The Broken Window

down in a really embarrassing media event that lands us all in jail.” He added ominously, “Or worse.”
    “Okay, but I want the trap first. ASAP.” Rhyme glanced at the clock. Sachs and Pulaski were already spreading the word about the case down at the Gray Rock.
    Szarnek pulled a heavy portable computer out of his satchel and set it on a table nearby. “Any chance I could get a . . . Oh, thanks.”
    Thom was bringing around a coffeepot and cups.
    “Just what I was going to ask for. Extra sugar, no milk. You can’t take the geek out of the geek, even when he’s a cop. Never got in the habit of this thing called sleep.” He dumped in sugar, swirled it and drank half while Thom stood there. The aide refilled the cup. “Thanks. Now, what’ve we got here?” He was looking over the workstation where Cooper was perched. “Ouch.”
    “Ouch?”
    “You’re running on a cable modem with one point five MBPs? You know they make computer screens in color now, and there’s this thing called the Internet.”
    “Funny,” Rhyme muttered.
    “Talk to me when the case is over. We’ll do some rewiring and LAN readjustment. Set you up with FE.”
    Weird Al, FE, LAN . . .
    Szarnek pulled on tinted glasses, plugged his computer into ports on Rhyme’s computer and began pounding on the keys. Rhyme noticed certain letters were worn off and the touchpad was seriously sweat-stained. The keyboard seemed to be dusted with crumbs.
    The look Sellitto shot Rhyme said, It takes all kinds.
    •   •   •
    The first of the two men who joined them in Andrew Sterling’s office was slender, middle-aged, with an unrevealing face. He resembled a retired cop. The other, younger and cautious, was pure corporate junior exec. He looked like the blond brother on that sitcom, Frasier .
    Regarding the first, Sachs was near the mark; he hadn’t been blue but was a former FBI agent and was now head of SSD’s security, Tom O’Day. The other was Mark Whitcomb, the assistant head of the company’s Compliance Department.
    Sterling explained, “Tom and his security boys make sure people on the outside don’t do anything bad to us. Mark’s department makes sure we don’t do anything bad to the general public. We navigate a minefield. I’m sure that the research you did on SSD showed you we’re subject to hundreds of state and federal laws on privacy—the Graham-Leach-Bliley Act about misuse of personal information and pretexting, the Fair CreditReporting Act, the Health Insurance Portability and Accountability Act, the Drivers Privacy Protection Act. A lot of state laws too. The Compliance Department makes sure we know what the rules are and stay within the lines.”
    Good, she thought. These two would be perfect to spread the word about the 522 investigation and encourage the killer to sniff out the trap on the NYPD server.
    Doodling on a yellow pad, Mark Whitcomb said, “We want to make sure that when Michael Moore makes a movie about data purveyors we’re not center stage.”
    “Don’t even joke,” Sterling said, laughing, though with genuine concern evident in his face. Then he asked Sachs, “Can I share with them what you told me?”
    “Sure, please.”
    Sterling gave a succinct and clear account. He’d retained everything she’d told him, even down to the specific brands of the clues.
    Whitcomb frowned as he listened. O’Day took it all in, unsmiling and silent. Sachs was convinced that FBI reserve was not learned behavior but originated in the womb.
    Sterling said firmly, “So. That’s the problem we’re facing. If there is any way SSD is involved I want to know about it, and I want solutions. We’ve identified four possible sources of the risk. Hackers, intruders, employees and clients. Your thoughts?”
    O’Day, the former agent, said to Sachs, “Well, let’s deal with hackers first. We have the best firewalls in the business. Better than Microsoft and Sun. We use ICSout of Boston for Internet security. I can tell you we’re a duck in an arcade game—every hacker in the world would like to crack us. And nobody’s been able to do it since we moved to New York five years ago. We’ve had a few people get into our administrative servers for ten, fifteen minutes. But not a single breach of innerCircle, and that’s what your UNSUB would have to get into to find the information he needed for these crimes. And he couldn’t get in through a single breach; he’d have to hit at least three or four