Perl's Chip Salzenberg Sued, Home Raided

Chip Salzenberg writes "In April of this year, Health Market Science of King of Prussia, PA, told police that they feared I was misappropriating trade secrets. That very afternoon, police raided my house with a search warrant to seize every computer in the house, paper files, CDs, and DVDs... even my wireless router and cable modem!" Chip was the pumpking for perl's 5.004 release. Keep reading for his description of his current legal troubles, and for a shortcut into what he says prompted his former company's actions, read his letter warning about abuse of open proxies.

Chip continues: "The key evidence in the search warrant was so ridiculous as to be surreal: CVS logs indicating that I downloaded more than I uploaded, and that I sometimes accessed the company network from home. Apparently, for company management, the police, and a judge, working at home through a gateway the company set up for that very purpose, and refraining from editing every source file for every code change, is a sign of nefarious behavior.

My behavior in accessing the company network was entirely within my job description and in no way involved misappropriation of anything. For the more than two years that I worked at HMS, I used ssh and CVS to access company files with my laptop both from work and home, with management knowledge and approval.

What would lead management to such a sudden action? Days beforehand, I had made an internal report of unethical and apparently illegal behavior by the company: Use of open proxies for web harvesting to avoid blockage by web site operators. HMS apparently decided that working with me to address their use of open proxies was not an option.

Health Market Science is a large corporation with, compared to me, effectively infinite resources. My legal bills have topped $40K already over just two months. If HMS succeeds in tarring me with their false accusations, what's to stop your employer or client from doing the same to you, should your relationship sour?

Friends have set up GeeksUnite.net, an informational web site and Legal Defense Fund. The site includes the search warrant, my letter about open proxy abuse, and court documents.

Please contribute to my Defense Fund to fight this attack on the normal and legal work practices of millions of tech workers. Every little bit counts! If every person who visits the site contributes only ten dollars, that will make a huge difference. Only through community effort can we protect ourselves."

Comments

Uh...

[Anonymous Coward]

If his version of events is true, then wouldn't there exist whistleblower protection laws he can seek refuge under?

Re:I'm the pimpking for our product!

[ReverendHoss]

The person in charge of maintaining the Perl code used to have (still has?) a stuffed pumpkin they used to pass around. Project manager is a good parallel.

Lesson to be learned here

[Anonymous Coward]

Any time you're going to be challenging the mental giants that are in charge, ALWAYS have a lawyer in your pocket and all your ducks in a row. And offsite backups.
Seriously, what the hell did he expect - if they can use open proxies like this, that they would play nice with him?

The moral of this story

[Doktor Memory]

Retain, and have a very long chat with a very good lawyer before you threaten your bosses with police action.

Re:The moral of this story

[Anonymous Coward]

Retain, and have a very long chat with a very good lawyer before you threaten your bosses with police action.

Amen. I learned the hard way through several companies (some I started, some I helped turn around, and some I was wise to leave) that unless you're old money, your best option is to walk away. Notify the authorities anonymously and under extreme caution if you must, but make sure it's darn near impossible to pin it on you that you were the whistleblower, and even then, expect them to still come after you (who do you think the authorities work for, the people? LOL!). Old money and its network will blacklist you further than you'd ever imagine possible. Old money continues to keep making money by having idealistic middle class hard working entrepreneurs achieve great successes, only to discover old money eats first. After they are full, they may decide to leave you with some scraps.

The most important lesson I learned is that in any company, figure out quickly who is just like you (assuming you're a member of the unpriviledged middle class) and who's old money nobility. They're special people - the equivelent of "made men" - and middle class folks are not permitted to touch them. I learned at one company that even a psychotic, cocaine abusing, chair-sniffing and female harassing sexual predator, old money company owner who kept on blowing through family millions had more clout than a the technology manager who rebuilt the dying company product.

If you have to get into battle, get an old money law firm and get some old money patrons on your side. Let them protect you and understand you'll have to pay back the favor if you haven't already earned it. Just because the United States is technically a representative republic doesn't mean Machievelli's world doesn't rule here. I've had too many attorneys explain otherwise (if you've ever had a hearing moved to a different judge that your attorney used to clerk for, you know what I mean). As long as you understand that several thousand years of civilization has been about those in power making sure that the rest of us keep them in power and luxury, and you don't mess with that rule, you'll do fine.

In April of this year, huh?

[greenguy]

If anyone else was as confused as me about the intro, there's a town called "King of Prussia" in Pennsylvania. Go figure.

Start reporting them

[david_anderson]

Every company I have ever worked for has violated all sorts of labor laws. Start giving them a pile of minor regulatory headaches.

Then make sure you have a good shark for a lawyer. Make sure he has a technologically savy partner or associate that can understand the CVS and gateway issues.

Then countersue. They may have infinite resources compared to you, but they also have much deeper pockets to go after. If they are vunerable on this point, your lawers will be more than happy to go after that big paycheck.

If all you do is try and defend yourself, then they will steamroll all over you.

Perl = Legal Trouble??

[Captain Bumpsickle]

What is it with people high up in the Perl community and legal troubles?? Didn't Randal L. Schwartz also get into trouble with a past employer?

This should be reason #1 to use Python.

I'm just joking everyone...nothing to see here...carry on.

Re:The company's website and contact info

[TwistedSpring]

I think a legion of slashdot readers blasting these contact details and sending trollish e-mails will only worsen this guy's situation: "Then he got his legion of goons to come to his defence, causing massive problems with our e-mail infrastructure and bringing our website to a crawl, before this had even got to court." That cannot be good.

I would advise any slashdot readers considering trolling this e-mail address to think carefully about the implications their messages might have on this guy, and refrain from contacting HMS unless they have something worthwhile and appropriate to contribute.

Missing Something!

[NickFortune]

Chip isn't a whistleblower. Whistleblowing involves running to external authorities with a story.

Chip complained internally. That's allowed. That's ethical. He was giving his employers a chance to sort out a problem. The open proxy scam might have been in contravention of company policy.

Unlikely with hindsight, I'll grant.

OK, I'm missing your point, I know. I don't even disagree with your advice. All I'm saying is let's watch the terminology. A lot of people will thing "Whistleblower, pah! He had it coming!" when nothing is further from the truth. He got into this mess because he gave his employers the benefit of the doubt.

Re:Missing Something!

[Anonymous Coward]

I *am* a lawyer......

Chip's mistake, from what I can tell, is not consulting with a lawyer before he did anything. The letter he wrote, while a great "f* you" letter to his employer, made a couple of mistakes that almost lawyer would've told him to leave out. Including the threat of legal action.

Once someone threatens you with even possible legal action, most companies go into offense mode. It's not really a choice they have, they have to protect themselves and what they see as their intellectual property. (I say it's not a choice because it's what their counsel tells them. They can also choose to ignore their counsel, but then few companies do that since it defeats the purpose of engaging such counsel in the first place, at least in their minds.)

I feel badly for this guy and will likely contribute to this fund. But I can't help but think there was a better way of handling this situation before it got down to an employee threatening their employer with legal action if they don't stop a behavior they, personally, find objectionable.

If you don't like something your company is doing, let them know you don't like it. If they say, "Tough sh*t," then you have two choices -- leave on your own, or stay and suck it up. Staying and making threats against your employer isn't likely to be tolerated by anyone, anywhere.

I think the lesson here is obvious...

[hunterx11]

Perl Programming Considered Harmful

I am continually shocked and dismayed to see people write test cases, install scripts, and other random hackery using Perl. Perl is seductive because of the abundant CPAN modules and its TIMTOWTDI philosophy, so the path of least resistance is followed and a Perl script is written. Sadly, programming in Perl inevitably leads to one's employer taking legal action against the programmer.

The most common problem encountered with Perl programmers is pointing out embarrassing things about their employers. All they are able to do is white-hat hack or whistleblow. While some educators have fixed some of Perl programmers' flaws (closed-minded disciplinarians do much better here), many have added new ones. Most of their problems can never be solved because they're not inadequacies per se, but rather the direct consequences of intelligence and free-thinking.

Time line of events

[cursion]

Pulled this off the site ...

June 21, 2005 Intervener's Too Late? - DA Gives Away Computers Early. Company Already Imaging.

June 20, 2005 Emergency Stays Filed by All Parties - In an Attempt to Keep Property from falling into the Wrong Hands

June 17, 2005 Judge Awards Personal Property to Company - Admits to NOT Reading Salzenberg's Opposition.

June 16, 2005 Company Runs Interference - Files Motion to Intercept Released Computers Contrary to the May 2, Order and the "Return of Property" laws.

June 6, 2005 DA Drops Criminal Investigation - Annouces Return of the Seized Property to Salzenberg.

May 2, 2005 Company Agrees Not to Enforce Exparte Orders - Property to be Returned to Salzenberg unless another motion is filed.

April 26, 2005 Company files Exparte - Receives orders to intercept equipment from police to start imaging.

April 25, 2005 Salzenberg receives back dated letter from company "accepting his resignation"

April 21, 2005 Salenberg's Property Seized within hours of police report made by CEO.

April 20, 2005 Salzenberg and CEO exchange emails and faxes in an attempt to negotiate a face to face conversation. CEO finally gives the OK to Salzenberg bringing an attorney with him.

April 19, 2005 Salzenberg sends compliance letter to CEO. Salzenberg also sends follow up message to COO that he has "not resigned". CEO immediately locks Salzenberg out of company email and network.

April 18, 2005 Another employee leaves company after voicing compliance issues.

Re:Time line of events

[Lew Payne]

Judging from the Company's actions, if Salzenberg wants to litigate the matter of the return of
his personal property in an expeditious manner, he should seek out a criminal law attorney and file a
Jencks motion for the return of said property. It will be heard by a different Judge, and he'll be able
to show the Company's prejudicial actions. I had to file same to have the FBI return my property to
me, and (though expensive) it worked like a charm.

Here's a link to a Jencks Motion for the return of property.

Sounds pretty clear to me

[suitepotato]

They got caught with their hand in the cookie jar and immediately attempted a smear campaign to draw attention away from themselves.

Further, on nothing more than the company's say-so, they got a search and seizure warrant from a judge who was obviously unfit for service by the very fact of his signing it. Actual investigation and evidence is required usually for this kind of thing and it seems to be a case of "he-said, got the warrant, screw what the other guy said" sort of thing. Having been the victim of this myself, I am not surprised. Saddened that it continues, but not surprised. People who love increasing the powers of the state for their political aims can just as quickly be the nail getting pounded down by that same state.

What is so shocking is that they think they will get away with it. All that are needed are logs from servers harvested by this scumbag outfit despite their attempts at a polite no through robots.txt, etc., and it will become a landslide against them with the first lawsuit for the intrusion.

If I had any money, I'd send some.

How Health Market Sciences screwed with me

[dmuth]

My name is Douglas Muth, and I live not too far from King of Prussia, PA.

Back in 2001, I was laid off from my previous job and looking for work. I interviewed with Health Market Sciences sometime around that July for a Software Engineer position, and it was an interesting experience. I met some of the people from that company and was finally interviewed by one of the Vice Presidents, a guy by the name of Rich Ferris. Rich seemed pretty impressed with my resume and said something to the effect of "we'll get you an offer by the end of the day".

So, I went home and gave Rich a call at the end of the day. But suddenly his story changed, and it was, "I had problems getting the offer through HR (or somesuch), I'll have one for you on Wednesday".

Wednesday came, and I was told, by Rich, to call back again on Friday. Friday came, and they were having money issues and would get back to me on Wednesday. Finally, next Wednesday rolls around and I'm suddenly told, "Well, we really want to hire you, but we don't have the money right now, so we cannot make you an offer".

So what it boiled down to is that I was led on by that company for over a week with the promise of employment, only to have it yanked out from me because they didn't have their stuff together. It was a total waste of my time, and the time of the job recruiter I was working with. If they didn't have the money, they shouldn't have been hiring in the first place. The whole experience left me rather bitter.

I hope Chip sues that company into oblivian.

Re:Am I missing something?

[waveclaw]

Anyway if he had resigned how would it have helped him one iota? He'd still be facing a frivolous and expensive lawsuit and have all his stuff jacked.

Well, aside from the wrongfull lawsuit, if he had resigned under threat he could have applied for unemployment benifits and get his employer embroiled in arbiration (a free and apparently abritrary by some standards method of dispute resolution.) Not only would that help tie up the company and give backing to his (potential) counter-suit, but he might make some money to help with the bills.

<PARANOIA>
Finally, if I were a high-profile FOSS developer, I'd invest in a wireless adapter and a decent SOHO SAN box. Put that baby inside a wall with a UPS. It's impressive what you can do with a drywall knife, some 12 gauge homegrade wire, and a decent amount of drywall patch. Let them raid all his stuff, his data would have had remained 'safe' and all his HD's clean (save any cache/tmp/~ files.) Hell, get paranoid and setup the SAN to re-encrypt the drives and shut off if certain files aren't touched every X minutes.

Chip's problem now is that 100% of his admissable evidence is in the hands of a known immoral and hostile agent. There is no practical way to back up his claims without more money. Any 'evidence' he gets back from those machines may be unreliably tampered after the police's uber-windows nerd gets done trashing his probablly non-windows boxen.
</PARANOIA>

Save Chip, Sink Heath('s legal team)

Posting anonymously here because I've lived it

[Anonymous Coward]

I've been in a very similar situation recently, and also ran into huge legal bills, from a contracting client who made outrageous claims. It was the worst experience of my adult life. I can't go into any details, but it was terrible, and the case turned on the same kind of criminal trade secret laws. These trade secret laws are so prone to abuse because they take what are effectively civil issues (ie, business disputes) and get the criminal justice system involved. Let me tell you, all this thing about "innocent until proven guilty" is nonsense. Yes, you are "innocent until proven guilty" when you actually get to trial... but by the time you get to trial you've already gone through hundreds of thousands of dollars in legal bills. Where does the average guy come up with that kind of money? I'll give you the answer: he sells all of his assets (house, everything) and he still doesn't have that kind of money, so he ends up getting a public defender, and public defender = plea bargain = no trial.

Basically these trade secret laws let big guys with resources or connection punish small guys (us) without any legal process. We're out tens of thousands of dollars just from the moment the process begins, without a court or a judge even having seen the issue.

There's also the emotional factor. It's terrifying. If I got a criminal trade secret conviction, I would never be able to work in the programming field again. What else could I do? My life would be ruined even if I got probation only. The fear is incapacitating. It's like someone telling you "you have cancer." Even if the cancer is treatable, it is terrifying.

Anyone in the programming field needs to be aware of these risks. You don't think about it because a) these things usually do not result in convictions (in TFA's case, if his telling is accurate, there is no evidence of any wrong-doing) and b) when they go away without a conviction, we're all scared to talk about them (like I am posting as AC right now). But even if the case goes nowhere, running into a $40k legal bill is disastrous. That's a downpayment on a house. That's 100% of your after-tax income for more than a year (probably). That's your new-car and vacation fund for several years. That could cause so much financial stress as to lead to divorce, family estrangement, etc. That's "liquidate all of your assets right now and borrow from all of your relatives" disastrous. That's a penalty this guy is suffering without any trial or judicial overview. That's (possibly) without even having a grand-jury rubber-stamp the police side of the story.

I'm afraid to even post this lest it have some bearing on my situation, but I'm posting because I want all of us Slashdot crowd to be aware of it.

I don't really have a solution, but one thing that seems to help is to put up a very aggressive and determined defense from the very beginning. Let everyone involved know, "there will be no plea bargain. There will be a vigorous defense. Trying to bring a civil matter into the criminal system will not work and I'm not going to beg for mercy. If it gets to a trial, we're fighting all the way and there will be an acquital."

This guy is brave to even be talking about this publicly. I'm sure his lawyer advised him not to (mine did). Most of us who are victims of this are silent victims like me.

Re:I can't send money

[Zaak]

...they lead me to lean towards thinking he did nothing wrong. But I don't know. And I'm not dishing up my cash until I do.

The purpose of a legal defense is not to exonerate the guilty. It is to ensure a fair trial. Whether you believe he is guilty or innocent, or whether you don't know, makes no difference. He has the right to a fair trial. At present in the United States, that means having a lot of money to pay a competent lawyer.

TTFN

Had a similar situation

[Anonymous Coward]

I moved out West in 1997 to work for a company (heading up a software division for Windows) that a friend had bought into. Long story short, he and I found massive corruption (embezzlement) within weeks. He brought it up at a board meeting, and the next day was kicked out of the building, voted off the board (illegally it turns out) and his stuff left on the curb. I quit the same day.

At 7 AM the next morning, the sheriff was at my door with their lawyers in tow. Fortunately for me, they screwed up the warrant and were unable to seize my hardware, but they took a very detailed inventory of everything. Even more fortunately, my friend HAD consulted a lawyer before confronting the board and he (the lawyer) had the whole thing search/seizure suspended. The courts finally found the company's motions meritless (and fined them!!) They ended up with a huge lawsuit against them from several board members once the whole picture came to light, the BSA came down on them like the wrath of God (thanks to a cover your ass maneuver by the CIO) and the whole thing went into the crapper within 8 months.

ALWAYS consult a lawyer when doing any sort of confrontation with your employer. You need something to back you up. If they are doing something scummy, there is NOTHING that will stop them from doing something scummy to you in return. I should have done so before the board meeting, even though I wasn't directly involved. But my friend saved my ass. He lives 2000 miles away now, but I still send him thank you notes.

Re:Am I missing something?

[the_mad_poster]

You're not real clued in to how criminal investigations work, huh?

When the police find something "suspicious", you don't just say "oh, I have this perfectly plausible excuse which sounds highly improbable to technical incompetents like you" and walk away. Trust me, I know. I had to jump through some pretty ridiculous hoops with a detective once just to prove that it was not, in fact, uncommon for a brand-spanking new hard drive to appear "wiped".

The justice system is a misnomer. It's not a "justice" system, it's a "legal" system. Justice would imply that all parties are acting in an informed, responsible, and full-capacity manner, which is probably the sickest joke one could make about our incompetent, bungling court system.

Chip Salzenberg is fucked. You would be fucked if you tried to right off your little hidden system with that excuse, and you'd probably get charged for trying to interfere with the investigation and giving false information to the police if you used it.