket into the server room. We taped the blanket to the wall so it covered the door, and then LuEllen slipped under the blanket into the outer office, and closed the door behind her. I pulled the blanket so it covered the door completely, and turned on the light.
“Light’s on,” I said. Then I turned it off, and LuEllen pushed back inside.
“Almost perfect,” she said. “There was a little tiny dot of light near the right corner . . .”
We rearranged the blanket and I went to work on the machines. Servers are nothing but specialized computers, optimized for communications and storage. If you’ve got a relatively modern home computer, you could use that as a small server, with the right software. In this raid, we wouldn’t be going after the content inside the servers. We wanted access, rather than content. I spent twenty minutes pawing through Bloch’s software and service-maintenance manuals, and then got into the servers themselves. They were running on a standard off-the-shelf UNIX server package. I had root in five minutes, with an outside maintenance account. Then I dumped in a little access program of my own; I’ve done this before. After checking it, I shut down local access, turned the light off again, pulled down the blanket, and cleaned up the tape.
While I was working on the machine, LuEllen had been going through paper files in the outer office, using her flash. “All bullshit,” she said. “Tax forms, bank statements, advertisements.”
One of the forms listed Toby Bloch as owner of 100 percent of Bloch Technology stock. “Is that the guy you talked to?” I asked. I crumpled up the blanket and tossed it back on the futon, more or less as it had been.
“That’s the guy. Toby.”
“All right. Nice little business he has here . . .”
With everything back in place, we listened at the door, heard nothing, and walked out; out to the car, and we were gone. Nothing to it.
But there was trouble back at the ranch. I wouldn’t go online with the server until after midnight, when there was less chance that the real system operator was online. Instead, I checked with Bobby, to see if he had anything more on Jack Morrison or Firewall.
He did.
LOOK AT NEWS PROGRAMS. FIREWALL ATTACKS IRS WITH DOS. BIG TROUBLE NOW. ATTACK MAYBE STARTS IN SWITZERLAND. STYLE FEELS GERMAN.
WILL LOOK . ANYTHING ON JM?
JM FLIES TO BALTIMORE-WASHINGTON INTERNATIONAL ON MONDAY BEFORE SHOOTING, RETURNS SAME NIGHT. RENTED HERTZ, 64 MILES. NO MORE DETAIL. ALSO FLIES TO BWI ON THURSDAY AFTERNOON BACK FRIDAY MORNING. NO CAR, NO HOTEL ON CARD.
THANKS . WILL LOOK AT NEWS .
THIS IS *VERY* DANGEROUS.
LATER .
I thought about that until LuEllen said, “What?”
“Jack Morrison was in town the night Lighter was killed,” I said.
“That’s not good.”
“No. But Lane’s lecture about Jack and guns . . . that’s still pretty straight. I still can’t see Jack shooting anyone.”
“What’s this about the IRS?”
“I don’t know,” I said.
“Bobby seems more worried about that than about Jack.”
“Jack’s dead,” I said.
I checked the Times and Washington Post online editions, but they had nothing on the attack on the IRS. CNN had a story, but like a lot of CNN stuff, most of it seemed to have been garbled by a mentally challenged paranoiac; I clicked over to The Wall Street Journal, which had a short item.
A DENIAL-OF-SERVICE (DOS) COMPUTER ATTACK AIMED AT THE INTERNAL REVENUE SERVICE HAS CAUSED A MAJOR DISRUPTION IN THE HANDLING OF END-OF-QUARTER BUSINESS TAX FILINGS, AN IRS SPOKESMAN CONFIRMED THIS AFTERNOON.
THE ATTACK, WHICH BEGAN THIS MORNING, IS CONTINUING. THE ATTACKING GROUP HAS IDENTIFIED ITSELF AS “FIREWALL.”
A DENIAL-OF-SERVICE ATTACK ATTEMPTS TO FLOOD THE TARGET WITH HUGE NUMBERS OF LEGITIMATE-LOOKING TRANSACTIONS, EVENTUALLY OVERWHELMING THE TARGET COMPUTER’S ABILITY TO COPE WITH THE NUMBERS.
WHILE OFFICIAL DEPARTMENT OF JUSTICE SOURCES SAID THAT THE ATTACK IS LIMITED, ONE HIGH-LEVEL IRS OFFICIAL, WHO ASKED NOT TO BE IDENTIFIED, SAID THAT THERE HAS BEEN A MAJOR DISRUPTION OF END-OF-BUSINESS-QUARTER TAX FILINGS. HE SAID THAT “TENS OF THOUSANDS” OF BUSINESS QUARTERLY RETURNS WERE INVOLVED AND SAID THAT THE ATTACK SEEMED TO BE SPREADING.
AN FBI SPOKESMAN SAID THAT MANY OF THE DOS CALLS APPEAR TO BE COMING FROM SMALL-COLLEGE COMPUTER LABS.
“WHAT APPARENTLY HAPPENED IS THAT SOME INDIVIDUAL OR GROUP PLANTED SMALL ATTACK PROGRAMS INSIDE THESE OPEN COMPUTERS, AND DESIGNED THEM TO GO OFF AT THE SAME TIME. WE ARE GETTING IN TOUCH WITH THESE SCHOOLS AS WE IDENTIFY THEM, ASKING THAT THEY GO OFF-LINE LONG ENOUGH TO REMOVE THE PROGRAMS FROM THEIR COMPUTERS. MOST OF THEM HAVE NO IDEA THAT THEIR COMPUTERS ARE PARTICIPATING IN THE ATTACK,” FBI SPOKESMAN LARRY CONNERS SAID.
CONNERS SAID THAT THE ATTACK PROGRAM IS AN UNSOPHISTICATED ONE, BUT THE IRS OFFICIAL SAID THAT IT TAKES ADVANTAGE OF THE FACT THAT THE IRS COMPUTERS MUST BE OPEN TO THE OUTSIDE TO RECEIVE LEGITIMATE TAX RETURNS. THE ATTACK INVOLVES SENDING AND RESENDING HUNDREDS OF LEGITIMATE-LOOKING, BUT SLIGHTLY FLAWED RETURNS, WHICH THE IRS COMPUTERS THEN ATTEMPT TO RETURN TO THE SENDER. AS THE VOLUME BUILT, THE COMPUTERS WERE NO LONGER CAPABLE OF HANDLING THE FLOW OF TRAFFIC.
“INDIVIDUALLY, THE ATTACK FILINGS WOULDN’T BE A PROBLEM; THE PROBLEM IS THAT THEY JUST KEEP COMING, OVER AND OVER, FROM SO MANY DIFFERENT SOURCES,” THE IRS SOURCE SAID.
THE FBI’S CONNERS SAID THAT THE ATTACK MAY HAVE STARTED IN SWITZERLAND, WITH THE ATTACK PROGRAMS PLANTED AS LONG AS A MONTH AGO . . .
“If the attack isn’t sophisticated . . .”
“It’s not sophisticated, but a fire ant isn’t sophisticated either,” I said. “But you get a few thousand of them swarming up your shorts, and you’ve got a problem. If the feds get really pissed, and start hammering on that list of names, who knows where it’ll end?”
“There’ve been other attacks like this. I read about one in Newsweek.”
“Yeah, but there’s a huge differenc
e,” I said. “Before, they were messing with private businesses. The politicians’ public attitude was, well, that’s too bad, but the real feeling was, fuck a bunch of private businesses— those guys got too much money anyway. But now, these guys are messing with the politicians’ money . . .”
“Ah.”
“Yeah. Big ‘Ah.’ ”
The JPEG photo that Bobby sent me was still on my hard drive. I opened it, and took a look. A parking lot, apparently taken from a fairly high angle. Three men in suits were walking across a parking lot full of pickup trucks. All three of them were carrying briefcases, and one had his face turned up toward the camera. The resolution of the JPEG was not high enough to make out the faces. All of the photos, Bobby had said, were the same.
“So who are they?” LuEllen asked.
“I don’t know.”
“If the picture’s important . . . it must be that the three shouldn’t be together. You know, like a gangster and a cop.”
“Or a Chinese and an American,” I said. “Look at this guy . . . there’s something about him that looks Oriental.”
“Shape of his face . . . unless it’s a woman.”
“Huh. I don’t know.” And I didn’t.
Late that night I went into Bloch Tech’s server. There’s so much stuff in a server, even a small one, that there’s no real-time, hands-on way to sort through it—it’s not like flipping through a book. It’s like flipping through a library, like trying to make sense of Jack’s disks.
I did a search for references to Firewall, and found several hundred in saved e-mail and in postings on Web sites. Six accounts seemed to have a lot of traffic about Firewall. I went into the administrative files, pulled the accounts, and copied out names and addresses. As I finished, I noticed a peculiarity: they were all new accounts, they’d all signed up in the last two weeks, and they’d all paid the up-front minimum of three months by check, rather than opting for credit-card payments.
“Damn it, I’ll bet the names are fakes,” I told LuEllen. I saved the names. I could ship them to Bobby later, and have him look them up.
Since I had the administrative files up, I checked for Jack Morrison and came up empty; then, on the off-chance, I checked Terrence Lighter, and got a surprise. Lighter had an account on this server, and better yet, his e-mail had dozens of letters. A few were encrypted, so I skipped over those. Most of the rest were letters to and from collectors and dealers in antique scientific instruments, apparently a hobby of his.
And there was one letter that said, unencrypted and in the clear, the Sunday before last:
MR. MORRISON. I WILL SEE YOU TOMORROW AT MY OFFICE AT 8:30. PLEASE BRING THE FILES WITH YOU. THANK YOU. T. L. LIGHTER.
12
At three in the morning—midnight Pacific time—I called Lane. Green answered the phone and said, “We got somebody on us.”
“What do you mean?”
“Somebody watching. Not close, but they’re around. It’s almost like being paranoid, but I’ve seen one car—it’s green, and I think it’s a Camry—a few too many times, and a face looking toward us. Always a couple of blocks away.”
“What do you think?”
“We need to get out of here. If we can lose them, I’d feel a lot easier. Here, we’re pinned like butterflies.”
“Okay. We’ve got a couple more things to do here, but we’ll be in Dallas the day after tomorrow. Or the day after that, not later than. You could surprise them somehow, get out to the airport, ditch the car, get on a plane.”
“What if they’ve got people in Dallas?”
“Fly to Seattle first,” I suggested.
“All right; I’ll talk to Lane about it.”
“How is she?”
“Antsy. But here, you talk to her.”
Lane came on and I told her about Jack and Lighter, that Jack may have found something at AmMath that needed Lighter’s attention. She didn’t immediately pick up on the problem of the second trip.
“I knew something was going on,” she said. “If Jack was talking to this guy, and this guy was killed, then we’ve got to tell somebody. This proves it. That something was going on with AmMath.”
“It doesn’t prove anything in particular,” I said. “And the second trip—that’s a problem.”
“I don’t see a problem. The guy—”
“They’ll say Jack shot him,” I said.
That stopped her only for a few seconds: “But we know he didn’t,” she argued. “He wouldn’t do that.”
“They’ve got a gun in Texas that was stolen in San Jose years ago. They’ve got witnesses who say he was the shooter, and one of those witnesses took a bullet in the chest. Now, if they ever get around to looking, they can show that he flew into Baltimore late in the afternoon—after working hours—and flew back the next morning. His NSA contact was murdered right in the middle of that time period, and he never said a word about it to anyone.”
That stopped her for a little longer: “Okay. That sounds bad. When you put it that way. But maybe he didn’t even know about it . . .”
“There’s another problem. If we pass information to the FBI . . . where did we get it?”
“We could finesse that. An anonymous call from Dallas . . .”
“All right, we could figure something out. Maybe we’ll do it. But later. When the information doesn’t look so incriminating. Or when there’s something else to go with it.”
How are the burns?” I asked.
“The bad ones are peeling, like a heavy tan. The lighter ones are almost gone. Not much pain anymore. Everything itches like crazy.”
“Have you talked to the Dallas cops again?”
“Yup. The lead detective of the case called today and wanted me to fly out. I told him it’d be a couple of days yet and got on his case about AmMath again.”
“How’re you fixed for cash?” I asked.
“I’m okay. You need some?”
“No. But get Green to use his credit cards when you go to Dallas, and give him cash to pay him back. They don’t know who he is, so they won’t be able to track him using his credit cards. Take your cell phone.”
“Of course. Where’re you guys going?”
“We’ve got some more research to do here and then we’ll hook up with you in Dallas. Stay with the phone . . .”
I have never been a particularly good sleeper. My sleep/wake cycle is about twenty-five hours long, so I tend to push the clock around, until I’m sleeping all day and working all night. Then I just keep pushing. In any case, seven hours is about right: anything shorter than that and I tend to get grumpy.
I got fairly grumpy when LuEllen ran her cold fingers up my spine at eight o’clock in the morning; I nearly bounced off the ceiling, which she thought was moderately hilarious.
“You’re gonna give me a fuckin’ heart attack some day,” I snarled at her, and there were some teeth behind the snarl. I didn’t like her sneaking up on me. “How’d you get in?”
“The lock is shit,” she said.
“Wonderful, that’s just fuckin’ great. You give me an aneurysm because you want somebody to talk to at breakfast.”
“No, no. I had some seriously bad news to share with you, but you’re being such a mean asshole that I’m not going to do it,” she said. She crossed her arms.
“What news?”
“Say please.”
“Give me the fuckin’ news or I’ll breathe on you.”
“The feds busted Bobby,” she said.
“What?” The news left me completely disoriented. “Where’d you get this? Who called?”
“It’s on TV. They busted him last night and he’ll be arraigned today in federal court in New Orleans. They say he’s involved in the attacks on the IRS and that the attacks are continuing.”
“Sonofabitch.” I fumbled the TV remote off the nightstand and punched up CNN. At the same time, I asked LuEllen, “Did you bring the cold phone?”
“Yeah.”
CNN was doing an
advertisement for itself. When they got back to news, they were doing the weather. I hopped out of bed, got my notebook, and used the cold phone to punch up John Smith’s phone number in Longstreet. John answered on the first ring; he was wide-awake.
“This is the guy from upriver,” I said. “Is it true?”
“We don’t know. I don’t think so, but this guy, whoever it is, is gonna be in court in two hours, so we’ll know for sure, then. Our guy’s off-line, though. All his numbers are down.”
“They wouldn’t be down unless he took them down,” I said. “If the feds grabbed him, they would have left the lines up, to see who called.”
“There’s something else: if they busted him at his place, they’d most likely be taking him to court in Jackson, not in New Orleans.”
“I don’t know where his place is at, but I’m glad to hear you say it,” I said.
We talked about it for another minute, poking through clues from a TV broadcast neither of us had seen yet. “I’ll get back,” I said.
How much trouble are we in?” LuEllen asked.
“Depends on whether they really got him, and if they did, what they got. And if he’s willing to deal. I’ve never met him face-to-face, but if he wanted to deal . . . he could hurt a lot of us. He knows all about Anshiser . . . He knows about Longstreet. He knows about Modoc and Redmond.” All jobs involving what we lightly call industrial espionage.
“Maybe you ought to back away from this thing,” LuEllen said. “Get back home and maybe pack a suitcase.”
“Something to think about,” I said, “though I wouldn’t be good at running.”
“How does ten years in the federal penitentiary sound?” she asked.
“There’ve got to be other options. Gotta be.”
We looked at each other and I realized how hooked up I really was. I’d always thought of myself as something of a loner, going my own way, doing what I wanted when I wanted to do it. But Bobby knew about me—knew where to find me—and so did LuEllen, and John Smith, and now Lane Ward knew a couple of things, and so did twenty or thirty other people. If the feds somehow managed to get them all in the same room, they could hang me.