IAN MURPHY▊
- ALIAS
- "Captain Zap" — plus, per the Security Threat Profile in the attrition.org file, dozens more (Ravenswood, IAM/Secure, Covenstead Farms…) [3]
- OPERATION
- IAM/Secure Data Systems, security consulting — per Wired (2001) and ExtremeTech (2004), as quoted in the attrition.org file [2]
- HABITAT
- Bulletin boards by night, the business press by day; later, security-history listicles
- RECORD
- Pleaded guilty, 1982: receiving stolen goods. 1,000 hours community service, 2½ years probation ADJUDICATED
- LEGEND
- "The first cracker to be tried and convicted as a felon" — Wired's phrasing, not the docket's ATTRIBUTED
- STATUS
- LEGEND STILL IN PRINT — corrected on the record since November 19, 1987 [1]
The specimen, first documented Philadelphia, 1981. Convicted of nothing involving a computer; remembered for almost nothing else. The rare case where the field wrote the correction first and the myth second.
What you are about to observe is the industry's founding metamorphosis, performed before the industry had a name: a fencing conviction entering the record in 1982 and emerging, some years later, as the origin story of American computer crime. No documents were altered. None needed to be. The retelling did all the work, and the retellers were volunteers.
The correction was filed in 1987, two weeks after the profile that started it. It has been losing to the legend ever since. That is why the archive exists. Every event below carries its receipt. Both sides get the microphone.
the drama timeline
ACT I — THE RING AND THE PLEA (1981–1982)
Observe the juvenile behavior closely. It will matter later, mostly because of how differently it will be remembered.
-
1981
Federal agents at the parents' house
Agents raid the family home in Gladwyne, Pa., seize a computer, and leave an arrest warrant. Per the Wall Street Journal's later account: Captain Zap ran with a ring of eight that logged $212,000 in blue-box long-distance calls and ordered $200,000 in hardware against stolen credit-card numbers, false mail drops, and bogus purchase orders.
-
1982
The plea — and note the count
Ian Murphy pleads guilty to receiving stolen goods. Sentence: 1,000 hours of community service, 2½ years of probation. No hacking count. No computer in the charge. His verdict on his own conduct, delivered to the Journal without visible strain: "It wasn't illegal. It was electronically unethical."
Mark this entry. It is the only adjudicated event in the file, and every retelling you are about to see will get it wrong in the same direction.
ACT II — THE HACKER BECOMES A HACK (1987)
Five years on, the business press arrives with a notebook. The specimen has become a consultant. The field, watching from the bulletin boards, files its own report within the fortnight.
-
NOV 3, 1987
The Wall Street Journal profile
"It Takes a Hacker to Catch a Hacker as Well as a Thief," by Dennis Kneale. The reformed-felon consultant, tiger-teaming clients and dumpster-diving on retainer. His mentor Robert P. Campbell of Advanced Information Management, on the record: "He's legendary to the hacking world and has access to what's going on. That's a very valuable commodity to us." The Journal calls him "well-known as one of the first convicted computer-hacker thieves."
-
NOV 19, 1987
The correction, filed by the underground
Tolmes News Service #13 reprints the Journal piece in full and annotates it line by line: "Capt. Zap wasn't actually one of the first convicted computer-hacker thieves. His arrest did not involve computers." The same issue defends him against the article's bounty-hunter framing — and its author apologizes for his own past unfairness to Captain Zap. Peer review, 1987-style: harsher on the myth than on the man.
The correction is now on file, two weeks behind the myth. In this ecosystem two weeks is a head start the truth never recovers from.
ACT III — THE LEGEND COMPOUNDS (2001–PRESENT)
Watch what the retellings do to the record. Each pass strips a detail and adds a flourish, the way rivers polish stones — except rivers stop.
-
FEB 2001
Wired prints the legend
Wired: Captain Zap "was the first cracker to be tried and convicted as a felon," who "broke into AT&T's computers in 1981 and changed the internal clocks that metered billing rates" — and is "now the chairman of IAM/Secure Data System" and "the inspiration for the movie Sneakers." Four claims in three sentences; the docket supports none of them as written.
-
JAN 2004
ExtremeTech canonizes it
"Nine Famous Hacks": "the first person convicted of hacking," the AT&T clock story again, "credited as the real-life source for the movie Sneakers," and the consulting firm IAM/Secure Data Systems. The legend now has a listicle slot, which in this habitat is a form of tenure.
-
2000s
Attrition.org opens the file
The Charlatan List entry lays the Wired and ExtremeTech passages beside the record: "Not only was no 'hacking' involved in the charges, but some reports state it was plain old physical theft." And the kicker: "These claims have been debunked as far back as November 19, 1987." The hosted Security Threat Profile goes further — Navy SEAL, CIA, NSA, and Medal of Honor claims on a 1996 resume, each contradicted, per the profile, by official records.
-
EPILOGUE
The legend outlives its corrections
The AT&T clock story keeps surfacing in security-history retellings. The 1987 correction survives in a text-file archive; the attrition.org file remains online. The archive keeps the tape running.
both sides, on the record
The adjudicated record: a 1982 guilty plea to receiving stolen goods — a fencing ring supplied by high-school-age thieves, $212,000 in blue-box calls, $200,000 in hardware on stolen cards — sentenced to community service and probation, per the WSJ as reprinted in TNS #13 [1].
The mismatch: the celebrated framing — first hacker convicted as a felon, the AT&T billing clocks — is contradicted by the charge itself. TNS said so in 1987: "His arrest did not involve computers" [1]. Attrition.org said so again, with the Wired and ExtremeTech passages quoted beside the record [2].
The service claims: the Security Threat Profile states that official records contradict his claims of Navy SEAL, CIA, and NSA service and two Medals of Honor — the profile's findings, presented as such [3].
He pleaded guilty and served his sentence — community service and probation, completed, more than four decades ago. The conviction was never hidden; it was his business card.
The legend had co-authors. Wired and ExtremeTech printed the first-hacker-convicted framing under their own bylines [2]. Even TNS, the correcting organ, blamed the Journal's writer for the piece's false impressions, vouched that Captain Zap "does do security work… Most of his security work is in protecting systems," and apologized for its own past unfairness to him [1]. A myth this well-staffed is not a one-man production.
The consulting was real. The WSJ documents actual paid engagements — tiger-teaming, named clients, and a mentor, Robert P. Campbell, on the record about his value [1].
Scope of the record: the military-service findings come from an unsigned, openly hostile profile [3] — which also claims "considerable time in prison," contradicted by the contemporaneous sentence of probation and community service [1]. Weigh that profile with the same skepticism this page applies to Wired. No court has ever adjudicated the persona claims as fraud.
YOU DECIDE
Scoped to the claims, never the man. The claim "first hacker tried and convicted as a felon" fails against its own docket: the 1982 plea was receiving stolen goods, and the correction has been on the record since November 19, 1987. The claim that the security work itself was fake is not established — the same contemporaneous record shows real clients and real engagements.
Weigh the costly signals: the correction has sat in a public text file for nearly four decades, unanswered and unretracted — and unrebutted. The legend, meanwhile, was maintained at no cost to anyone except the record.
The archive does not judge. The archive merely keeps the tape running.
evidence locker
PRIMARY RECORD
Tolmes News Service #13 (Nov 19, 1987) FACT — reprints the Wall Street Journal profile of Nov 3, 1987 (Dennis Kneale) in full — the raid, the ring, the figures, the plea, the sentence — and files the contemporaneous line-by-line correction. Archived at textfiles.com; the copy attrition.org originally linked is dead.
textfiles.com/magazines/TOLMES/tns13 Security Threat Profile — Ian Arthur Murphy (hosted in the attrition.org file) ATTRIBUTED — unsigned and hostile in register; the source for the military/CIA/NSA claims and their stated contradiction by official records. Weighed accordingly.
attrition.org/errata/charlatan/ian_murphy/threat_profile/
WATCHDOG & COMMUNITY
The standard. Everything above is sourced to the contemporaneous Wall Street Journal record as preserved in a 1987 archive, the attrition.org documentary file, and the subject's own quoted words. Facts are stated as facts; accusations are stated as accusations and wear their accuser — including the hostile ones, which get the same skepticism as the flattering ones. The defense is presented at full strength. No motive is asserted, no private character diagnosed. The burden of proof is on us, not the subject. If it couldn't survive a defamation challenge, it wouldn't be on this page.