http://archive.org/stream/UsaV.AaronSwartz-CriminalDocument20_774/UsaV.AaronSwartz-CriminalDocument20_djvu.txt

Counsel for the government understands that a number of external connections
were made and/or attempted to the Acer laptop between January 4, 2011 and
January 6, 2011, including from a Linux server at MIT and from China. The Linux
server was connected to a medical center at Harvard periodically during the
same period. While government counsel is unaware of any evidence that files
from JSTOR were extracted by third parties through any of these connections,
the connection logs will be made available to you in accordance with paragraph
(A)(3) above. 

7. Exculpatory Evidence. In paragraph H of the government's letter, the
government described but refused to provide almost all of certain exculpatory
evidence, including evidence that, during the period covered by the indictment,
persons other than Mr. Swartz at Harvard, MIT and China accessed the Acer
laptop that was seized by the government, and persons other than Mr. Swartz at
MIT and elsewhere were engaging in "journal spidering" of JSTOR data using a
"virtual computer" that can be hosted by anyone at MIT. The government has no
basis for withholding the electronic evidence described as exculpatory in its
letter.

The login screen on the Acer laptop when observed by Secret Service Agent Pickett on 
January 4, 2011 identified the user currently logged in as "Gene Host." What
happened to "Gary Host"?

While not a defense or material, one or more other people used or attempted to
use scrapers to download JSTOR articles through MIT computers during the period
of Defendant Swartz's illegal conduct. On the evening of November 29, 2010, the
network security team at MIT was contacted and investigated journal spidering
occurring on the site of the Institute of Electrical and Electronic Engineers.
It was tracked to a group of shared computers on which anyone at MIT can host a
virtual machine. It was determined that a virtual machine had been compromised.
The user was notified that scripts placed on it were downloading journals from
JSTOR, IEEE and APS. The machines were taken offline early the morning of
November 30, 2010.