"Don’t use Internet Explorer" says German government | Graham Cluley's blog


German government tells users not to run Internet ExplorerThe German government has advised computer users not to run Internet Explorer and run an alternative browser instead, because of a critical zero-day security flaw.

The advice, which came in the form of an official statement from the German Federal Office for Security in Information Technology (known as the Bundesamt für Sicherheit in der Informationstechnik or BSI) says that the as yet unpatched vulnerability is likely to be the same one blamed for hacker attacks on Google and other US companies last week.

The BSI advisory claims that although Microsoft's advice to run Internet Explorer in 'protected mode' and disable Active Scripting makes it more difficult for hackers to attack, it does not completely prevent them.

German government Internet Explorer advisory

Here is a rough translation (courtesy of Google Translate) of the BSI statement:

Critical vulnerability in Internet Explorer

BSI recommends the temporary use of an alternative browser
Bonn, 15.01.2010.

Affected are the versions 6, 7, and 8 of Internet Explorer on Windows XP, Vista and Windows 7. Microsoft has published a security advisory, in which it discusses ways of minimizing risk and is already working on a patch for the security hole. The BSI expects that this vulnerability will be used in a short time for attacks on the Internet.

Although running Internet Explorer in "protected mode" as well as disabling Acitve Scripting does make it more difficult to attack, it can not completely prevented. Therefore, the BSI recommends that users switch to an alternative browser while waiting for Microsoft's patch.

Once the vulnerability has been closed, the BSI on its warning and information service MayorCERT also informed. Keep informed about the civic-CERT and the BSI warns citizens and small and medium enterprises from viruses, worms and vulnerabilities in computer applications. The expert analysis of the BSI around the clock, the security situation in the Internet and send alerts when action is needed and safety information via E-mail.

With all this talk about state-sponsored cyber-spying originating from China clearly spooking the German authorities, it's perhaps a little ironic that the Germans themselves were accused of using the internet and malware to spy on another country a couple of years ago.

The vulnerability means that a hacker could send you a message, perhaps pretending to be from a colleague or friend, and - if you clicked on a link in that email - your vulnerable installation of Internet Explorer would visit a malicious webpage infecting your Windows PC with a Trojan horse.

At that point the hackers could effectively grab control of your computer, with the potential of stea ling company secrets, personal information or using it to spread spam or other attacks. The problem is that right now Microsoft doesn't have a patch to fix their software.

Of course, the German government's advice that internet users should switch to alternative browsers is unlikely to well received at Microsoft, and pressure is sure to grow on the company to release an "out-of-band" patch to resolve the security flaw as soon as possible.

With Google pointing the finger of blame for the attacks at China, it's perhaps not surprising that the German government should be keen to ensure that its own computers (whether they be in government or industry) are not next in the firing line of hackers.

Alternative internet browsers such as Firefox, Safari and Opera have all suffered from security vulnerabilities in the past, of course.

You can read SophosLabs's write-up on the Microsoft security flaw here, as well as further commentary by principal virus researcher Vanja Svajcer.

In Internet Explorer there exists a critical yet unknown vulnerability. The vulnerability allows attackers to inject malicious code via a specially crafted webpage into a Windows computer, in order to infiltrate and control computers. The past week has become known in the Hacker Attack on Google and other U.S. companies has probably exploited the vulnerability.

 

Gary McKinnon challenges extradition | guardian.co.uk

Gary McKinnon faces extradition

Gary McKinnon's lawyers have begun a fresh challenge against his extradition to the US. Photograph: Andy Rain/EPA

Lawyers acting for the computer hacker Gary McKinnon today lodged papers for a fresh high court challenge to stop him being sent for trial in the US.

Last month the home secretary, Alan Johnson, wrote a letter ordering McKinnon's removal to the US on charges of breaching US military and Nasa computers, despite claims by his lawyers that extradition would make the 43-year-old's death "virtually certain".

"The secretary of state is of the firm view that McKinnon's extradition would not be incompatible with his [human] rights," said the letter, dated 26 November. "His extradition to the United States must proceed forthwith."

A judge will now decide whether there is an "arguable case" that should go to a full hearing.

McKinnon's solicitor Karen Todner said new evidence showed that McKinnon was suicidal and could not survive the American prison system.

After the home secretary's decision in November, Todner had said she planned to start a judicial review of the home secretary's decision. "We cannot give up because in some ways it's like dealing with a death row case, and we genuinely believe Gary's life is at stake here," she said.

McKinnon, from north London, was accused in 2002 of using his home computer to hack into 97 American military and Nasa computers, causing damage that the US government claims will cost more than $700,000 (£425,000) to repair.

Home Secretary allows Gary McKinnon to be extradited to US

Sang Tan/AP

Photograph: Sang Tan/AP

Gary McKinnon is wanted in the US for what it calls the biggest military computer hack of all time. Photograph: Sang Tan/AP

Afua Hirsch

guardian.co.uk News Thu 26 Nov 2009 19:53 GMT

 

• Alan Johnson quashes last-ditch attempt to halt extradition
• Family fear hacker with Asperger's is at serious risk of suicide

Computer hacker Gary McKinnon is at serious risk of suicide, relatives said today, after the home secretary rejected a last-ditch attempt to prevent his extradition to the US.

In a letter today Alan Johnson ordered McKinnon's removal to the US on charges of breaching US military and Nasa computers, despite claims by his lawyers that extradition would make the 43-year old's death "virtually certain".

"The secretary of state is of the firm view that McKinnon's extradition would not be incompatible with his [human] rights", said the letter, dated 26 November. "His extradition to the United States must proceed forthwith".

The decision, described by lawyers as "callous", has prompted new fears about McKinnon's well-being. The letter rejected new expert medical evidence that the health of McKinnon, who has Asperger's syndrome, had deteriorated dramatically since losing his case in the high court in July, and meant that extradition would violate his right to life.

"Gary is at risk of suicide, I'm extremely worried about him", said McKinnon's mother Janis Sharp. "This government is terrified of speaking up to America, and now they are allowing vulnerable people to be pursued for non-violent crime when they should be going after terrorists. Why are they doing this?"

The decision is a final blow for McKinnon, from north London, who was accused in 2002 of using his home computer to hack into 97 US military and Nasa computers, causing damage which the US government claims will cost over $700,000 to repair.

Earlier this year the high court rejected arguments that the extradition would violate McKinnon's rights, after lawyers argued the prospect of up to 60-years' imprisonment in an American 'supermax' jail would cause mental harm because of his Asperger's syndrome and depressive illness.

The home secretary has insisted that he had received assurances from the US government, including a guarantee that McKinnon would be assessed by doctors and psychologists were he transferred to a US jail, and would receive "appropriate medical care and treatment", including counselling and medication, in a letter from the US Department of Justice this February, seen by the court.

Lawyers had also argued that the director of public prosecutions could prosecute McKinnon in the UK, on lesser charges of computer misuse, preventing his extradition. The charges are less serious in the UK than the US, where McKinnon faces a prison sentence of up to 60 years.

"The CPS wanted to prosecute Gary, but they were told from the very top to stand aside and let American take him", said Sharp.

The case comes after sustained controversy over the US Extradition Treaty, designed to speed up extradition between the two countries but which critics insist works in favour of Americans and fails to adequately protect British people from extradition.

McKinnon's legal team had hoped to join his case to the case of Ian Norris, the retired business chief facing extradition to the US to face trial on charges of obstructing justice due to his alleged role in an illegal cartel whose case will be heard in the supreme court on Monday.

Lawyers had argued that McKinnon's case raised similar legal issues, and should have been considered by the 9-strong panel of Supreme Court Justices sitting next week. Attempts to be heard in the supreme court failed however, although McKinnon's legal team said they would be seeking a judicial review of today's decision.

"The Americans have waited three years before requesting Gary's extradition, and the government is too terrified to say no", said Sharp. "What America wants, America gets", Sharp added. "I think it's disgusting".

"This is a hold over from Bush. We thought with Obama it would be different. Now the first person in the world to be extradited to the US for computer misuse is going to be a guy with Asperger's. All our lives have been ruined by this – the heart just sinks."

Chumby One: handsome successor to the cutest computer ever | Boing Boing

Chumby One: handsome successor to the cutest computer ever


The Chumby One -- the successor to the incredibly innovative Chumby device -- is just about ready to ship, and is available for $99. Chumby is a cute, squeezable hand-held device that is wide open -- everything from the circuit board designs to the software is open-licensed and freely downloadable. The idea is to produce an adorable, versatile device that any hacker, anywhere, can improve, so that all Chumby owners can get more out of it. I have a couple of them at the office and I love playing with them. The new version looks amazing.
In addition to being about half the price of the original chumby, the new device added some features: it has an FM radio, and it has support for a rechargeable lithium ion battery (although it's not included with the device, you have to buy one and install it yourself). There's also a knob so you can easily/quickly adjust the volume. But I don't think those are really the significant new features. What really gets me excited about this one is that it's much more hackable. The most significant improvement is that the firmware is stored on a microSD card.

The microSD card isn't replaceable from the outside -- this is to prevent non-hackers from pulling it out and wondering why the device isn't booting anymore -- but if you take the back panel off (screws this time, no glue seals), it's fairly easy to access. The key here is that no longer do you have to worry about bricking your chumby device: if you screw up the firmware, you just pull it out, mount it on your dev box, and dd a new image onto it. Also, microSD is a "managed" NAND device, unlike our previous generation device which used a raw NAND device. This means that we don't have to rely on a MTD layer for the filesystem, and instead we can directly drop ext3 onto the device. While we still mount the root partition as read-only to harden the device against accidental damage, unlike our original cramfs implementation, you can trivially remount it as read/write and modify the linux on the device. Also, our OS image takes up only a small portion of the total device capacity, so there's actually over a gigabyte of extra space on there for you to load extra applications and libraries.

chumby One (Bunnie Huang's blog)

Chumby Store

Hackers post private emails of holocaust denier David Irving | Wired.com

A group identifying themselves as “anti-fascist hackers” broke into the web site and AOL e-mail account of controversial British historian and accused Holocaust-denier David Irving and obtained his private communications as well as attendee lists for his current U.S. speaking tour.

The hackers posted Irving’s e-mail correspondence online, as well as the user name and password for his web site account and AOL e-mail account, which shared the same password. The hackers also posted the e-mail addresses and other personal information — such as names, phone numbers and shipping and credit card billing addresses — of people who made donations through his web sites, purchased his books or bought tickets for his appearances.

Irving’s username and password for his Authorize.net account, which handles the credit card transactions on his web sit, were also exposed.

The data was posted on the WikiLeaks site Friday evening in advance of Irving’s Saturday speaking engagement at the Catholic Kolping Society of America in New York City. The organization reportedly canceled the event on Friday after someone contacted it.

The organization said its facility had been booked a few days ago by someone using the name “Michael Singer,” who said he wanted to hold a book reading. The organization canceled the engagement after learning that the event was scheduled for Irving.

The location of Irving’s engagements are generally kept secret and announced to attendees only at the last minute to prevent protesters from appearing at the venues or pressuring facilities to cancel Irving’s reservations.

Irving was once a popular historian specializing in World War II but has been a lightning rod for controversy over opinions he’s expressed in the past about the Holocaust and the Nazi regime. Although he asserts he’s not a Holocaust denier, he was convicted in Austria in 2006 of denying the Holocaust and sentenced to three years in prison, and was called a racist and anti-semite by a British judge in a libel case that Irving lost. He has underplayed the extent of the extermination of Jews, saying the number killed was much fewer than 6 million. He also claimed in 1989 that Auschwitz was not an extermination camp — though he has since recanted.

“History is a constantly growing tree - the more you know, the more documents become available, the more you learn, and I have learned a lot since 1989,” the BBC reported him saying.

The Anti-Defamation League considers him one of the world’s most effective purveyors of Holocaust denial and has carefully monitored his activities.

The e-mails published on Friday exposed discussions that occurred between Irving and others about booking his speaking engagements under pseudonyms to thwart protestors.

“The venue is reserved under my name . . . , my phone number and wonderfully
disguised . . . as a book signing, not yours or some group so just in case some nasty is poking around they will come up with nothing,” wrote one supporter in the U.S. who had booked an engagement for Irving in Richmond, Virginia.

They also include notations, such as the word “Achtung,” highlighting reservations that appear to come from Jewish attendees signing up for his events, and discuss tricks played on these attendees, such as giving them a false address for speaking events.

The e-mails include other personal correspondence about the East Coast speaking tour Irving is currently conducting in the U.S., security issues — such as an incident involving weapons that someone brought to one of his recent speaking engagements in Florida — and a tense exchange between Irving and his assistant about his poor treatment of her and her threats to quit.

The data also includes the bank account number of Irving’s landlord in the United Kingdom and instructions to Irving’s bank in Florida to wire money to the account, as well as personal exchanges with supporters.

One supporter writes to Irving: “You should continually blame the Jews who controlled Churchill with causing their own disaster. Also blame the Jews for the loss of your empire and the immigration invasion caused by it. As Reichminister Goebbles, of Blessed Memory, loved to say, ‘The Jews are to blame’.”

Irving’s web site was inaccessible Friday evening and calls to cell phones belonging to Irving and his assistant went unanswered. But Michael Santomauro, whose correspondence with Irving was among those posted online, confirmed that the e-mails were authentic and that Irving had been hacked.

Santomauro identified himself as the “Michael Singer” who had booked Irving’s New York speaking engagement. He told Threat Level that around 7pm Friday evening an e-mail was sent out by the hackers from Irving’s AOL account shortly before Irving was scheduled to give a talk in New Jersey. The e-mail was sent to a list of Irving supporters with the subject line reading: “ADVISORY: Anti-Fascist Hackers Destroy Holocaust Denier David Irving’s Website and Release Private Emails, Attendee Lists.”

The e-mail contained all of the information that was posted on the WikiLeaks web site and indicated that the hackers destroyed all the files, including backup files and databases, on Irving’s web sites irvingbooks.com and fpp.co.uk.

In the e-mail, the hackers wrote: “We did this to expose this Nazi-sympathizer for who he is and to shut down/disrupt any possibility of Irving rearing his fascist head in public during his tour. To David Irving and all aspiring white-power, anti-immigrant, queer-bashing, racist pigs - give it up! We will fight you on the streets and on the internet until you are swept into the dustbin of history.”

Santomauro said there was an inkling that something was wrong about half an hour before the hacker’s email arrived when Irving contacted him to tell him the New York event had been canceled and asked how his detractors could have learned the location. The two had only discussed it among themselves by email and by phone.

“Apparently [the hackers] have been monitoring his AOL for a certain amount of time,” Santomauro said.

He told Threat Level he suspected the Jewish Defense Organization was behind the hack. He says he’s been targeted himself by protestors from this group and others who have harrassed him outside his apartment building and hacked the account for a Yahoo study group he runs.

But, he says, the harassment against Irving is much worse.

“I don’t agree with everything Irving has to say, but he should have the freedom to express whatever views he has,” Santomauro said. “I can agree that he’s not a very pleasant person. But he’s not a Holocaust denier. He could care less about it and is not very knowledgeable about it. . . . He doesn’t talk about it in his speaking tours.”

No one was available to respond to questions left at a phone number posted at the Jewish Defense Organization’s web site.

UPDATE: Irving’s assistant, Jaenelle Antas, forwarded a statement from Irving saying that it would be several days before he could assess the damage, since his web provider had apparently scheduled repairs to begin today and last for seven days, making it difficult for him to access his account.

“We have a complete back-up, in any case,” he wrote. “Half the files [the hackers] posted were already publicly available on the website, like the Radical’s Diary. Other items they appear to have invented. We shall be apologising to the many people who may find themselves inconvenienced by these juvenile cyber-nasties. We are puzzled that they are so frightened by historical debate.”

Antas did not respond to a follow-up question asking which items the hackers posted were invented.

Wikileaks Link

MPs call for a halt to McKinnon extradition

MPs want hacker transfer halted

Gary McKinnon
Mr McKinnon's mother believes extradition will worsen his mental state

The extradition to the US of computer hacker Gary McKinnon should be halted owing to his "precarious state of mental health", MPs say.

The Home Affairs Committee also said there was a "serious lack of equality" in US-UK extradition arrangements.

But the Home Office said there was "no imbalance" and no need for a review.

Mr McKinnon, who has Asperger's syndrome, is accused of breaking into the US military computer system but says he was just seeking UFO evidence.

The Glasgow-born 43-year-old, now of Wood Green, north London, faces 60 years in prison if convicted in the US.

'Lack of equality'

The Commons committee is conducting an inquiry into the US-UK extradition treaty, which critics say does not treat American and British citizens equally.

A letter, from committee chairman Keith Vaz to Home Secretary Alan Johnson, said the MPs had received "clear, legal opinion" from two lawyers that the home secretary had greater scope to exercise his discretion in Mr McKinnon's case than the minister believed.

The letter urged Mr Johnson to "comprehensively review" the operation of US-UK extraditions and "exercise your discretion in this case".

There was a "serious lack of equality" in the way the extradition treaty deals with UK citizens compared with US citizens, the letter added.

But in response, a Home Office statement said: "There is no imbalance in the extradition arrangements between the UK and the US.

At this stage in the case the sole issue is whether extradition would, or would not, breach Mr McKinnon's human rights

Home Office statement

"As the home secretary told the Home Affairs Select Committee on Tuesday, the evidence that must be provided for a US extradition request to proceed in the UK is in practice the same as for a UK request to proceed in the US."

It added: "The suggestion that the operation of the Extradition Act needs to be reviewed comprehensively is unnecessary."

The home secretary is in the process of looking at new medical evidence on Mr McKinnon, which Mr Johnson has said he will consider "very carefully" before approving extradition.

He has also said he wants to give Mr McKinnon's lawyers time to examine medical reports and make legal representations to the European Court of Human Rights in Strasbourg.

But the Home Office statement pointed out that the home secretary had "no general discretion to refuse extradition".

"At this stage in the case the sole issue is whether extradition would, or would not, breach Mr McKinnon's human rights," it said.

"Unless the evidence shows that extradition would breach the European Convention on Human Rights it would be unlawful to refuse extradition."

'Lives ruined'

Mr McKinnon's mother, Janis Sharp, has said her son "would rather be dead than extradited".

Appearing before the Home Affairs Committee earlier in the week, she said: "We were told this treaty was to be used mainly for terrorists.

"People like Gary are not terrorists. We should stand up to America and say, 'This is wrong.'

"This has ruined Gary's life. It's ruined our lives," she said.

Mr Johnson responded by insisting that the US had a "proper, mature legal system".

"It's almost as if you are talking about an enemy state," he said.

"In a world of international crime where criminals cross borders much more frequently, then you need to have proper arrangements in place.

"Extradition is not a statement of guilt or innocence. It's quite proper for the US to ask to bring over people who have committed crimes against their country."

New medical evidence could stop hacker Gary McKinnon's extradition | guardian.co.uk

Gary McKinnon faces extradition

The US wants to try Gary McKinnon for what it calls the biggest military computer hack of all time. Photograph: Andy Rain/EPA

The home secretary, Alan Johnson, pledged today to examine new medical evidence in the case of the computer hacker Gary McKinnon "very carefully" before approving his extradition to the US on charges of breaking into the Pentagon's military networks.

Johnson told MPs he had "stopped the clock" on proceedings to give McKinnon's lawyers time to consider medical reports and make legal representations.

The home secretary was today also pressed to delay further until an investigation into the US-UK extradition treaty had been carried out by the Commons home affairs select committee.

The 43-year-old, from Wood Green, north London, suffers from Asperger's syndrome, a form of autism, and says his hacking was aimed at nothing more than searching for reports of UFO sightings. His supporters fear his health would suffer in a maximum security jail in the US.

He had challenged Home Office decisions allowing his extradition to go ahead and the refusal of Keir Starmer QC, the director of public prosecutions, to put him on trial in the UK on charges of computer misuse. He failed in his high court bid to avoid extradition in July.

Johnson said the high court had already dismissed applications for McKinnon to be tried in the UK.

He said: "We have stopped the clock ticking on the representation to the European court because new medical evidence has been provided.

"There are two issues upon which Gary McKinnon's legal advisors have argued: the first is that the director of public prosecutions should have tried him in this country.

"The high court in July dismissed that, and wouldn't allow it to go to judicial review."

"I have to ensure that his Article 3 human rights are being respected. It's that new medical evidence that I will be looking at very carefully".

McKinnon's MP, David Burrowes, said the new medical evidence was "compelling" and detailed the effect extradition would have on McKinnon's Asperger's.

The Conservative MP for Enfield Southgate urged the home secretary not to execute the extradition order until after the select committee inquiry on 10 November.

When McKinnon was refused permission to appeal to the supreme court earlier this month, Lord Justice Stanley Burnton, who also heard his earlier high court appeal, said extradition was "a lawful and proportionate response" to his alleged offending.

He said McKinnon would be unlikely to succeed with his claim that extradition would breach his right to a private and family life, under Article 8 of the European Convention of Human Rights.

Nor did the court think that extradition to the US would be a breach of his right not to be subjected to inhuman or degrading treatment under Article 3.

In August, Labour's deputy leader Harriet Harman said that if McKinnon were convicted by an American court, Britain would move quickly to arrange for him to serve any jail term in the UK.

Support for Gary McKinnon | Pirate Party UK Blog

Submitted by epriezka on 23 October 2009

I am not going to make an argument for supporting hacker Gary McKinnon in his bid to overturn the decision to extradite him to the US.  If even the Daily Mail believes he should be tried in an English court, then I find it hard to believe that the average Pirate is not well aware of Gary's situation.  Most of you will have strong feelings about it too.  I admit that I do.  The goal of this post is not to argue for my opinion - policy should never be made on the fly - but to ask for your help in deciding if, and how, the party should support Gary.

How far should the party engage with and assist Gary's campaign?  The issues do not fit easily with the core three policy pillars.  On the other hand, we are talking about the wellbeing of a real human being, and the question of how to apply national laws in the era of a global internet.  You can contribute to determining the party's direction and whether the issues raised by Gary's case should fall within the scope of our manifesto.  This will also help us to judge if the party should provide more hands-on assistance to the people campaigning on Gary's behalf.  You can do so by responding with your opinions here, or by voting on the party's forum.

Time is running out for Gary.  Whilst all policy creation should come from the party's democratic process, your response will assist us to make the right decisions in what may be the final weeks of Gary's bid to remain in the UK.  Please help.

 

MPs form select committee over McKinnon decision | The Inquirer

'US friendly' treaty to be re-examined

Tuesday, 20 October 2009, 13:52

UFO HACKER Gary McKinnon might never be extradited to the US, as the Home Secretary faces a select committee over the decision to try him abroad.

Peers are looking to change the "lopsided" (read 'US friendly') treaty under which McKinnon, 43, could be sent to America.

As the treaty stands, US lawyers need only show 'reasonable suspicion' for an extradition warrant to be granted in Britain. But there is no such reciprocal arrangement for the Crown Prosecution Service in America.

The Home Secretary, Alan Johnson, will be questioned publicly by an all-party committee of MPs on why he is extraditing McKinnon.

The committee will investigate whether the Home Secretary should be given discretion to try cases such as McKinnon's in the UK.

Keith Vaz MP, the committee's chairman, said, "I support calls for a review of this treaty in order to get the best deal for UK citizens.

"The case of Gary McKinnon highlights the difficulties in the current extradition relationship between the UK and the US. It is clear that the US got a better deal from the Extradition Treaty."

This is the latest development in the long running on-again, off-again extradition of McKinnon. Only yesterday we reported that the UFO hacker has had his extradition put on hold again as new psychiatric evidence is being considered.

McKinnon was denied permission to appeal to the Supreme Court against his removal and had 14 days to appeal to the European Court. But, from yesterday, the Home Office is now also considering new evidence and has put that deadline on hold.

McKinnon is accused of hacking into US military and NASA computer networks from his flat in north London in 2001.

 

Doing right by Gary McKinnon | Duncan Campbell | guardian.co.uk

The refusal by the new supreme court to consider the case of Gary McKinnon, the computer hacker facing extradition to the United States, comes as no surprise. But the decision now offers the home secretary, Alan Johnson, a final opportunity to act with decency and compassion and intervene, as he is legally entitled to do.

In the wake of the latest ruling, the only legal option left to McKinnon is through the European court of human rights. The chances of success there remain slim. This means that the one person who can halt the whole process is Johnson.

So far the home secretary has made it clear that he is not minded to halt the extradition and what is likely to be a wholly disproportionate punishment in the US courts for a man with Asperger's syndrome. However, Johnson will now be given new medical evidence about McKinnon's condition that will grant him a very valid opportunity to reassess his stance.

This week, McKinnon's mother, Janis Sharp, was addressing a fringe meeting at the Conservative party conference in Manchester. She was warmly received by Tory party members and received a sympathetic hearing from the relevant shadow ministers, Chris Grayling and Dominic Grieve. McKinnon has also received backing from the former Tory shadow home secretary, David Davis, the London mayor, Boris Johnson, the Lib Dems' Chris Huhne, Labour figures Michael Meacher and Keith Vaz and a growing number of public figures such as Terry Waite.

Just as Jack Straw intervened in the case of General Pinochet – to allow him to return to Chile rather than face trial in Spain for human rights abuses – so Johnson can now step forward and speak sense on behalf of McKinnon. The compelling new medical evidence that he will be presented with – about McKinnon's deteriorating condition – gives him the chance to halt the extradition and process McKinnon through the British courts. At the very least, Johnson can extract from the US authorities a watertight guarantee that, if extradited, McKinnon will be granted immediate bail and any sentence passed by a US court would be served in its entirety in a British jail.

Johnson has, almost certainly, only a few months left as home secretary. He has no need to bow to demands from across the Atlantic and surrender someone whose main offence is tweaking the nose of the US defence establishment nearly a decade ago. Jack Straw, in the case of Michael Shields – the Liverpool football fan jailed in Bulgaria but freed in the UK – showed how a British minister can intervene when he believes a serious miscarriage has been perpetrated. Now Johnson can either turn his back on McKinnon – or he can remind people who once saw the Labour party as standing for the underdog against the bully that there is still a vestige of that spirit left.