The Cuckoo's Egg

Clifford Stoll recounts how a tiny 75-cent accounting discrepancy at Lawrence Berkeley Laboratory led him to uncover an international computer intrusion and pursue a year-long digital manhunt. Working as a systems administrator in the 1980s, he followed log entries, devised a honeypot of fake files, and traced the intruder’s hops through ARPANET, commercial networks, and overseas dial-ups to a hacker in Germany. His detailed narrative names the intruder (Markus Hess), documents the use of compromised accounts to probe military and research systems, and describes how cooperation with foreign authorities ultimately produced arrests. The account reads as both a procedural detective story and a technical chronicle of early networked computing.

Beyond the chase, the book argues that basic vigilance, meticulous logging, and curious persistence can expose sophisticated espionage, while bureaucratic inertia and jurisdictional confusion hinder effective response. Stoll criticizes law enforcement and agencies for underestimating electronic threats, demonstrates practical forensic techniques (scripts, timestamp analysis, controlled bait files), and shows how one administrator’s persistence forced recognition of systemic security gaps. The narrative cemented awareness that interconnected systems carry strategic vulnerabilities and helped popularize practices and policy discussions that shaped later cybersecurity thinking.