Robert Jonathan Schifreen (born October 1963) is a former UK-based computer hacker and magazine editor, and the founder of IT security awareness training programme SecuritySmart.co.uk. He was the first person charged with illegally accessing a computer system, but was acquitted because there was no such specific criminal offence at the time. Later in life he became a computer security consultant, speaking at many conferences on information security and training banks, large companies and universities in the UK on IT security. In 2014 he began developing the software on which SecuritySmart runs from scratch which reached completion and product launch in June 2016.
He was arrested in 1985 for hacking into a British Telecom computer and accessing the Telecom Gold emails of Prince Philip. As there was no specific law against hacking at this time, in June 1985 he became (together with his co-defendant, Steve Gold) one of the first two people to be charged under section 1 of the Forgery and Counterfeiting Act 1981 with forgery which deceived a non-human target.[1] When the case came to trial in April 1986, Schifreen was said to have used an unprotected top level account identified as "2222222222" with a password of "1234"; Schifreen was said to have admitted obtaining user passwords but denied doing so for personal gain and said that his activities prompted Prestel to increase security.[2] On 24 April 1986 Schifreen was convicted on six counts of forgery and fined £750.[3]
Schifreen's appeal to the Court of Appeal was heard by three judges including the Lord Chief Justice, Lord Lane; judgment was given on 21 July 1987, and found that the use of a charge of forgery was inappropriate and that an application that the charges should be dismissed as giving no case to answer should succeed. The judgment expressed the hope that "the Procrustean attempt to force the facts into the language of an Act not designed to fit them" would not be repeated.[4]
The Crown then appealed to the House of Lords (R v Gold and Schifreen [HL 21 Apr 1988]), but the appeal was turned down in April 1988.[5] The Law Lords agreed that the "making of a false instrument", a key part of proving a forgery case, revolved around the production of a "memory segment" with false information; as the computer had created this rather than Schifreen himself, the computer had effectively "forged itself".[6] This case led to introduction of the Computer Misuse Act 1990.
After his acquittal, Schifreen had to take a judicial review action against the police for the return of his computers.[7] For some years, Schifreen was the editor of .EXE Magazine, a magazine for programmers. '', his online name (shortened from the punning 'hex maniac'), was an active CIX participant from the late 1980s, at a time when online communities were still a novelty.
Schifreen now lives in East Sussex working as an IT security trainer and web developer at the University of Brighton and runs an IT security consultancy. He regularly speaks at conferences and writes articles for the computer press and other publications. In 2006, John Wiley & Sons published his book, Defeating the Hacker.[8]