Slashdot Mirror


Man Fired When Laptop Malware Downloaded Porn

Geoffrey.landis writes "The Massachusetts Department of Industrial Accidents fired worker Michael Fiola and initiated procedures to prosecute him for child pornography when they determined that internet temporary files on his laptop computer contained child porn. According to Fiola, 'My boss called me into his office at 9 a.m. The director of the Department of Industrial Accidents, my immediate supervisor, and the personnel director were there. They handed me a letter and said, "You are being fired for a violation of the computer usage policy. You have pornography on your computer. You're fired. Clean out your desk. Let's go."' Fiola said, 'They wouldn't talk to me. They said, "We've been advised by our attorney not to talk to you."' However, prosecutors dropped the case when a state investigation of his computer determined there was insufficient evidence to prove he had downloaded the files. Computer forensic analyst Tami Loehrs, who spent a month dissecting the computer for the defense, explained in a 30-page report that the laptop was running corrupted virus-protection software, and Fiola was hit by spammers and crackers bombarding its memory with images of incest and pre-teen porn not visible to the naked eye. The virus protection and software update functions on the laptop had been disabled, and apparently the laptop was 'crippled' by malware. According to Loehrs, 'When they gave him this laptop, it had belonged to another user, and they changed the user name for him, but forgot to change the SMS user name, so SMS was trying to connect to a user that no longer existed ... It was set up to do all of its security updates via the server, and none of that was happening because he was out in the field.' A malware script on the machine surfed foreign sites at a rate of up to 40 per minute whenever the machine was within range of a wireless site."

146 of 635 comments (clear)

  1. What is the real truth here? by Mesa+MIke · · Score: 4, Insightful

    It just seems immensly more likely that he got infected by malware from surfing porn sites, than getting infected by porn from having malware.

    1. Re:What is the real truth here? by Paul+Pierce · · Score: 3, Insightful

      It just seems immensly more likely that he got infected by malware from surfing porn sites, than getting infected by porn from having malware. But Child porn? Would he be that dumb? I've seen many really infected machines, and let me tell you so nasty stuff pops up, and I really hope if they were surfing porn that they were able to find better stuff than that.

      Oh, and by the way, the real Truth is here. (check my name)
    2. Re:What is the real truth here? by John+Hasler · · Score: 4, Informative

      Sounds like it may have been the previous user that got the machine infected.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    3. Re:What is the real truth here? by One+Childish+N00b · · Score: 5, Funny

      Hey, this trick worked on my mother when she busted me with (regular) porn on the family computer back in the day. I just showed her some flashy sensationalist article from the newspaper about 'malware' and 'popups' and told her the internet must have done it. Obviously it was that evil internet that had filled her computer with pornography, and not her pure-minded, cherub-like son. Curse that evil internet.

      I wonder if she ever noticed that 'the internet' preferred brunettes?

      --
      Dealing with lawyers would be a lot less tedious if they all looked like Casey Novak.
    4. Re:What is the real truth here? by couchslug · · Score: 4, Insightful

      "Sounds like it may have been the previous user that got the machine infected."

      Sounds like a good reason to either demand a clean install when being issued a machine (and check it yourself anyway) or (if dealing with clueless types) wipe it, hand it back, and play the luser:

      "Uhh, I can't log on..."

      --
      "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
    5. Re:What is the real truth here? by susano_otter · · Score: 5, Funny

      Let me guess: Your mom is a brunette...

      --

      Any sufficiently well-organized community is indistinguishable from Government.

    6. Re:What is the real truth here? by blofeld9999 · · Score: 5, Funny

      She is. I know this because I also prefer brunettes.

    7. Re:What is the real truth here? by Missing_dc · · Score: 5, Interesting

      As a sys-admin, I was given a laptop to use that was my predecessor's. While doing a search of the laptop, I found A LOT of porn in the internet cache. My predecessor had used the firewall/lan bypass device we reserve for site visitors to surf for porn on company time. I did not report him, I simply contacted him and said "I seem to have found some adult material on your laptop, all time and user stamped for you. I think I will re-image this machine, do you have any objections?" He seemed pretty thankful that I was doing so and has been very helpful towards me ever since (8+ months).

      I would like to think that as a sysadmin, I have the duty to protect both the company and the users under my watch. I was not harming the company by giving this guy an out(especially since he had just got a big promotion and an expensive move to corporate HQ).

      Do you think I did wrong in not reporting the guy? (It was obviously deliberate browsing, but no kiddie stuffs)

      --
      How amazed would you be to suddenly find that you just forgot what I wrote and you needed to reread my post.... again.
    8. Re:What is the real truth here? by Anonymous Coward · · Score: 2, Funny

      "Do you think I did wrong in not reporting the guy? (It was obviously deliberate browsing, but no kiddie stuffs)"
      No, who gives a shit? Unless you've got a personal stake in the company, why do you care if some other employee is fucking off on company time?
    9. Re:What is the real truth here? by Anonymous Coward · · Score: 5, Insightful

      I've noticed from having kids that when kids think they're getting away with something, it's just that the whole thing sucks (embarrassing for both or just annoying) so you let the kid think he got away with it. One day, if you have any kids, you'll figure this out.

    10. Re:What is the real truth here? by palegray.net · · Score: 5, Informative
      The phrase "innocent until proven guilty beyond a reasonable doubt" comes to mind. Forensic analysis of the machine apparently showed it to be severely compromised by malware. Allow me to quote from one of TFAs:

      "What I found is, he would log in to the state's Web site, he'd be on for five or 10 minutes and during the exact same time that he's filling out a form, an image shows up, out of nowhere. No typed [Uniform Resource Locator], no search, no Web site activity, just bam, a cached image shows up on his computer," Loehrs said. The offending images were located in the laptop's browser cache directory.

      "He'd have 40 Web sites hitting his computer in a minute -- who's the IT guy who looked at this and said, "Wow, this guy is pretty active on the Internet?'" Loehrs said. "It's physically impossible!"

      Loehrs found a script file that was set to go out and run its own searches on foreign Web sites, she said. "And once you get into some of these foreign sites, you'll get all kinds of stuff you don't want to see.

      "Actually, the child pornography was just a very small portion of it. The majority was just bizarre porn. He was being hit with everything," she added. Are you still so certain of your position?
    11. Re:What is the real truth here? by hairyfeet · · Score: 5, Informative
      Actually he didn't need to even look at ANY porn. I have worked more years in PC repair than I care to admit and I can tell you from experience I have seen an old lady's PC infected from a travel site, one that got rootkitted when his kid went to get gameshark codes and a couple hit by ActiveX drivebys from "webchat" sites the teenage son went to. These are just the ones I know about,because I knew these folks and I got curious and so went to the sites listed in the IE history for the times that the customer said the PC started "acting weird". I used to keep an old WinXP box with a 4Gb HDD that was imaged just for checking out malware or testing bug removal tools and was surprised how quick these "legit" sites hit that box.


      And let us not forget even trusted websites can get compromised,so for all we know this guy was surfing a legitimate website and got hit by a driveby or one of the many exploits that had been released since his machine no longer was updating. I personally hope he gets enough out of them in a lawsuit that he never has to work again. It is obvious to me they never bothered to look at the laptop except to look for porn,and the fact that it was THEIR OWN SCREWUP that caused this in the first place should make it a slam dunk for any decent lawyer. But as always that is my 02c from many years of fixing Windows boxes,YMMV

      --
      ACs don't waste your time replying, your posts are never seen by me.
    12. Re:What is the real truth here? by story645 · · Score: 2, Insightful

      Unless, you're just as good and that's why your kids a programmer at 6.

      --
      open source modern art: laser taggi
    13. Re:What is the real truth here? by Anonymous Coward · · Score: 3, Funny

      I routinely exceed every skill my parents (or anyone) tries to teach me in a few months Ask for lessons in humility.
    14. Re:What is the real truth here? by story645 · · Score: 2, Insightful

      That's your situation, and granted I also run circles around my mom (a programmer) when it comes to computers. But what about when/if you have kids. Do you really expect that they'll be that much better (or even as good), even ignoring the intellectual challenge of trying to break whatever levels of security they went through. Even if they are very good-even if you don't know how to implement, you've got a vague understanding of what's possible, just from background and experience.

      All that kind of adds up-I'm sure there are guys on ./ perfectly aware of their kid's porn harddrive who are just pretending it does not exist 'cause it's not a battle worth picking.

      --
      open source modern art: laser taggi
    15. Re:What is the real truth here? by smallfries · · Score: 4, Insightful

      Yikes I remember being 18 as well. Don't worry by the time you grow up you'll be amazed at how much everyone else has learnt. I'm only half taking the piss. When I first turned up at uni as a fresh faced undergraduate you've perfectly described my own self-image. Now that I'm an older, more cynical postdoc I see the world differently.

      One thing that will make a real difference for you is to find your natural peer group. Until then, like the AC said: ask for lessons in humility.

      --
      Slashdot: where don knuth is an idiot because he cant grasp the awesome power of php
    16. Re:What is the real truth here? by Hognoxious · · Score: 2, Funny

      He obviously speeks from experience.
      He obviously claims to.

      Why should he be all "Naw, I'm not really that good" if he actually is? Just so YOU don't need to feel challenged?
      On teh intarwebz, nobody knows you're a dog. That's what Chuck Norris told me - I say told, he more or less gasped it - after I kicked his ass.
      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    17. Re:What is the real truth here? by Rocknrico · · Score: 5, Interesting

      You can't imagine the world of crap awaiting that guy had you reported him. It would have been a problem that would probably haunt him for the rest of his life. My spouse recently almost lost her job after a 40 year old arrest for dope surfaced in the FCIC database after a background check. Nevermind that she has a clean record since 1968, and has tirelessly worked with youth groups, sunday school, Boy/Girl scouts and extremely active both at church and the community. In fact, the official arrest /court records don't even exist after a 1997 fire at the courthouse destroyed everything. As a computer professional, I'm shocked that Georgia went back so far in time to key that data into the database. You definitely did the right thing. Definitely.

  2. Certainly sounds fair... by Raineer · · Score: 5, Insightful

    Good to know they researched heavily before firing him. At my company when re-deploying hardware like a laptop it is standard to wipe it completely and load a ghosted image. Who WOULDN'T do at least as much?

    1. Re:Certainly sounds fair... by dal20402 · · Score: 4, Informative

      Who WOULDN'T do at least as much?

      Government employees in Massachusetts, the state that is so corrupt and dysfunctional it gives government all over the rest of the U.S. a black eye.

      Seriously. I just escaped (to D.C., which, despite its warts is a million times better) from three years of living in that hellhole. I don't think I encountered a single effective or competently run state agency the whole time.

      I expect the employee who would have been responsible for wiping this laptop is probably a relative of some high official, and probably doesn't know how to do anything except reinstall Windows from a factory CD.

    2. Re:Certainly sounds fair... by Secrity · · Score: 4, Interesting

      They did fire him -- they fired him and never asked any questions. The investigation was by the prosecutor, not his employer. I wonder if he will be hired back with back pay.

    3. Re:Certainly sounds fair... by wtfispcloadletter · · Score: 5, Informative

      Then there's projects like Unattended that work great and can have a laptop or workstation back up and running in a default state, with all programs and updates applied in 60-90 minutes.

      There is no excuse for giving someone a used laptop or workstation that hasn't been cleaned. We don't concern ourselves much with our workstations since they never leave our network, but any laptops get a thorough cleansing before being re-issued to someone else.

    4. Re:Certainly sounds fair... by Raineer · · Score: 4, Informative

      Maybe somebody without Ghost? If you don't have something similar to Ghost, then you sure as hell don't fire someone with something illegal on the HDD. That is one certain way to open yourself (as a company) up to lawsuits. If you cannot prove what was on the laptop when you gave it to him, the firing surely is on shaky grounds.
    5. Re:Certainly sounds fair... by SuperQ · · Score: 2, Interesting

      Hell, at my work installations are self-service over PXE boot. When ever I have changed hardware with our support people I wipe and clean install the machine myself anyway just to be sure I have a clean linux image.

    6. Re:Certainly sounds fair... by fm6 · · Score: 2, Informative

      Isn't anyone going mention poor Mary Jo Kopechne? I believe it's mandatory when trashing Ted Kennedy.

    7. Re:Certainly sounds fair... by SanityInAnarchy · · Score: 2, Informative

      Never mind that Ghost is an absurdly simple program -- Linux (and any other Unix, for that matter) has had dd, for free, pretty much forever. More recently, there's ntfsclone, which will grab everything but unallocated space.

      --
      Don't thank God, thank a doctor!
    8. Re:Certainly sounds fair... by dal20402 · · Score: 4, Funny

      Anytime. It was so satisfying, I'd leave again if I weren't already gone. Maybe I'll fly up there just to leave again.

    9. Re:Certainly sounds fair... by treeves · · Score: 4, Funny

      Maybe they'll change their name to The Massachusetts Department of Industrial Accidents Waiting To Happen.

      --
      ...the future crusty old bastards are already drinking the Kool-Aid.
    10. Re:Certainly sounds fair... by LackThereof · · Score: 5, Informative

      I wonder if he will be hired back with back pay. A different article I read about this said that he had no interest in ever working for or having any dealings with this company ever again.

      He will, however, be suing them.
      --
      Legalize recreational marijuana. Seriously.
    11. Re:Certainly sounds fair... by PJ1216 · · Score: 2, Insightful

      Not true. In many states yes, but not all. They're only allowed to fire people for any ol' reason if the state is an "at will employment." It means you or the employer can use any reason whatsoever to stop working. Technically, i think in any state someone can quit for any reason, but... i dunno... thats how the law was always explained to me. i could be mistaken.

    12. Re:Certainly sounds fair... by linzeal · · Score: 2, Interesting

      It is not just the government there it is the people. I visited Boston for a few weeks years ago and my friends seemed to go out of their way to tell me how much of the stuff in their house "fell off a truck" and which restaurants, clubs and bars they could go eat and drink for free in. It seems some individuals and groups of people out there take freeloading to a whole new level.

    13. Re:Certainly sounds fair... by Thing+1 · · Score: 2, Informative

      A different article I read about this said that he had no interest in ever working for or having any dealings with this company ever again.

      In fact, his attorney referred to his former employers as "buffoons".

      From the article:

      But he is unlikely to take his old job back, even if the DIA were to offer it, [attorney Timothy] Bradl said. "I would think that theoretically he'd be entitled to his job back with back-pay, however he would never want to go back to work with such buffoons," he said.

      --
      I feel fantastic, and I'm still alive.
  3. yet another by Brian+Gordon · · Score: 5, Insightful

    case where you can't help but think "this can't be right".. making certain types of information illegal to possess just doesn't make practical sense in the context of the Internet, no matter how morally objectionable we find it.

    1. Re:yet another by Ethan+Allison · · Score: 3, Interesting

      I'm not disagreeing with you here, but how can you stop people from exploiting kids if you make possession legal? Make obtaining it illegal? That seems like a huge loophole waiting to happen...

    2. Re:yet another by Mr+EdgEy · · Score: 3, Insightful

      Production (!), and distribution.

    3. Re:yet another by Kjella · · Score: 3, Insightful

      Let's say you own a large rural property, and someone sets up a drug lab deep in the forest. Just because in some cases people might be unaware of what's happening on their property, it doesn't make sense to make drug labs illegal? Because in some cases people might be unaware of what's happening on their computer, it doesn't make sense to make information illegal to posess? I'm sorry but that'd be a pretty strange world. If things are uncertain, it's the prosecution's job to stick it to them "beyond a reasonable doubt". The defense tries to tear that evidence apart, like they just did. I don't see the problem with that system.

      --
      Live today, because you never know what tomorrow brings
    4. Re:yet another by tmosley · · Score: 2, Insightful

      No, make production illegal (which it is), and possibly make it illegal to purchase it.

      I mean, you wouldn't punish someone for having videos of people being murdered, would you? You would only punish those who did the killing, and perhaps those who purchased it, providing that the purchaser knew that they were encouraging such behavior, which is a stretch, I know. That's why I'm not sure if purchasing kiddie porn should be illegal.

    5. Re:yet another by Vancorps · · Score: 3, Interesting

      You rely on child exploitation laws which are already in place perhaps? If a child is harmed there are plenty of laws in the way to make sure there is a measure of justice.

      This pretty much equates to outlawing the symptoms of a problem such as the tremors of an alcoholic in need of smooth refreshing goodness.

      In that context the video is simply evidence against the person who actually harmed a child. That sounds like appropriate punishment to me.

      I don't think that will happen though and I actually agree with the current law, at some point I think certain kinds of content serve no use to society, such as malware and kiddie porn but I can understand that information should always be legal. I think in this context we could argue that it is not information and is simply objectionable content.

      When something is no good for anyone I think it's safe to say that it should be illegal. If someone comes along that can prove it does some good then the issue needs to be readdressed and evaluated for legitimacy.

    6. Re:yet another by Anonymous Coward · · Score: 5, Insightful

      Possession crimes in general are bad ideas. You can make anyone a criminal with only minimal effort.

      "Officer, I'd like to make an anonymous tip. So-and-so Smith is carrying marijuana in a plastic baggie taped to the inside of his bumper, license plate 555-555. He parks at workplace. I overheard him talking about selling it."

      Bam. Reasonable cause, possession, and intent to distribute despite the fact that Mr. Smith has led a blameless life. Because of someone's grudge and quick work with masking tape, he's now a felon.

      Possession crimes are super-easy to prove in court and are therefore a favorite of prosecutors.

      "Here's a photo of the illicit material in his possession. What do you think, jury? If he had the material in his possession, he's guilty of the crime."

      Of course there are absolutely no corrupt officials or police officers who would ever plant such evidence. If you believe that, I've got a bridge to sell you.

      Bonus: Captcha == "Bunkmate" which is what this guy narrowly avoided being plowed by.

    7. Re:yet another by nbert · · Score: 3, Interesting

      Can't offer any smart solution to the problem. However, I remember that back in ~2000 cnet had an article about the issue which argued that the lower barrier in obtaining such material should result in lower penalties, because it has become far more likely to obtain such material accidentally. It's just way too easy to stumble across questionable material on the net and sometimes people don't even know that it is on their hdd. Very different times compared to the situation when applicable laws were created.

      Wouldn't remember it was cnet if it wasn't so much out of their usual scope. However, I think the author had a very valid point. And if someone knows how to get this article I'd highly appreciate it - couldn't find it in recent years...

    8. Re:yet another by blitziod · · Score: 2, Insightful

      possesion of child porn is teh only possesion crime in the USA that does not carry defenses for people who do so unknowingly or by accident. The easiest thing to do is change this law.

      --
      The only way to bust a doper--is when you yourself become a smoker!
    9. Re:yet another by Jafafa+Hots · · Score: 4, Insightful

      And also, how can we possibly stop people from murdering each other unless we arrest people who have crime scene photos?

      --
      This space available.
    10. Re:yet another by turbidostato · · Score: 4, Insightful

      " Because in some cases people might be unaware of what's happening on their computer, it doesn't make sense to make information illegal to posess?"

      You told it: it doesn't make sense to make information illegal to posess. I thought that to be self-evident in "the land of the free".

    11. Re:yet another by anagama · · Score: 5, Insightful

      Make _intentionally_ having it a crime. Yes, this does create a harder burden for prosecution, but why should someone be prosecuted for something that 1) they didn't actually do, 2) didn't even know was going on, and 3) didn't even know they had. If we prosecute such people, we might as well just admit we're no longer "home of the free" but are rather just another pathetic abusive government.

      --
      What changed under Obama? Nothing Good
    12. Re:yet another by ScrewMaster · · Score: 5, Insightful

      This pretty much equates to outlawing the symptoms of a problem such as the tremors of an alcoholic in need of smooth refreshing goodness.

      I once heard that described as "trying to cure diarrhea by tinkering with the plumbing in your house."

      When something is no good for anyone I think it's safe to say that it should be illegal. If someone comes along that can prove it does some good then the issue needs to be readdressed and evaluated for legitimacy.

      That, ultimately, isn't the issue. The problem here is that the mere accusation of child pornography is punitive to such a degree that, even if you're not ultimately convicted, you'll suffer severe consequences. That's not what the Founders had in mind for our legal system (as corrupted as their vision has become.) Somebody who gets nailed for drug possession or dealing (which, given how much the government spends to stop it must be a crime worse than murder) doesn't go through what a person merely accused of possessing child pornography does. It's one thing to punish those who break the law, those who hurt other people ... but we're at the point where law enforcement is doing as much if not more damage. Time to restore a little balance, time to make sure that we're actually putting the right people away. Most of us complain vociferously about the RIAA's anti-piracy campaign because whether you did the crime or not, whether you go to court or settle, you've been punished by the legal system. A person who has been accused of a crime shouldn't have their life destroyed over the accusation. But that is exactly what's happening here.

      Better to let a guilty man go free than imprison an innocent one. There are those who disagree with that, who believe that a few thousand wrongly imprisoned souls are a small price to pay "for the children" but they're wrong. If child pornography is truly as big a problem as everyone says (I'm not saying that it isn't, I just haven't looked up any numbers on it) then give law enforcement the funds they need to go after the real criminals, the ones who exploit the innocent is such a horrible way. To do otherwise is no justice at all.

      --
      The higher the technology, the sharper that two-edged sword.
  4. This Is What Lawyers Are For... by reallocate · · Score: 2, Informative

    This guy should get one. And, meanwhile, insure no one touchs that laptop.

    --
    -- Slashdot: When Public Access TV Says "No"
  5. Re:I submitted to the Firehose at 6PM! on the 18th by Brian+Gordon · · Score: 2, Funny

    Why don't you try writing your submissions intelligently and professionally?

  6. Alas by rustalot42684 · · Score: 5, Insightful

    If people hadn't jumped to conclusions and had done a more thorough investigation, this man would not have lost his job and reputation.

    1. Re:Alas by PhoenixAtlantios · · Score: 4, Interesting

      What safe actions could they have realistically taken in that situation to investigate it? If you mess around with investigating that yourself and don't immediately hand the situation over to the police don't you risk incriminating yourself by 'protecting' the person from the police?

      I'm honestly curious to know; how could they have possibly investigated this more?

    2. Re:Alas by tftp · · Score: 3, Interesting

      Isn't it possible any more to report an incident without providing the police with a guilty person at the same time? Tell them what happened, and they will investigate, that's what their job is about.

  7. That's a nice HUGE FREAKIN' BLOCK OF TEXT by Anonymous Coward · · Score: 2, Funny

    That's a nice HUGE FREAKIN' BLOCK OF TEXT you've got there, buddy. Maybe you'd like some PARAGRAPH STRUCTURE to wash it down.

    1. Re:That's a nice HUGE FREAKIN' BLOCK OF TEXT by Geoffrey.landis · · Score: 4, Interesting

      That's a nice HUGE FREAKIN' BLOCK OF TEXT you've got there, buddy. Maybe you'd like some PARAGRAPH STRUCTURE to wash it down. Don't blame me, the story as I submitted it had paragraph breaks.
      --
      http://www.geoffreylandis.com
  8. A poorer man would've been convicted by davidwr · · Score: 5, Insightful

    I've heard of people getting screwed by their bosses before but this is ridiculous.

    If he hadn't had the resources to hire his own expert, he would be in prison and branded a sex offender for life, all because his boss didn't practice safe hex.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  9. Tough lesson learned... by Muckluck · · Score: 5, Informative

    This is a tough lesson learned for Mr. Fiola, but the lesson is, always request a clean build when receiving new equipment in the workplace. That would have eliminated the malware and given him a clean system to work on.

    --


    --I like turtles...
    1. Re:Tough lesson learned... by Chris+Burke · · Score: 2, Informative

      And they say "No, you take this laptop as-is and use it" with the same unthinking and unresponsive attitude with which they fired him, and then where is he?

      Of course that is probably a better circumstance under which to be looking for a new job than the one he's in now...

      --

      The enemies of Democracy are
    2. Re:Tough lesson learned... by oldspewey · · Score: 5, Insightful

      And how does the average corporate employee even know whether he/she has a "clean build" when issued a new laptop. Most times a laptop arrives pre-imaged with an OS and a standard suite of software tools. Unless you go poking around the filesystem you can't really tell how "clean" the machine is.

      --
      If libertarians are so opposed to effective government, why don't they all move to Somalia?
    3. Re:Tough lesson learned... by Rogerborg · · Score: 2, Insightful

      I'd imagine that if he's got a half decent lawyer that he'll never have to work again.

      --
      If you were blocking sigs, you wouldn't have to read this.
  10. Dayam. by Penguinisto · · Score: 5, Insightful
    Man... reason # 10,297,668 why I primarily use Linux as my desktop @ work.


    Not that Linux (or OSX, or any of 'em for that matter) are 100% crack-proof, but putting one's career at the mercy of common malware and the only safety net is a sharp eye at the IT department?


    OTOH, I suspect this guy (if he plays his cards right and has a sharp lawyer on retainer) may never have to work another day in his life.

    /P

    --
    Quo usque tandem abutere, Nimbus, patientia nostra?
    1. Re:Dayam. by Drgnkght · · Score: 2, Insightful

      I suspect this guy (if he plays his cards right and has a sharp lawyer on retainer) may never have to work another day in his life. Which is a good thing because his chances of finding a decent job after this are about nil. Newspaper headlines are big when they can shout "Evil child-molester caught!", not so much when they have to say "oops, our bad."
    2. Re:Dayam. by phorm · · Score: 2, Insightful

      Not safe enough these days. Both my linux and boxen are regularly being sniped at.

      I'd also recommend:

      a) No root SSHD
      b) Denyhosts, with known hosts in hosts.allow
      c) Using an alternate SSH port
      d) Using a secure password. Alphanumeric with various characters

      Even with an OK alphanumeric password, I've seen boxes hacked through brute-force. Already-rooted machines will happily look for others to add to their army. Having a secure OS and failing on (d) is still a good way to invite disaster.

      (sorry if I'm preaching to the choir, but I've seen plenty of hacked boxen in both the windows and 'nix/BSD realm lately due to poor security practices).

  11. Julie Amero ? by PoliTech · · Score: 5, Informative
    1. Re:Julie Amero ? by stavros-59 · · Score: 5, Informative

      Yep.

      The forensic report is linked to on this page and is scathing about the IT staff.
      They did the handover and didn't even notice that the antivirus wasn't working and that their SMS update system wasn't working.

      It should be policy to handover computers with clean image and with updates.

  12. The real crime here... by adsl · · Score: 5, Insightful

    The real crime here is that the charges were dropped thru "insufficient evidence".... Why is this loophole allowed to prosecutors? How about. "We are sorry we should never have arrested you, fired you and will will formally erradicate all your arrest process so it never happened and give you backed dated pay and legal expenses".

    1. Re:The real crime here... by LostCluster · · Score: 5, Informative

      The real problem is that, as the summary said, they didn't change the security software username, and killed the old username at the server. Therefore, he was running unupdated software... leaving him open to any new Internet threat. Sounds like the IT Department deserves to be fired.

    2. Re:The real crime here... by John+Hasler · · Score: 2, Interesting

      Prosecutors and police can be sued.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    3. Re:The real crime here... by tmosley · · Score: 2, Insightful

      Good luck with that.

  13. Lawyer: This, boys and girls, is why . . . by hawk · · Score: 3, Informative

    I am a lawyer, but this is not legal advice. If you need legal advice, the attorney in this story might be a good choice . . . (but I cannot endorse him).

    This, in a nutshell, is why lawyer's represent guilty scum.

    Sometimes, it turns out, they are neither . . .

    Personally, I'm skeptical about the idea of malware that secretly downloads and hides kiddie porn--why would the malware developer do that? I really can't fault the emploeyr for not considering such an idea and investigating it.

    The defense attorney, though, is to advocate for his client, even if the client claims seem far-fetched.

    hawk, esq.

  14. The majority of computer users are unaware... by dclozier · · Score: 3, Informative

    So expecting them to ask for a clean build is asking to much. Their IT department should have known better and done this automatically.

  15. Telling quote from TFA by GroeFaZ · · Score: 5, Interesting

    "As soon as you mention child pornography, everybody's senses go out the window, she [the computer forensics expert] said."

    Sounds too familiar. What's really fucked up is that his former employers "stand by their decision", namely to fire the guy. The bare minimum would be a public excuse, an offer to let him work there again, and probably a hefty compensation if he refused. But that's not likely to happen since by definition, the government knows best.

    --
    The grass is always greener on the other side of the light cone.
  16. Unlawful Termination by HannethCom · · Score: 2, Informative

    In Canada that would be unlawful termination.

    Actually even if he was guilty, they would have had to tell him before he went outside why he was fired, or he would have grounds for compensation.

    --
    Microsoft, Apple, Google, Amazon what's the difference? All steal money from devs and control with walled gardens.
    1. Re:Unlawful Termination by RiotingPacifist · · Score: 2, Insightful

      Typical canadians, with thier pesky protecting employees. Do you know nothing about capitalism? it only works if you give the employer COMPLETE power.

      --
      IranAir Flight 655 never forget!
    2. Re:Unlawful Termination by doktor-hladnjak · · Score: 2, Informative

      Massachusetts is not a Right to Work State. It does have "At-will" employment laws though.

  17. "We stand by our decision" by Strange+Ranger · · Score: 5, Insightful

    DIA spokeswoman Linnea Walsh confirmed Fiola "was terminated," but declined to say if any internal discipline has been meted out as a result of his name being cleared in court.

    "We stand by our decision," she said.
    So now the DIA is trying cover it's own ass for giving him "a ticking time bomb" and then firing him for it and ruining any social life he had.
    The worst part is that the assholes at DIA responsible for the horrible "roll-out" of a replacement laptop, and the PHB's responsible for firing him w/o doing proper research into the issue will not be punished in any way. THEIR lives won't be ruined. Even if he wins a lawsuit. It'll be money from the DIA, but no real punishment to the people involved.

    Somebody find all their names and contact info (I'm too lazy) and post it. Let's send the info to Russia with requests for Viagra and child porn.

    Seriously though, The Office is funny on TV, but tragic in real life. These people should be arrested for harassment and criminal negligence at the least.

    What kind of laws can we enforce (and/or pass) to truly punish the individuals responsible for shit like this? Lawsuit money from the organization isn't even close to justice.

    --

    Operator, give me the number for 911!
    1. Re:"We stand by our decision" by NumbDr9 · · Score: 2, Insightful

      Hi,

      There's certainly plenty of blame to pass around here, but before you go on a witch hunt, let's look at what may have happened.

      Now, chances are that the PHB was not the one who discovered the child porn. More than likely the content was reported to the PHB or HR or whatever by somebody in IT. So right away we have an unknown and possibly long chain of communication. So the PHB hears from somebody in the company that one of the employees is downloading child porn, what is he supposed to do now (especially if he's not tech savy)? Did the IT department inform the PHB or HR or whatever that it could be a false alarm? Maybe, maybe not. Was the critical information lost somewhere during the chain of communication? Maybe or maybe not. We do know from the article that the PHB consulted the company lawyer (probably a good idea). So now a lawyer is involved. what advice did the lawyer give to the PHB? Was the PHB acting of his own accord, or directly following instructions from legal? The answer is not obvious.

      Now somebody somewhere dropped the ball, but it is entirely unclear which person or persons are to blame for that happening. Additionally it appears on the surface that the mistake was not made wilfully or out of spite, but out of a mistaken conviction.

      If this had happened to me, I would be far less concerned about getting even with whoever was to blame, and far more interested in pursueing appropriate compensation.

    2. Re:"We stand by our decision" by shilly · · Score: 2, Informative

      Well, the person who said "We stand by our decision" is linnea.walsh@state.ma.us

      I think it would be helpful for people to drop her a line asking how she lives with herself, and whether she can look her children in the eye now that she's helped ruined a man's reputation.

  18. Been there to an extent by 7-Vodka · · Score: 4, Interesting
    I've worked for the state of MA and I've run into the same problem many times on their computers. Depending on where you work their IT people are really not that knowledgeable or hardworking and I can't blame them, they have to work with microsoft crap, I would be slacking too.

    I was even fooled by it once. I found pr0n bookmarks under a cute girl's login and I was thinking "Daaamn this girl is a freaky.." for a few seconds until I realized what it was. I could easily see how people would jump the gun and over react when they find actual material on a computer and not just bookmarks however they should at least ASK the person if they're guilty and send it for investigation first.

    --

    Liberty.

  19. Why? lots of reasons by davidwr · · Score: 5, Insightful

    * to disrupt society
    * to provide a plausible alibi for any of his perverted friends
    * to drive up the cost of prosecuting this type of crime so prosecutors will have less money to prosecute his brother-in-law who runs an organized crime family
    * kicks/jollies/juvenile reasons
    * someone paid him to do it
    * Why ask why
    * He wanted his work to get on CowboyNealBoard, er, I mean Slashdot

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  20. Re:Lawyer: This, boys and girls, is why . . . by jythie · · Score: 5, Insightful

    Because the sites the malware connects through pay via click through.

    What that bit of malware probably did was go around to a bunch of sites that the author gets fees from and makes it look like someone is browsing them.

    Get a botnet of 1,000 computers going and it looks like hacker X convinced 1,000 people to view the site over and over.

  21. Re:Lawyer: This, boys and girls, is why . . . by Kjella · · Score: 4, Insightful

    Personally, I'm skeptical about the idea of malware that secretly downloads and hides kiddie porn--why would the malware developer do that? I really can't fault the emploeyr for not considering such an idea and investigating it. Providing a layer of protection between the source nad the potential customers? I doubt an ad server serving up illegal images would be alive for very long.
    --
    Live today, because you never know what tomorrow brings
  22. Re:I submitted to the Firehose at 6PM! on the 18th by hummassa · · Score: 5, Funny

    Why don't you try writing your submissions intelligently and professionally? Because then it would eliminate any chance of them going to the /. front page? :-)
    --
    It's better to be the foot on the boot than the face on the pavement. ~~ tkx Kadin2048
  23. Re:Lawyer: This, boys and girls, is why . . . by AxemRed · · Score: 3, Informative

    I would say that the scripts surf a list of shady sites to get hits on banner ads. I imagine that, even though they don't stay up as long, kiddie porn sites may have ads too...

  24. Whats interesting in this story is.... by tacokill · · Score: 5, Interesting

    The fact the he was charged with child porn. I've been following this case in the news because it is such an odd case. As TFA says, they eventually figured out it was viruses and malware doing the downloading of images (over the web, BTW). Ok, fair enough.

    However, another article (can't find the link, sorry) was interviewing one of the detectives involved with the case. What he said was something along the lines of "there was a LOT of porn on the computer. 99% of it was just gross stuff, not illegal. But we did find a few pics of young girls.". Which makes me wonder --- how, exactly, do they define child porn?

    Are they just arresting people because pictures look young?

    ...or did they find real kiddie porn on there?

    It just seems odd that all of a sudden there is all this kiddie porn out on the publicly available internet and it does not draw attention. I would presume, with Tor, Freenet, etc all of that activity would be driven underground (ie: encrypted). Is there really "spam" and popup based kiddie porn still going on in the WWW?

    I ask because I have...err...my friend has not seen it since the early early days of the internet. Back then, you truly could stumble across it accidentally. It hasn't been that way for a long long time though, in my experience.

    1. Re:Whats interesting in this story is.... by locokamil · · Score: 4, Funny

      You mean your friend's experience, right?

    2. Re:Whats interesting in this story is.... by Riktov · · Score: 4, Interesting

      What's even more bizarre is the claim (in the summary) that some of the images portrayed incest.

      Sure, with child porn one could make a reasonable guess -- there is no confusing an image of a 6-year-old as possibly 18. But for "incest images", the only "portrayal" could be from a text label (in the image, or the filename), or some blatanly obvious visual hints in the photos, which would have been *deliberately* placed to convey the idea that the image portrays incest. There is no way to deduce from an image of two naked people, without knowing their identities as well, that they are engaging in incest.

      Saying they the images portray incest based on the labels is no more justified than saying that they portray space aliens, or members of the White House staff, or Osama bin Ladin in disguise.

      And are images depicting (or just claiming to depict) incest a crime?

    3. Re:Whats interesting in this story is.... by tompaulco · · Score: 2, Informative

      Which makes me wonder --- how, exactly, do they define child porn?
      In my state child porn is pictures or video of person under the age of 18 involved in sexual acts or just unclothed. Also, anyone that looks like they are under the age of 18 according to the police inspector whether or not they actually are. Also , anyone that is obviously over the age of 18 but is dressed up to look like someone under the age of 18, also cartoon renderings of imaginary people who if they were not imaginary would be under the age of 18 or look like they would be in the opinion of the police investigator.

      --
      If you are not allowed to question your government then the government has answered your question.
  25. Most organisations wouldn't by EmbeddedJanitor · · Score: 2, Insightful

    Many companies only have limited IT capability and many will just hand over a computer from an ex employee to a new employee with very minor changes. Saves a bunch of work reinstalling stuff.

    --
    Engineering is the art of compromise.
  26. I saw the movie by Ranger · · Score: 4, Insightful

    It's called Farm Sluts. Hilarious! Well not for the guy in real life.

    --
    "You'll get nothing, and you'll like it!"
  27. Re:Lawyer: This, boys and girls, is why . . . by vux984 · · Score: 5, Insightful

    Personally, I'm skeptical about the idea of malware that secretly downloads and hides kiddie porn--why would the malware developer do that?

    I've actually seen this sort of thing a couple times... not for kiddie porn luckily. Just movies (hollywood) and warez back before p2p.

    As you can imagine finding servers to host and distribute this sort of stuff can be difficult. So why not compromise some random persons laptop, setup an ftp server, irc, dynamic dns, and whatever else... and then use it as a free and 'anonymous' remote host and storage.

    It wouldn't surprise me in the least that this could be in use for kiddie porn distribution.

    I really can't fault the emploeyr for not considering such an idea and investigating it.

    When dealing with any case of child abuse including kiddie porn, one should ALWAYS be extremely cautious. Because whether he is innocent or not, people will never look at him the same way again.

  28. Re:Lawyer: This, boys and girls, is why . . . by Sparks23 · · Score: 4, Insightful

    From my (admittedly cursory) read of the article, I gather they claim the malware was trying to pop up the images to a broken account. I.e., the malware downloaded the images (hence their being in the temp directory) and tried to display, but then failed. Thus, the user never saw that the laptop was doing this, or else he could've gone, 'uhm, something is very wrong with this machine.'

    If this is true, though, the real question then becomes how they didn't notice the virus on the machine when reconfiguring things (poorly) for the new user. At that point, if the defense argument is accurate, the malware should have still been able to display this stuff, and you'd think the IT guys would have noticed...

    --
    --Rachel
  29. Re:Why? lots of reasons by secolactico · · Score: 5, Interesting

    * To create mirrored websites to ensure availability of the material.

    It happens with malware spreading sites, why not illegal porn?

    If the malware can run a distributed dynamic dns based site, it will achieve a highly distributed network that would be hard to shut down easily.

    --
    No sig
  30. the ultimate untraceable weapon by analog_line · · Score: 4, Interesting

    Get child porn on your enemy's computer as long as he runs Windows (or whatever else), total deniability because there's so much malware out there. This scares the bejeezus out of me.

  31. Re:Lawyer: This, boys and girls, is why . . . by Anonymous Coward · · Score: 5, Informative

    Probably, the malware itself is a temporary webserver to help distribute the load of an illegal kiddie porn pay site. Look up Fast Flux (http://en.wikipedia.org/wiki/Fast_flux) spammers use it all the time and it is very simple to set up.

  32. Re:Lawyer: This, boys and girls, is why . . . by networkBoy · · Score: 4, Informative

    Your skepticism is mis-placed.
    There is more than one kind of malware.
    One kind sends Phishing Spam / Viagra spam / etc.
    Another performs DDoS attacks.
    A third acts as a distributed FTP/Fileshare server so that the guilty have a place to hide & share their wares and not have a single point of being shut down by the authorities. Whether this be lists of CC numbers or kiddie porn is immaterial.
    -nB

    --
    whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
  33. Re:Lawyer: This, boys and girls, is why . . . by Killeroid · · Score: 5, Informative

    Personally, I'm skeptical about the idea of malware that secretly downloads and hides kiddie porn--why would the malware developer do that? The malware wasn't downloading and hiding kiddie porn From the article: "Loehrs found a script file that was set to go out and run its own searches on foreign Web sites, she said. "And once you get into some of these foreign sites, you'll get all kinds of stuff you don't want to see. "Actually, the child pornography was just a very small portion of it. The majority was just bizarre porn. He was being hit with everything," she added." The malware author was probably running a pay per click scam by using his malware to visit a bunch of sites and making it seem a bunch of visitors were browsing the site.

  34. Not everybody is a slashdotter by fm6 · · Score: 4, Interesting

    From a purely technical point of view, a clean install is good advice in this situation (and many others!) But it's not something an ordinary user can do. This guy certainly doesn't have the expertise, not if he was using such a thoroughly compromised system. So he has to turn it over to the IT department, which then charges his department $100 or more for the service. That's approaching the total value of the laptop if its been around for any length of time.

    1. Re:Not everybody is a slashdotter by dedazo · · Score: 5, Insightful

      Yeah, it's too bad he did not have the skill and nerve

      Not having a skill you might happen (I assume) to have shouldn't be cause for derision or ridicule. As for the "nerve", you've obviously never had a job at a company of any significant size. And we'll leave it at that.

      --
      Web2.0: I love when people Flickr my cuil and digg my boingboing until my google is reddit and I start to yahoo
    2. Re:Not everybody is a slashdotter by ozmanjusri · · Score: 4, Insightful
      And we'll leave it at that.

      You've got to admit the OP has a point though.

      The guy in TFA got sacked for using Windows.

      You Evangelists always say it's so easy to use, but if Windows is so easy, how come this guy needs L337 skills just to avoid being labelled a child pornographer and losing his job?

      Next time anyone says "No one ever got sacked for buying Microsoft", I'm pointing to this guy.

      --
      "I've got more toys than Teruhisa Kitahara."
    3. Re:Not everybody is a slashdotter by MrNaz · · Score: 2, Funny

      You mean like this:

      Staff Member: Boss, sorry I had an accident.
      Boss: Really? What happened?
      Staff Member: Well, I was playing around with a large toroid and I accidentally dropped the laptop into the center of the flux field at the same time as my hand slipped on the high current switch.
      Boss: Never mind, that could have happened to anybody.

      --
      I hate printers.
    4. Re:Not everybody is a slashdotter by TheLink · · Score: 3, Insightful

      Obviously the dept didn't value that man's reputation very much ("We stand by our decision" even after the court cleared him)
      Nor did they appear to factor all that in - the litigation costs.
      It sounds even more negligent given they passed that guy a non "clean" laptop in the first place.

      Anyway, often the problem is the downtime it takes to reimage the machine - esp if it's an old laptop and nobody has an "up to date" and pristine image.

      AFAIK normally nobody cares.

      Except in this case. I guess someone cared enough to start a witch hunt and this poor chap got the brunt of it.

      Someone screams "child porn" and suddenly it's like a mass shark frenzy with blood in the water.

      --
    5. Re:Not everybody is a slashdotter by C4Cypher · · Score: 3, Informative

      It's his job, he had about as much choice in the matter of operating system as he did about which computer he was going to use. The employee who got the sack is genuinely a victim. Management has some of the blame for going off half-cocked, but speaking as an IT professional, the responsibility is with the techs to not only ensure they hand out the good machines, but THOUGHROGHLY investigate an issue, especially concerning somthing as serious as child porn, before they throw the 'offender' under the bus. IT should be supporting, serving and protecting their users, not getting them prosecuted unjustly.

    6. Re:Not everybody is a slashdotter by dedazo · · Score: 2, Insightful
      If you hire on with a company as a lorry driver, and the brakes on your vehicle give way in the middle of taking a turn somewhere because of lack of maintenance, who are you going to blame? Yourself? You were hired on as a driver, not a mechanic. Or hey, let's use a closer analogy - if I hire you as a systems analyst and give you a Linux laptop with an unpatched version of SSH so that it gets r00ted after two days, who are you going to blame? Yourself? You were hired on as a systems analyst, not a system admin or a desktop support specialist.

      You "Evangelists" have the most amusing double standards and syncopated rationalizations.

      --
      Web2.0: I love when people Flickr my cuil and digg my boingboing until my google is reddit and I start to yahoo
  35. ..why Megan's law and "zero tolerance" is tyranny. by plasmacutter · · Score: 5, Insightful

    abuse including kiddie porn, one should ALWAYS be extremely cautious. Because whether he is innocent or not, people will never look at him the same way again. and this is why "zero tolerance" and "Megan's law" are tyranny.

    zero tolerance laws produce an extreme disincentive to properly and discretely investigate such things before slinging around an accusation which will ruin somebody's life.

    "Megan's law"s punish people after the official debt to society has been paid. If you are so sure pedophilia is an incurable, life-long disease, than imprison them for life or develop a house arrest program, but you can't simply toss these sex offenders out, put a big neon "child molester" sign over their head, and pretend they have the same rights, or are not in danger of vigilantism.

    --
    VLC FOR MAC IS DYING! IF YOU DEVELOP, PLEASE SAVE IT!!
  36. usually a witch hunt to fire high paid worker by GoodNicksAreTaken · · Score: 5, Interesting

    I'm involved in investigating things like this in my line of work. The argument I've worked on the most was that X worker was on eBay at 6am, and then there is a record of X on at 12pm, so we fired X for waisting time spending 6 hours of their day on eBay. Everyone of the cases I've helped investigate the employee was a few months from reaching a big pay increase or increase in retirement benefits.

    Their team also loves to hand us data that their forensic person has pulled from Windows without giving us access to the original drive. When questioned on how he obtained the data it was clear that their certified forensic expert didn't make a locked copy of the drive but logged in and poked around. The certification their contractor has is from IACIS http://www.cops.org/certifications

    None of them so far has gone to a judge AFAIK but I know my PHB has testified for an arbitrator and the arbitrator ruled there was insufficient evidence for a dismissal.

  37. I smell lawsuit by Dorsai65 · · Score: 2, Interesting

    Considering the series of screwups that led to this, I figure his next course of action is a lawsuit against the state - I'd sure as hell do it.

    Giving him a laptop without re-initializing it? They got them some dimtwitty IT folks there in Taxachussetts.

    --
    --- Asking inconvenient questions for over 30 years...
  38. My biggest paranoid fear by Anonymous Coward · · Score: 2, Interesting

    Whenever I end up with a new (always used to me) computer or laptop, the first thing I do is install Google Desktop, and more recently Picasa, and I scour the hard drive for jpg and other image files, and then I delete them. I am absolutely freaking paranoid about something like this happening to me.

    Whenever I have the opportunity, I like to wipe the hard drive completely and do a clean reinstall of all the software, but sometimes, you just can't do this, especially if you don't have the install disks. The reason I like to do this especially is because then I know what the machine acts and feels like under ideal conditions, and if the computer later slows down or acts sluggish, I can tell almost immediately if I've done some dumb cluck thing like downloaded some adware or freeware that turned out to be crapware.

    As a direct result of reading Slashdot and TechDirt, I also have locked down my wi-fi with a highly encrypted password. It's too bad actually, as I like the idea of open wi-fi, but I can't take the risk that some joker might use my connection to download porn or music, tied back to me and my IP address. Knock knock from the FBI - no thanks.

  39. Re:..why Megan's law and "zero tolerance" is tyran by John+Meacham · · Score: 4, Insightful

    Indeed. they should extend the indictment requirement required by the constitution for capital offenses to these sorts of crimes. Being falsely accused of molestation is much worse than being falsely accused of murder in terms of social repurcusions. (assuming one was eventually declared innocent of both).

    --
    http://notanumber.net/
  40. Re:..why Megan's law and "zero tolerance" is tyran by ScrewMaster · · Score: 5, Insightful

    Amendment 8 - Cruel and Unusual Punishment. Ratified 12/15/1791.

    Excessive bail shall not be required, nor excessive fines imposed, nor cruel and unusual punishments inflicted.


    Frankly, zero-tolerance doesn't seem like what the Founders had in mind, nor does torturing people you don't like for the rest of their natural (and now probably shortened) lives. Granted, I suppose this depends upon your interpretation of "cruel and unusual", but if this can be applied to sex offenders it can be applied to any group of people if you can manage to vilify them sufficiently.

    --
    The higher the technology, the sharper that two-edged sword.
  41. His arrest record will be enough by davidwr · · Score: 2, Insightful

    Unless it's sealed or marked "actually innocent," he'll have a hard time getting any job in any position of trust.

    Heck, he may even be barred from volunteering at his child's school as long as this information is public.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  42. Re:Lawyer: This, boys and girls, is why . . . by 1u3hr · · Score: 2, Informative
    If the intersection of child porn distributors and malware authors is larger than 0, the malware author may have written the malware to distribute the child porn. Or to keep it in circulation to gain later access to it, etc.

    That would really be insanely stupid considering the hysteria kiddie porn provokes. If he wanted to just store it, encrypt it and it's 100% safe. Stash it in a folder on a innocent DVDR; etc, etc. Anyone capable of creating malware certainly knows how to do this, and not risk having a FBI team break down his door next week.

    I think the guys who do trade kiddie porn would be extremely paranoid and cautious.The dumb ones would have been caught by now. The idea that these guys are snickering while sending illegal porn to innocent people is as silly as those characterisations of terrorists as "they hate us because we're free". I believe the guy in this case was likely innocent, I think he was just collateral damage from some pay-per-click scam. The porn in his cache was just a side effect of sending his browser around in the background to earn a few cents.

  43. Re:..why Megan's law and "zero tolerance" is tyran by Belial6 · · Score: 5, Insightful

    Yes, Megan's law is obviously intended to incite mob 'justice'. Executions are expensive and socially messy. It is much simpler to 'think of the children', publish the addresses of sex offenders, and hope that some other sicko takes care of the problem for you.

  44. The Truth (TM) by Gary+W.+Longsine · · Score: 5, Interesting

    Firing people based on things that happened on an infected PC is the modern equivalent of shouting burn the witch!

    The truth is that this can happen. The truth is that so many corporate desktop and laptop systems are p0wn3d by th3m that it isn't even funny.

    The truth is that event logging on these networks and systems are insufficiently detailed as to demonstrate conclusively which actually happened. Any logging that does take place on a system probably can't show you wether the user was responsible, or if an automated program pretending to be the user was responsible. Any corporation that gives a users a typical Windows system and then holds that user responsible when something untoward happens on that system ought to be opening themselves up to a lawsuit.

    The truth is that even the the lawyers who advised not to talk about the reasons for dismissal don't recognize this. They prohibit discussion of the details regarding the dismissal of the employee for reasons entirely unrelated to the issue of being entirely unable to conclusively substantiate any accusations which would be made. (It's standard dismissal policy at all of the Fortune 500 to not give any reason). In general, employees, managers, lawyers and judges are completely unprepared to assess the details which would expose the fact that nobody can actually prove that this unfortunate person was probably the victim of some botmaster's prank. People should be surprised that this doesn't happen more often.

    That said, there are things one can look at to determine what was *likely* to have happened on that box, and one can assess to some degree what things were relatively more likely than others. If the box was running malware, though, the most likely outcome is that one cannot demonstrate beyond a reasonable doubt that the user was guilty. However, one can, in some cases, demonstrate innocence, by showing, for example, that a given download occurred when the user was away from the keyboard.

    It's important to note that the converse is not true. The malware can easily mimic user behavior by performing user style tasks only when the user is logged in. Malware may, for example, have incentive to operate only when a real user is logged in, because certain operations in certain environments are unlikely to succeed if the user is not logged in (being stopped, and identified as likely malware behavior by a 3rd party heuristic detection system, for example.) Malware often does change its behavior based on instructions from the outside, based on the day or the time, based on all sorts of things, and may not behave the same in an isolated test lab as it does "in the wild" so it can be difficult or impossible to demonstrate the full capability of a given strain, even if you have a copy of it.

    --
    If you mod me down, I shall become more powerful than you could possibly imagine.
  45. Its called "the greater good" by voss · · Score: 4, Insightful

    As long hes a decent guy...

    By bringing it to his attention
    1) You save the company a competent employee
    2) Discourage him from doing it again
    3) You demonstrate your personal loyalty to an up and coming executive.

    The question you have to answer, is did the employees actions harm the company
    in a non-trivial manner? I assume the answer is no. There are many things users
    do that waste time, most of which are trivial and do not actively cost the company money.
    If the cost of stopping these trivial things exceeds the benefits then you tolerate it and move on.

    I would be more concerned about the use of a "firewall/lan bypass device" than the content itself.

    1. Re:Its called "the greater good" by Henry+V+.009 · · Score: 5, Insightful

      4) You own him until he leaves the company.

    2. Re:Its called "the greater good" by binaryspiral · · Score: 2, Interesting

      He owns him until he wipes the laptop... then all evidence is gone.

      After that, it's your word against his.

    3. Re:Its called "the greater good" by vuffi_raa · · Score: 2, Interesting

      Ehm.... Not really: exchange the harddisk with a spare. Document the process with pictures and serial numbers. for what purpose- that would not hold up in court- you would need to provide chain of custody- otherwise you could be liable for any number of things by both the company you work for and the person who was surfing porn.
      I work in this field- extracting metadata and tracking chain of custody on relevant electronic documents for court use- when someone who is not informed in the field tries to do something like this it usually ends up in the court throwing out evidence.
  46. Re:..why Megan's law and "zero tolerance" is tyran by bluefoxlucid · · Score: 4, Insightful

    We had an earlier article about a guy who was listed as a sex offender for raping a 30-40 year old woman, and when he moved a crazy neighbor killed him in a week "because I want my daughter to be safe." Preemptive removal of potential child rapist.

    Note his daughter was 11. He saw him on the sex offender list and thought "kiddy fucker" immediately, not "rape" or "mild sexual harassment" (which can get you there too, with a little work).

  47. Re:Lawyer: This, boys and girls, is why . . . by bluefoxlucid · · Score: 2, Informative

    Lawyers represent the guilty because A) you may be guilty but we need to make sure your sentence is reasonable (a lot of people would like to hang a man for showing a kid his penis); and B) You might actually not be guilty.

    In old country, court used to mean you had no representation (lawyer), the prosecution made whatever wild claims it likes, and then they lock you up. End of story. Guilty or not, you get a fighting chance BECAUSE the alternative is we send men in black to your house and throw you in jail after a cute little show just because we don't like you.

    Think Salem Witch Trials, nobody had any real defense, all accusations were absolute indications of guilt. This is what happens when you take away the right of the (presumed) guilty to defend themselves.

  48. Sue, sue sue. by swschrad · · Score: 2, Insightful

    Sue, sue sue. Sue. this was malfeasance on the part of the IT folks who were supposed to have sanitized the laptop (most shops reimage them) and a kangaroo court in all respects.

    Sue the state for full re-employable reinstatement, back this and that, damage to reputation internationally, pain and suffering, cracks in the sidewalk, and anything else.

    --
    if this is supposed to be a new economy, how come they still want my old fashioned money?
  49. Re:Lawyer: This, boys and girls, is why . . . by jc42 · · Score: 4, Informative

    Personally, I'm skeptical about the idea of malware that secretly downloads and hides kiddie porn--why would the malware developer do that?

    Why would it matter whether you believe someone might have a motive? I don't understand why people might commit all sorts of crimes, because I'd never do that. But some people commit those crimes anyway. Lots of people have motives to frame others for crimes.

    In any case, on to methods. I have a demo on my web site of how to do "preloading" in javascript. Is javascript enabled in your browser? If so, my demo shows how I can create a web page that quietly downloads images from arbitrary URLs, without showing them to you. This may be used to load those images into your browser's cache. It has valid uses, such as to speed up subsequent downloading of other pages from my site which use those images. But I can just as easily fill your browser's cache with porn. Unless you know how to scan your browser's cache (or have the sense to purge it frequently), you'll never know what I've done to you. My code (actually my web server) also tells me your IP address, which I can use to send the authorities in to examine your browser's cache.

    I'd be willing to testify in court how easy this is. And give the court a copy of my code (though they could easily download it from my web site ;-).

    And yes, I usually do browse with scripting disabled. This was typed into a Firefox 3.0 window, which has the NoScripts extension installed. My demo code won't work against me.

    --
    Those who do study history are doomed to stand helplessly by while everyone else repeats it.
  50. the child porn was not visible to naked eye by commodoresloat · · Score: 2, Funny
    From the summary:

    Computer forensic analyst Tami Loehrs, who spent a month dissecting the computer for the defense, explained in a 30-page report that the laptop was running corrupted virus-protection software, and Fiola was hit by spammers and crackers bombarding its memory with images of incest and pre-teen porn not visible to the naked eye. Of course, there's a lesson in this. If you're going to surf for porn and you actually want to see it, you must clothe your eyes.
  51. Re:Lawyer: This, boys and girls, is why . . . by Jah-Wren+Ryel · · Score: 2, Interesting

    I'm skeptical about the idea of malware that secretly downloads and hides kiddie porn--why would the malware developer do that? Because the original author of the malware is duking it out with his competitors and they have compromised his system enough to replace the periodic download and display of regular 'pornado' images with an accelerated rate of downloading a whole new set of images. Essentially a denial-of-service attack aimed at both the bots and the bots' servers.
    --
    When information is power, privacy is freedom.
  52. of course he won't get his job back. by DragonTHC · · Score: 2, Interesting

    His employers can never be certain that it wasn't him, despite professional computer security experts testifying to the fact.

    This is what happens when you assume your system is protected.

    It certainly wasn't his job to ensure the machine had functioning anti-virus software. It was some other person's job, and they didn't do it.

    --
    They're using their grammar skills there.
  53. Re:..why Megan's law and "zero tolerance" is tyran by tompaulco · · Score: 2, Insightful

    I say castrate the pedophiles
    Just to clarify, do you mean the dictionary definition of pedophile, ie, an adult that likes to molest children, or the legal definition of pedophile, ie, someone who is 18 or greater and is unfortunate enough that their sexual partner is only 18 minus iota and/or someone who likes their 30 year old wife to wear pigtails and short skirts.

    --
    If you are not allowed to question your government then the government has answered your question.
  54. 40 sites per minute? by darkvizier · · Score: 2, Insightful

    Why write malware, they could sell that!

  55. 'dd' is not the Linux counterpart to ghost by Burz · · Score: 2, Insightful

    The 'partimage' program is. You could also check out 'g4l' which is the same idea.

    In any case where you have 80+ GB partitions that are mostly empty, which is most of the time, dd results in wait times (and space requirements on the destination) that are simply unacceptable and a huge waste IMO. The drives will also tend to become rather warm and stay that way for too long.

  56. I don't put it past the hackers to infect with CP by elucido · · Score: 2, Insightful

    It just seems immensly more likely that he got infected by malware from surfing porn sites, than getting infected by porn from having malware. If there are hackers evil enough to write viruses which literally destroy peoples hard drivers, I don't put it past this breed of hacker to write viruses to infect peoples computers with child porn.

    At this point, having child pornography on your computer is like being infected with a virus, only this virus is child porn. The only way to get it off is to basically reformat your drive. If you were smart your drive was encrypted and that reformat will be the end of it, and if you aren't so smart then there could be traces of child porn (invisible to the naked eye) which could still be on your machine.

    The point is, this guy probably deleted whatever child porn the malware sent to him. Thus it was invisible to the naked eye. Yet that doesn't change the fact that his computer still legally contained the 1s and 0s in a form which is still illegal.

    So while I do think there are pedophiles, I don't think this guy is one of them. And this is the sorta situation that our ridiculous child porn laws create.
  57. Maybe he deleted it. by elucido · · Score: 3, Insightful


    Maybe it was not visible to the naked eye because he deleted it. I don't know, but I can easily see a situation where some script kiddie creates a bot which trolls chatrooms and which sends random users child porn and then sends the feds after them.

    It probably would not take a lot of time to write such a bot, or to trick the typical horny middle aged male to accept a picture of what they think is an adult woman, only to find out later it's child porn. But whats he supposed to do? his computer has been infected.

    So now he has to reformat his entire computer. I can see this being the new WinNuke.

  58. Legal "slam dunk"? by Mathinker · · Score: 2, Informative

    There's no such thing as a legal "slam dunk". The only person who will certainly make money from suing them is the lawyer himself (unless he takes the case on a percentage-of-settlement basis, of course).

    This whole case would seem to hinge on one forensic expert's testimony, so if I were a lawyer, I'd be a bit leery about considering this an open-and-shut case.

    Still, I wish the guy a lot of luck in setting a precedent that you can't be held accountable in all situations for what your computer does.

    I'm not sure if the guy wasn't lucky that the employer went immediately to start criminal proceedings --- that's the only reason he has a valid forensic analysis of the computer to show. In an ordinary instance of firing, the computer would almost certainly have been reimaged before he could sue to have it analyzed.

    It seems there's room for a law that in cases like this, the employer has to get a forensic snapshot of the computer involved before reimaging it (or be responsible for destroying evidence in any subsequent discovery proceedings).

    1. Re:Legal "slam dunk"? by rtb61 · · Score: 4, Insightful
      Now looking at the legal side is what makes it really interesting. While the end user certainly has a defence, as the computer was infected and was a company/government controlled computer with security features and updates supposedly set and typically the end user has specifically limited (non-administrator) access and control, the network/computer administrator should now be investigated.

      For company/government controlled computers people should not forget that network/computer administrators can quite readily take over users computers and use them for what ever nefarious activities they want to and then blame the poor end user. In this case the administrator really and I mean really fucked up, I mean they found the child porn but missed the viruses et al, what, does the admin get such of kick looking for porn on there users computers that they forget to fulfil the security functions that they are actually paid for.

      While the end user is certainly in the clear, the admin is in real trouble as now somehow they have to prove their innocence as the actual administrator of the infected (by whom ?) computer. Also the admin should be subject to criminal negligence charges as they bore false witness against the user as the admin should have detected the viruses et al prior to bearing witness against the end user, so some really serious stuff and the end user and their lawyer can really go to town on them.

      So the real question for the future is, is it the end user's computer or the system administrator's computer, who has the greater control and hence who has the greater ownership? Running a far more secure OS like Linux will certainly do more to protect computer administrator's from future prosecutions, something to really think about.

      --
      Chaos - everything, everywhere, everywhen
    2. Re:Legal "slam dunk"? by TheLink · · Score: 5, Insightful

      How about stop going around being so trigger happy about sacking and prosecuting people for such "crimes"?

      How about actually following the money trail? Are the malware authors and people putting those images up really doing such stuff for free? Someone must be paying for those ads, the creation of child porn sites etc.

      There are more serious crimes than possession of some image file, especially an image file that is likely to be downloaded by malware.

      Lastly, Linux isn't going to help. The real problem is mass hysteria - lots of people suddenly turning their brains off when they hear a trigger phrase. Sure child porn is bad, but if you really want to fix it, follow the money to the bitter end. Not go around starting stupid witch hunts. The way they do things, I figure it's just a tool for cynical manipulation of a mindless populace.

      --
    3. Re:Legal "slam dunk"? by hey! · · Score: 4, Insightful

      How about stop going around being so trigger happy about sacking and prosecuting people for such "crimes"? For the same reason for any zero tolerance policy. If you didn't fire somebody when something breaks, you'd be responsible for fixing it.

      When something bad happens, and you fire somebody you are, by the strictest interpretation of the words, "doing something about it." It might not be anything effective, but if you don't know what is effective, then "doing something" sounds a lot better than "doing nothing."

      Out of all the ineffective ways of of "doing something", firing somebody is the most attractive, because it localizes the blame in a person who is, or at least in short order will be, outside the organization. It is the solution that shifts the most blame. Since the person is outside the organization, he can't defend himself.

      Unless he lawyers up.
      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
    4. Re:Legal "slam dunk"? by Lumpy · · Score: 2, Insightful

      actually the answer is that the person fired needs to sue the hell out of the company and walk away with 10 years of salary.

      Smacking the company hard like that will discourage the abusive behavior by it's management.

      --
      Do not look at laser with remaining good eye.
    5. Re:Legal "slam dunk"? by KillerBeeze · · Score: 2

      A few years ago. My brothers computer was infected by a root kit that kept popping up kiddy porn at random and every once in a while it would pop up an ad for a virus/adware company. I tracked down the url to a Russian isp. These are just tactics some use to get you to by there removal tools. Extortion is what I call it. This poor guys problem is that his employer didn't do there job in investigating the complaint thoroughly. If he worked for a corporation , he would surly collect millions, but I understand that he worked for a department of the state of Massachusetts which limits employees right to sue. The state needs to update there policies and procedures on this type of investigation, so it won't happen in the future.

    6. Re:Legal "slam dunk"? by tdandh · · Score: 2, Informative

      This whole case would seem to hinge on one forensic expert's testimony, so if I were a lawyer, I'd be a bit leery about considering this an open-and-shut case.


      Actually, this was backed up by two forensic examinations by the AG's office. FTA:
      Loehrs, who spent a month dissecting the computer for the defense, explained in a 30-page report that the laptop was running corrupted virus-protection software, and Fiola was hit by spammers and crackers bombarding its memory with images of incest and pre-teen porn not visible to the naked eye.

      Two forensic examinations conducted by the state Attorney General's Office for the prosecution concurred with that conclusion, Wark said.
    7. Re:Legal "slam dunk"? by kesuki · · Score: 3, Insightful

      "Lastly, Linux isn't going to help"

      Linux would have helped, instead of having a sophisticated network system where you need a valid login/pass to get access to the updates for your computer system... all the updates needed come from trusted repositories, no password or login needed, oh and, if the end user isn't given permission to install software, instead of having a dumb script on the system that logs in to a server, there can be a central server that runs a script that logs in as the admin user on each system to force updates, without having to create a new login/pass every time a new user grabs a linux laptop.

      linux doesn't fix the dancing pigs problem, but by being a inherently secure platform, remote administration isn't a joke feature thrown in as a 'buzz' word to movie more copies and try to avoid loosing important corporate customers to more secure products.

      Linux would have solved All the problems this company ran into. As a matter of fact, i've run across compromised windows systems where even after a format with a DOD level file system erase were automatically reinfected by malware that had corrupted the bios of the motherboard. the only thing that worked, was switching those machines to linux, and reflashing the bios (because it kept having problems with stability until the bios was reflashed)

      and if you think, well security software must have caught up by now, the sad truth is that about 3% of malware and rootkits released in 2006 are Actually protected against by security suites. the problem is, the way windows lets any administrator process to re write almost any file instantly, and any file with a reboot.

      once the software infects, disinfecting a system is very hard, doing a complete wipe, and flash of all programmable chips (optical drive, the main bios, there are even viruses that can infect the memory of a HDD's internal controller, which isn't normally accessible to the end user) a lot of people just throw computers away when the malware comes back, after a format.

      windows really really pisses me off more and more everyday because of how the way windows was designed, despite decades of end user knowledge in developing secure UNIX systems for college campuses, all because windows was completely managed by greedy, profiteers who didn't care a whit about how things were designed as long as they were number one, and had no serious competitors.

      oh and hey, even if the guy was running linux, and it wasn't auto updating, since it was a desktop and not a server, it probably wouldn't have run any of the popular programs hackers who target linux target.

  59. WHY WOULD HE WANT HIS JOB BACK? by Jane+Q.+Public · · Score: 2, Insightful

    Would you?

  60. Re:Not thinking of the children by Belial6 · · Score: 2, Insightful

    I think your sarcasm detector is off a little. The reason that 'Think of the children' is in quotes is because we all know that what it really means is pander for more votes.

  61. Someone wanted to get him fired. by elucido · · Score: 3, Interesting


    Look, we are here on slashdot discussing this as if we don't have the technical skill to use CP as a weapon to get people fired. It's really simple write a bot, and then upload your enemy list in encrypted form to that bot server in whatever location and have that bot send a bunch of child porn to all the people you dislike.

    9 times out of 10, most men will accept any photograph of what they think is a hot chick, not knowing what it is before they open it, it could be child porn, it could be a virus, they don't know. The problem is once the child porn is on their computer then they get reported and their computer gets checked for child porn.

    They then undelete everything and find that one photo was on the computer for a split second.

    This alone is enough to get a person fired. Personally, in my opinion, unless a person has LOTS of child porn, I don't think it's right to report them over one image found somewhere on their drive.

    If we go by those standards then only the most paranoid of internet users will be able to avoid being infected with child porn. The situation is messed up but I wont label pedophile so easily.

    In my opinion you did the right thing. It's becoming way too easy to label someone a pedophile, at this point any hacker can get just about all of their enemies labeled a pedophile by simply hacking into their enemies computers, uploading the child porn, storing it in some secret hidden directory they can't see, and then alerting the proper authorities.

    It's fucked up, but just like there were people writing viruses which would destroy computers, there will be people who spend all their time trying to destroy peoples lives using child porn as a weapon to get people mislabeled into a pedophile.

    If all it takes to get labeled a pedophile is to be caught with child porn on your computer, how hard will it be to make you look like a pedophile?

    You probably wont have to look for child porn or search for it or anything, I doubt the authorities check search records in these cases to see if the person was searching for child porn, they probably just see the pictures on the computer and scream pedophile.

  62. You're as bad as they are by samjam · · Score: 2, Insightful

    You're too lazy, just like they were, you want (yourself?) and others to act on someone elses information that you can't be bothered to confirm, and then have them harassed.

    Thats the kind of behaviour that gets (got) the wrong person and ruins their life.

    Sam

  63. Insanity by Yvanhoe · · Score: 2, Funny

    "We've been advised by our attorney not to talk to you."
    When lawyers seems a safer medium for understanding between people than regular speech, there has to be a problem somewhere.

    --
    The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
  64. Can a CD containing Sony's Rootkit do this? by ancient_kings · · Score: 2, Interesting

    I'm quite sure there are plenty of those old Sony Music CD's with those infamous rootkits floating around. What happens when one of these Music CD's are inserted in a computer? Can it still infect the computer and allow backdoor worms/viri get in and do to your computer essentially what happened to this guy? That's really frightening if true....

  65. Re:You're not entitled to the truth! by ArsenneLupin · · Score: 2, Funny

    I protested my innocence, and begged to be told what they thought I'd done. I was offered one chance: they'd tell me, but then they'd go public with it. Maybe they thought I stole something. Maybe they thought I'd sexually harassed someone. Maybe they thought I'd been surfing porn. Maybe my boss got scared that I was going to stop covering for her and made something up. Any of which I could mount a defense against. But some of them could have involved criminal charges as well, which scared the hell out of me, because I don't fully trust the criminal justice system. And maybe they were going to accuse me of downloading kiddie porn, and it's impossible to be exonerated of that: even if the court says "not guilty", your life as you knew it is over. I couldn't take that chance, so I passed. That's where you strike back with the same weapons. Go to police, file charges that you saw kiddy porn on your manager's screen when you happened to walk in for some question. When asked whether you have any more evidence, say "unfortunately not", you were fired before you could gather any / find other witnesses.

    That will probably be too flimsy to sue, but you'll get a nice receipt for your deposition which you can trot out if ever any prospective employer ask why you were fired.

    Turnaround is fair-play.

  66. Back to Salem? by Archtech · · Score: 3, Insightful

    I'm seeing a fascinating parallel with the old-time witch trials. People who didn't know much about anything, but were filled with fear and confusion, were always happy to find a scapegoat. Nothing cheers you up as much as kicking the shit out of Bad People. If you can hang them, or burn them alive, that's a bonus.

    So these regular folks would notice that somebody (often a lonely old woman) acted a bit oddly. Instead of using a bit of imagination and charity to understand why, they leaped to the conclusion that she was consorting with the Devil. Just as some Native American tribes got their fun from torturing prisoners to death - life was DULL in those days - torturing and killing a witch just made their year. (Another possible parallel is that those who informed on "witches" often did a deal with the state whereby they split the victim's - often considerable - possessions between them).

    Nowadays it's not quite respectable to torture people or burn them alive (unless they're foreign Bad People). But these here pedophiles... we should string 'em all up.

    There seems to be a type of mentality that doesn't even want to understand how nasty pictures can wind up on someone's laptop, without the owner's knowledge or consent. It's just a great chance to get someone down and kick him, kick him, kick him...

    --
    I am sure that there are many other solipsists out there.
  67. danger will robinson by Quadraginta · · Score: 2, Insightful

    Maybe your dad is better at social engineering. He may not need to hack your computer to hack your head.

  68. The man was EXONERATED by Relayman · · Score: 4, Insightful
    This story excerpt infuriates me. The story is about how the man has been exonerated of downloading child porn. The summary describes events that happened years ago; the story is the finding that he is innocent (and will probably receive several million dollars in damages from his former employer).

    The point here is that an innocent man has been through hell because IT screwed up and didn't set up SMS correctly so his computer had numerous security holes. The summary doesn't convey this, of course, resulting in the stupid (and, actually, offensive) comments from those who assume that he was guilty based on the summary. Folks, this is a real story about a real person, not something from xkcd. You should not be so quick to judge, especially when you didn't RTFA.

    The guy might be rotting the the slammer somewhere if it weren't for his wife who rounded up the competent resources to find out what really happened.

    I am infuriated because of the occasional poor summary posting that Slashdot seems to be proud of. If I see another story about an air-powered car again, I am going to puke and stop reading.

    --
    If I used a sig over again, would anyone notice?
  69. Now knows his former "friends" never really were - by Frank+T.+Lofaro+Jr. · · Score: 2, Insightful

    "I hope to recover my reputation, but our friends all ran."

    Real friends wouldn't assume someone is guilty and shun someone - especially on evidence so flimsy.

    Real friends would try to assume someone was innocent.

    Real friends don't run like than. (If he was convicted in a fair trial that would be different).

    Bet if (when) he wins a multi-million dollar judgment his former "friends" will be back!!!

    "Oh, we hate perverts, we were just being careful, didn't want our kids hurt, or our reputation harmed, etc, I'm sure you understand, but since a court has ruled in your favor we know this must be the very rare exception where someone isn't guilty...

    Oh, and by the way, I need $80K for a downpayment, and you got $80M...."

    --
    Just because it CAN be done, doesn't mean it should!