2020-12-29, 23:00–23:40, r3s - Monheim/Rhein
This talk is about the story of the first hacker in Uruguay that served time in prison. It's about the story told by Linus Neumann 2 years ago in the 35c3 https://www.youtube.com/watch?v=gBtynT_dhJc
In 2014, Alberto Daniel Hill, an expert in cybersecurity, found a security issue in a medical provider’s website. In reporting the issue, it led him to become the first person imprisoned in Uruguay for a computer-related crime—a crime he didn’t commit, and one that probably never even happened.
Alberto, a hacker, was the perfect target for a judicial system that doesn’t understand cybersecurity or cybercrimes. Through police misconduct and incompetence, his life was thrown into upheaval, and he is still recovering from a system where there are no guarantees of a fair trial.
Rife with injustice and anguish, Alberto’s story doesn’t have a fairy tale ending. It is a lesson for Uruguay and the world to implement fair processes for prosecuting cybercrimes. Alberto’s tale will stand as a stark reminder of the dangers of a judiciary system that hasn’t caught up to the technology of the 21st century.
Stephanie Holland, Editor of the book "Operacion Bitcoins: Login To Hell"
I am Alberto Daniel Hill and this is my story.
My story featured in the Darknet Diaries podcast:
I am Alberto Daniel Hill and I am a computer engineer, but in the university I did not learnt anything about security or hacking, I had to learn everything on my own, reading, investigating, and my love for that along with a lot of curiosity and patience gave me a lot of knowledge you could not had learnt in college. For almost 20 years I have been working and gaining experience related to Information Security (Consulting, Computer Forensics, Ethical Hacking, Computer Security). I worked in many large companies in Uruguay and provided services for companies in other countries.
In 2011, I specialized in ISO / IEC-27000 standard as well as ethical hacking and passed various courses related to a wide range of IT security fields. Then in 2012, I specialized in the ISO / IEC-20000 norm.
I am a certified project management professional (PMP) and have led many information security projects since 2011. I also have the Cybersecurity Fundamentals Certificate (CSX) from ISACA, an organization that awarded me PLATINUM membership recognition.
The CSX certification in cybersecurity demonstrates knowledge aligned with the National Institute of Standards and Technology (NIST), National Initiative for Cybersecurity Education (NICE), which is compatible with global cybersecurity topics, activities, and job functions.
I have been part of the volunteer team of the Open Web Application Security Project (OWASP) Uruguay chapter since 2012. I have been recognized all over the world for my knowledge of blockchain and cryptocurrencies, as well as all aspects of their security.
My professional profile on LinkedIn is at the following address: https://www.linkedin.com/in/nofear75