The death of famed âwhite hatâ hacker Barnaby Jack, known as a genius in the information security world and the life of the party to friends, has been ruled a drug overdose by the San Francisco medical examinerâs office.
According to the report, Jack died as a result of a mix of heroin, cocaine, Benadryl, and Xanax.
The report, issued over five months after the 36-year-oldâs death in July, will bring to an end the wild and often conspiratorial speculation over how a talented, seemingly healthy man in the prime of his life could have died days before he was meant to give an anticipated demonstration at the annual Black Hat convention in Las Vegas, the worldâs largest hackersâ conference. In his presentation, âImplantable Medical Devices: Hacking Humansâ, Jack was slated to show off the fruits of his latest research by hacking into pacemakers and implanted defibrillatorsâa feat he asserted could kill a man from 30 feet away.
But Jack would never have used his work to actually hurt anyone. âI suppose Iâm on the good side of the fence,â he told a reporter in 2010.
The planned implantable device hack was just the latest from the excitable researcher, known for high-profile performances that captured the imaginations of hackers and laymen alike and brought attention to the issue of technology securityâa field Jack saw as more important than ever. (âHas there ever been a box connected to the Internet that people havenât tried to break into?â he recently asked.)
His stunts were more than just the attention-grabbing antics of a showmanâthough he was open about the desire to impress his peers. He hoped his work would âbring about some real positive change andâŚget these devices up to scratch,â he explained in a podcast interview last year.
But that work was cut short. The New Zealand nativeâs body was discovered in bed on July 25 at his Nob Hill apartment, by his girlfriend, Layne Cross, according to the medical examiner's report. Police immediately ruled out foul play and his body was sent to his home country to be buried.
Following his sudden death, friends and coworkers took to Twitter and blogs to remember the elite hacker, sometimes painting conflicting portraits of Jackâas both a shy, brilliant researcher and a wild partier. Jack was âa man who partied so hard that you worried about his health and well-being,â journalist and security specialist, Ryan Naraine, wrote after Jackâs death.
More importantly, Jackâs work and his legacy in the information technology community were heralded. He was praised for âraising the alarm about the security of implanted medical devices,â in The Age, one of Australiaâs largest daily papers. His findings were also instrumental in a 2012 Government Accountability Office (GAO) report suggesting the Federal Drug Administration should improve information security for the technology. While the FDA hasnât yet formally responded, the Department of Health and Human Services agreed with the GAO findings; as Jack said on the Risky Business podcast, âit looks that they will be requiring these devices be audited.â
In 2011, while working at the security technology firm McAfee, Jack discovered weaknesses in insulin pumps that could cause the release of lethal doses straight into the bloodstream of diabetics. He presented his findings by live-hacking a friendâs pump at a conference, prompting the medical device maker Medtronic Inc. to make safety and security improvements.
Black Hat Conference organizers praised Jackâs contributions in a statement following his death. âThe life and work of Barnaby Jack are legendary and irreplaceable,â it said. âBarnaby had the ability to take complex technology and intricate research and make it tangible and accessible for everyone to learn and grow from.â
Matthieu Suiche, the chief scientist at the security company, CloudVolumes, called Jack, âbrilliant,â in an interview with the Guardian. âIn this world full of people fearfully complying and worrying, very few people are crazy enough to challenge the rules, to approach life in an unconventional paradigm and to speak up to contribute to change this world,â he said.
While his later work is arguably more noteworthy in the respect that it could save lives, Jack was best known for a 2010 demonstration of âJackpottingââin which he hacked into multiple ATMs and forced the machines to spit out money. Jack only released the how-to of the hack to the ATM makers, and only after the fixes had already been made. âWe were really careful when we gave this demonstration to make sure that the vendors had mitigation remediation in place before we went up and did it,â Jack told CNN after the demonstration.
Likely because of the sensational nature of the work Jack did, Internet sleuths were immediately drawn to the mysterious circumstances surrounding his death. On Twitter and Reddit, conspiracy theorists armed with a dearth of details leapt to the conclusion that Jackâs hacking skillsâwhile only ever used legally, with a mission to help improve technology safety and security so that vulnerabilities couldnât be exploited by âblack hatâ hackersâsomehow made him a target for big business or a government agency like the CIA.
âBarnaby Jack was obviously murdered and if you donât believe that youâre blind,â one tweet reads, echoing a similar strain of thought posted to several online forums.
Others linked his death with the passing of journalist Michael Hastings, whose reporting in Rolling Stone led to the resignation of Gen. Stanley McChrystal. Hastings was killed in a fiery late-night car crash in Los Angeles in June. Pointing to an email in which Hastings describes being under investigation by federal authorities because of âa big storyâ he was onto, skeptics contend the accident was caused or staged by the government in order to silence him.
People who knew Jack in real life did little to quell the rumors. Friends and family refused to talk to reporters about events surrounding Jackâs death. His sister, Amberleigh Jack, a 32-year-old freelance writer in Auckland, New Zealand, requested privacy, tweeting, âSorry but I need a few days to grieve with family and friends.â When the International Business Times reached out for a story on the conspiracy theories, one friend responded in an email, âI could not care less what you, his fans, or any acquaintance needs as far as closure. What is important is that his family is allowed to deal with the tragedy and find their own closure without the distraction or drama.â
People who knew the info security specialist and his work have met in real and online spaces to offer memorials. Colleagues and friends remembered Jack at this yearâs Black Hat conferenceâthe same summit he was set attend within days of his deathâby giving him a Pwnie lifetime achievement award and gathering in the room where he was scheduled to demonstrate his high-profile hack.
Amberleigh wrote a tribute published on the New Zealand blog Public Address. ââŚMy mother lost her sonâŚI lost my brotherâŚthe world lost a genius,â it read. âHe was more than a famous hackerâŚmore than the life of the party that everyone instantly loved.â