Slashdot Mirror


Judge Won't Lower $5M Bail For Jailed SF IT Admin

snydeq writes "San Francisco County Judge Charles Haines has denied Terry Childs' motion to reduce his $5 million bail, alluding to 'public security concerns,' according to Richard Shikman, who is representing Childs in court. The ruling comes in the wake of a recent decision to drop three of the four changes that have been levied against Childs, who has spent the past 14 months in jail. The fourth charge — that Childs violated a California statute regarding illegal denial of service for the San Francisco FiberWAN — has been called into question by those closely monitoring the case. As a point of comparison, the San Francisco Felony Bail Schedule lists a $1 million bail for the most serious crimes, such as sexual assault of a child, aggravated arson, or kidnapping for ransom. Prosecutors have argued that the bail is appropriate because, if released, Childs could cause damage to San Francisco's network."

40 of 429 comments (clear)

  1. Only if... by evil_aar0n · · Score: 5, Insightful

    He's a danger to their network only if no one has yet changed the passwords on the routers and other equipment.

    --
    Truth, Justice. Or the American Way.
    1. Re:Only if... by Zen+Hash · · Score: 5, Insightful

      "The defendant's withholding the passwords caused DTIS to be denied administrative access to the FiberWAN, which constituted a denial of computer services," Judge McCarthy wrote.

      The defending not giving up the administrative passwords for his former employer's network didn't cause anyone to be denied administrative access. Their own incompetence and lack of planning were responsible for that.

      This whole thing is ridiculous, yet it's still not over... The people who need to be held accountable are the managers responsible for allowing such a major fuck-up to occur with something as critical as they claim.

      --
      Here I sit, all broken hearted.
      Came to poop, but only farted.
    2. Re:Only if... by HangingChad · · Score: 4, Insightful

      He's a danger to their network only if no one has yet changed the passwords...

      No kidding. Are those routers and servers just running on on the same settings they were set on 14 months ago? No one has run updates? Changed any settings? Heck, in a lot of places half that equipment would have been replaced in a year. Any reasonably competent admins could have secured that network before now. Most routers have a way of resetting the root password, even if that means taking them off-line a few at a time and reprogramming them.

      This is insane. 14 months in jail. Come on San Francisco, time to extract your head out of your boyfriend's ass.

      Hopefully his lawyers can appeal to a judge with clue before this stupidity goes any further.

      --
      That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
    3. Re:Only if... by evil_aar0n · · Score: 4, Insightful

      You would think, by now, that someone would have come in and cleaned up the network and battened the hatches. After all the publicity this has gotten, if there's _still_ a hole for Child's to access, then they deserve whatever skull-fucking he can give them.

      I know these are government employees, but, as I said, with the publicity surrounding this one, they might have justified breaking the piggy bank to pay for a real network guru to give it a once-over, at least.

      --
      Truth, Justice. Or the American Way.
    4. Re:Only if... by Svartalf · · Score: 5, Insightful

      What makes you think that he'd do that if let loose? If it did get screwed up, I'd think he'd be the first to receive blame at this point. Unless one has a very, very good escape plan that is sure-fire and won't fail, I would think that unless they're completely nuts, a person in Childs' position is not going to go at them for "revenge".

      They're more in danger from other threats than this man at this point. To put it more succinctly: The risk is imaginary; the DA's whipping up fantasies that're just plausible enough that the Judge is willing to sign off on them. He didn't do a denial of service. He didn't intend to do so, as best as can be determined. He followed their internal security policies per passwords, even.

      --
      I am not merely a "consumer" or a "taxpayer". I am a Citizen of the State of Texas
    5. Re:Only if... by whoever57 · · Score: 4, Insightful

      What makes you think the network is secure enough that unchanged passwords are the only vulnerabilities?

      Since one can never prove that a network is secure, what are they going to do: lock him up forever?

      --
      The real "Libtards" are the Libertarians!
  2. Witchcraft by pem · · Score: 4, Insightful

    Anybody who knows about computers has to be kept away from them, else they might cast spells on the rest of us.

    1. Re:Witchcraft by smartr · · Score: 4, Insightful

      Why pay attention to the 6th and 8th amendments of the Constitution when there are witches? No one is safe from their power!!!

    2. Re:Witchcraft by theCoder · · Score: 4, Insightful

      While it's lots of fun to make fun of right wing crazies, it should be noted that this case is taking place in San Francisco, California, one of the most liberal places in the country. Just further proof that stupidity knows no political or ideological boundaries.

      --
      "Save the whales, feed the hungry, free the mallocs" -- author unknown
    3. Re:Witchcraft by dave562 · · Score: 5, Insightful

      It doesn't matter. He messed with the man. That is where he messed up. Legal or not he will eventually get his day in court and if he hasn't done anything illegal he will be exonerated. He will never get the last fourteen plus months of his life back. He will never have not gone to jail. The point I was trying to make is that if someone wants to make a point and mess with the government, they need to be ready to deal with how ugly it will get. That's the unfortunate reality of the country that we live in.

  3. No confidence by AlHunt · · Score: 5, Insightful

    > Prosecutors have argued that the bail is appropriate because, if released, Childs could cause damage to San Francisco's network.

    It sounds like they have zero confidence in whoever is now in charge of securing their network.

    --
    1 in 4 Maine children in struggle with hunger.
    1. Re:No confidence by digitalunity · · Score: 4, Insightful

      No, my point was kind of that there is an implicit trust between all employees and their IT personnel. The IT people have all the keys to all the doors, they can know anything about your company, even that which should be restricted to the highest personnel. Refusal to divulge root passwords to those who shouldn't have them isn't a very good reason to throw someone in jail, even if it IS a city government network.

      Instead of holding this man, they should congratulate him for bringing to light the colossal insufficiency of their manpower in this department and the total negligent lack of redundancy in key positions. The fact that they got into this position at all, with only a single person having the root passwords for key infrastructure is a sign of the departments lack of intelligible oversight.

      --
      You can't legislate goodness. Let each to his own destiny, by will of his freely made choices.
  4. Sick of this by nickdwaters · · Score: 4, Insightful

    The incompetence of the legal system has no lower bound.

  5. Judge doesn't quite understand by phantomfive · · Score: 4, Insightful

    I don't think the judge understands the nature of network security, which is understandable since he isn't an IT guy......but no doubt the prosecuting attorney was pushing to distort the issue to make him look as dangerous as possible. What if he is not guilty, are they still going to keep him in jail because he might be dangerous? Furthermore, if he DOES damage the network, can't they just charge him for that crime at that time? It's not like he can cause irreparable damage, as murdering someone might.

    One thing I don't understand is why this guy doesn't exercise his right to a speedy trial. He's already been punished enough considering all the evidence I've seen suggests he is innocent. Maybe he is getting some kind of zen experience living in jail and he actually likes it or something. From what I've heard from some sysadmins, living in jail can't be much worse than that job.

    --
    Qxe4
    1. Re:Judge doesn't quite understand by Archangel+Michael · · Score: 5, Insightful

      You're right, and you're wrong.

      The Judge doesn't understand, he is not paid to understand.

      What the Judge does understand is that letting this guy out of jail on BOND is dangerous to SF political types running the city. This is far more dangerous, in their mind, than a child rapist, mass murderer or other heinous criminal, hence the steep bail.

      And the city wonders why nobody wants to visit there any more.

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
  6. What happens if he beats the rap? by jayme0227 · · Score: 5, Insightful

    Prosecutors have argued that the bail is appropriate because, if released, Childs could cause damage to San Francisco's network.

    So if the 4th charge is dropped and he is freed, can they keep him jailed? He could, at that point, still cause the same damage that he can now.

    --
    But then I realized the cable was blue, so I only gave it one star. I hate blue.
  7. Seems excessive by tsotha · · Score: 5, Insightful

    I think the problem is they know he's not going to be convicted of anything in the end. So the judge is trying to send a message to people who might be inclined to do the same thing.

    "We can get you. We don't need to actually convict you, either. We can get you anyway."

  8. Re:too easy by Shikaku · · Score: 4, Insightful

    Prosecutors have argued that the bail is appropriate because, if released, Childs could cause damage to San Francisco's network.

    Yeah, so can anyone who's competent with networking.

    Just admit that he was presumed guilty before a trial you incompetent fools. You all are making yourselves look more and more like idiots, and the Childs is laughing his ass off in jail.

    Oops shouldn't have said that out loud, I might be labeled a terrorist.

  9. Re:too easy by Anonymous Coward · · Score: 5, Insightful

    I'm pretty sure he isn't laughing his ass off while sitting in jail after 14 months. Although there's a good chance he will be once this is done, and he's won his lawsuit against the city and gotten the DA disbarred.

  10. Disagreement by robpoe · · Score: 4, Insightful
    Terry Childs played the "battle of wills" game and lost. He's not the innocent child that some are alluding to - he did willfully not give the passwords out.

    When I was a corporate IT guy (about 3 years in the middle of about 16 years as a consultant), I took responsibility over a large part of the network in a multi facility health care business. This wasn't life or death stuff, but network outages did cause problems with appointments and general "face" of the corporation. When I came on board, the network was down a lot. No change control, no "chief" in charge of the network, and about 9 people mucking with stuff constantly.

    I put my job on the line, in exchange for FULL control of that system (It was a 85 server Netware + Groupwise environment). The first thing I did was take *everyone's* admin away, removed "admin" from supervisory rights to the tree. I then doled out the appropriate levels of access to the security team (read new users, password resetters), put in a hidden OU with a tree supervisor in it and then wrote the "master" admin/login information down. Lightly, in pencil. Folded it up, put it in an envelope with a tamper seal, that went into another tamper evident envelope and that went into the safe. Every month or two I changed the password and replaced the envelope.

    That was in case I died, they could easily get in. That is what Terry should have done. Then it wouldn't have come to this - he might have gotten sacked, and/or lost control over what he considered to be his "creation" -- but he wouldn't be rotting in jail....

    --
    = Grow a brain...
    1. Re:Disagreement by Pitr · · Score: 5, Insightful

      Your reasoning is very short sighted. Yes the "in case of bus" envelope is important, but if you've ever actually been a sysadmin, you know you're the blame guy. There are always idiots up the corporate chain that will blame you for anything technical even if the problem stems directly from them not following your instructions, or otherwise doing something stupid.

      That aside, this isn't about you. I know it's hard to imagine, but try to bear with me. It goes like this:

      Maybe he's a dick, but that doesn't matter. What matters is that WHAT HE DID WAS CORRECT! You do NOT give the "bus envelope", password or whatever, to some guy, the janitor, the mail boy or whoever, you give it to one of a small number of people only. It may be handled by a secretary or other assistant, but opening said envelope would be grounds for immediate dismissal, as would revealing that same password info to any of the afore mentioned individuals without appropriate "clearance" or what have you.

      So here's the situation, your boss, who may or may not have the right to know the password, with some people in the room who DEFINITELY aren't on the access list demands the password.

      Situation #1:
      You refuse to divulge sensitive info in front of inappropriate individuals because 1) it's actually your job, and 2) if you do so, you can be held liable for any damage done as a result. You are arrested immediately. Happy fun.

      Situation #2:
      You give up the password immediately, someone brings the system to a crashing halt by incompetence, and you are arrested immediately because it's obviously something you did. Happy fun.

      Sure, an envelope is a good idea, but there wasn't one, and that's not his fault, that's a management oversight. Even if this guy's difficult, or abrasive or whatever, he didn't break anything, and was willing to go forward with relinquishing the password, just on very specific terms. If that's a reason to spend over a year in jail, then we better start handing out life sentences for J walking, because unlike not giving up a password, J walking could actually harm someone.

      --

      --Not to be worried, Pitr fix.
    2. Re:Disagreement by Anonymous Coward · · Score: 4, Insightful

      He's not the innocent child that some are alluding to - he did willfully not give the passwords out.

      He did willfully not give the passwords out TO PEOPLE HE DIDN'T KNOW, AND DID NOT KNOW IF THEY WERE AUTHORIZED TO HAVE THE PASSWORDS.

      Sheesh.

      If you're a lowly private in charge of highly classified information, even if a colonel comes along, you're not supposed to hand over the highly classified information without determining that the colonel is authorized to have it. Even if the colonel yells really loud.

    3. Re:Disagreement by tinkerghost · · Score: 4, Insightful

      He's not the innocent child that some are alluding to - he did willfully not give the passwords out in accordance to the security policy in effect at the time he was ordered to do so.

      Fixed that for you.

      I have to ask you - if the facility manager demanded that you tell him the password while standing in the middle of a conference room full of people you don't know and with a live conference call going on would you have done it? I doubt it. You might have directed him to the envelope in the safe, but more likely you would have pointed to the security policy in effect and told him you can't do that, but if he would like to make a written request through your boss then an arrangement could be made.

      Then it wouldn't have come to this - he might have gotten sacked, and/or lost control over what he considered to be his "creation" -- but he wouldn't be rotting in jail....

      You're making the mistake of believing this is about the actual security issues or the proper performance of duties. This is about a manager waving his dick around and screaming bloody murder when he's told to put it away. Look at all of the case. When he was told to disclose the passwords, there were about a dozen people in the room and an unknown number of people on the conference call. None of the people in the room had any reason to know the password - and he did not directly report to the manager demanding the password.

      Remember, Childs said he would turn the passwords over to the City Manager - who was the only person above him in the network foodchain - before he was arrested, and the city lawyers blocked the manager from talking to him for over a week after he was arrested. He never refused to turn over the passwords, he refused to turn them over to people with no right/reason to have them.

  11. Re:14 Months? by Lumpy · · Score: 5, Insightful

    You actually think that laws to protect you from the government actually apply to you?

    Wow, Let me guess, you also think we run by a Innocent until proven guilty system as well.

    If you enter the legal system you are FUCKED. They play by their rules and will PUNISH YOU for trying to exercize any of your rights. you are a piece of shit and everyone in the system knows you are guilty.

    Honestly, you have a better chance at running and hiding out than getting justice through the legal system. It really is that fucked up.

    --
    Do not look at laser with remaining good eye.
  12. Re:too easy by catmistake · · Score: 4, Insightful

    Punishment prior to conviction has become all too common, it's only one tactic in an unscroupulous prosecutor's bag of tricks. They try to make you look guilty by keeping you in jail before trail. They will duplicitously paint you as a flight risk even if you've never been beyond 20 miles from the courthouse. The judge will almost always do as the prosecutor recommends. It's said a sitting federal judge with full contempt powers is the most powerful position in government. But I think a local municiple prosecutor is pretty damn powerful too, considering his sway over local judges before a jury returns a verdict.

  13. Re:Yes. by tftp · · Score: 4, Insightful

    it's not at all inconceivable that Childs could cause damage to that network if he chose to do so.

    You are correct, of course. Childs should be immediately lobotomized, or if the procedure appears to be unreliable then he should be just killed. He knows too much and can never be released. His possible future crime must be prevented at any cost. Same applies to all future sysadmins of SF - once they learn the network (a few weeks on the job, perhaps) they will have to be destroyed.

  14. Re:too easy by joaommp · · Score: 5, Insightful

    this is preposterous. basically they're condemning him for being arrogant while competent. he always stated that he was only refusing to hand out the passwords because he didn't trust the competence of the people that were still working there.

    what harm could he now do to the city network? he was fired, the password has already been disclosed to the mayor about a year ago... or have they forgotten to change the passwords?

    and if he did have backdoors, it's already time they had them fixed. if he uses them, then, yeah, he's provoking the wrath of law, but... 5 million?

    each year he spends on the jail probably means about 10 years he looses from his lifespan from physical and emotional distress. fsck the fscking judges and DAs.

    Robin Williams said it right:

    "You know, I heard scientists are now using lawyers instead of mice for experiments, for two reasons: one, scientists grow less attached to lawyers and two, there are somethings that even mice won't do."

    add "judges" to that, will you?

  15. Re:14 Months? by gknoy · · Score: 4, Insightful

    I believe that this is less about malicious intent of those participating in the system (poilice, lawyers, judges, lawmakers), and more about Perceived Effectiveness. It's not that they don't want justice, but they need measurable numbers. They need to show that they're Being Effective at deterring crimes, stopping pedophiles, stopping hackers, winning the war on drugs, etc.

    Police are there to make arrests and get the DA a case good enough to go to trial. It's not about "justice", or even your guilt: If something you say can be interpreted as implication, you're dealing with a DA.

    DA's care about looking good to constituents (and/bosses). They can't NOT prosecute cases that the police give them. (Perhaps they CAN, but it looks bad, so I doubt it happens unless they feel they can't win it ... and even then they'll try to plea bargain you out.)

    Judges care about ... who knows what. :) They don't like to have things overturned, as that makes them look bad, but at the same time they tend to be very keen on interpreting the letter of the law. It's generally the higher appeals courts that seem to care about the "spirit" of the law, and even then the letter's pretty strong.

  16. Re:too easy by noc007 · · Score: 4, Insightful

    Prosecutors have argued that the bail is appropriate because, if released, Childs could cause damage to San Francisco's network.

    This oddly sounds like crap that brought up in Kevin Mitnick's trial.

    My guess is the DA knows he's fscked and is grasping at straws. I wouldn't be surprised once the last charge is dropped, Childs counter sues for being charged, arrested, and in jail.

  17. Whatever happened to the constitution? by Marful · · Score: 5, Insightful
    8th Amendment of the Bill of Rights

    Excessive bail shall not be required, nor excessive fines imposed, nor cruel and unusual punishments inflicted.

    Judge needs to be removed and disbarred.

  18. Re:Yes. by mysidia · · Score: 5, Insightful

    it's not at all inconceivable that Childs could cause damage to that network if he chose to do so.

    It's not at all inconceivable that the average slashdot reader could damage the network if he chose to do so (with some basic research + social engineering, to gather some general info).

  19. Re:too easy by ObsessiveMathsFreak · · Score: 4, Insightful

    Punishment prior to conviction has become all too common, it's only one tactic in an unscroupulous prosecutor's bag of tricks.

    That's what you get when state prosecutes are chosen at the whim of the vindictive masses instead of by careful selection based on merit and principle.

    --
    May the Maths Be with you!
  20. Re:too easy by mabhatter654 · · Score: 4, Insightful

    no it shouldn't. The whole thing could have been fixed with a simple contempt of court charge and sweat him till he tells, that was their legal option and they chose not to do that.

    Beyond that all the attempts of the management to "hack in" were unnecessary and not relevant to the criminal case. (like breaking the windows out of YOUR car because somebody stole it) HE did not do any damage after he was fired... the trouble was that he was fired TWICE... the first time the manager didn't write him up per union policy for being a dick and he got his job back. So he was refusing to turn his password over to the people that GOT him fired and weren't qualified to properly manage the network... they broke it because they didn't call a certified person FIRST. Also, they had already accused him of wrongdoing when he hadn't done anything....how do you prove you DIDN'T attempt to commit a crime?

  21. Re:too easy by smash · · Score: 4, Insightful

    If your business can be taken out of action by an administrator leaving, then you have serious business process problems.

    --
    I run: Windows, OS X, Linux, FreeBSD. Just because you have a hammer, doesn't mean everything is a nail.
  22. Re:too easy by hazem · · Score: 4, Insightful

    no, it was a network that had him as the "caretaker". Despite the methods, from what has been said, what he was doing was trying to protect the network. As a "caretaker", it's his job to do what he must to protect the network.

    Actually, all of his authority with respect to this network come from his supervisor/manager. He only has the authority to "do what's best for the network" as long as it's still granted to him by his supervisor. As soon as his supervisor revokes that authority, he no longer has the privilege of deciding what is best for the network.

    After all that, he was just being a dick, and it's stupid to be a dick to people who can have you locked up in jail. This may be United States, but it's not the United States you were (probably) taught about in grade school.

  23. Re:too easy by dgatwood · · Score: 5, Insightful

    His duty to help them by giving them passwords and other confidential information ALSO ended when his employment contract ended. That's what the law says. In fact, legally, he should have destroyed all confidential information in his possession, and as such, suing because he wouldn't turn over confidential passwords that he was not obligated or even allowed to retain is a new level of absurd.

    When this is over, $5 million is likely to seem like peanuts compared with the settlement that San Francisco will end up paying out.

    --

    Check out my sci-fi/humor trilogy at PatriotsBooks.

  24. Re:Yes. by Sabriel · · Score: 5, Insightful

    An idiot with a backhoe could damage the network. Justice is neither being done nor being seen to be done.

  25. Excessive Bail == pressure for plea by redelm · · Score: 4, Insightful

    On one charge? This looks _very_ fishy. Conditions on bail would certainly include no computer use. I suspect the real motive for the DA is to use incarceration as pressure for some sort of plea bargain. Any bargain, because their case is weak / non-existant. Highly corrupt.

    The DA has to pressure, because if he does NOT cave, they're facing a multi-million $ lawsuit for wrongful (or even malicious where less would be protected by privilige) prosecution. This will ruin careers. As it should.

  26. Maybe their network still isn't secure. by Kaenneth · · Score: 5, Insightful

    What skilled, knowledgable, trained network administrator would work for them at this point?

    Some may be willing to take a crappy job to put food on their kids table... but one that's likely to put you in jail for following their own proceedures?... I wouldn't do that to my kids.

  27. Re:too easy by julesh · · Score: 5, Insightful

    Actually, all of his authority with respect to this network come from his supervisor/manager. He only has the authority to "do what's best for the network" as long as it's still granted to him by his supervisor. As soon as his supervisor revokes that authority, he no longer has the privilege of deciding what is best for the network.

    Yes. The issue is, however, that none of the people who informed he had been fired and demanded he handed over the passwords _were actually his supervisor_. AIUI, a subordinate had been promoted over him, and he hadn't been notified of this.

    Look at it this way: you're in charge of a network and have the passwords that can be used to do just about anything with it. One day your assistant comes to you and says, "I've just been promoted to your job, and you've been fired. Hand over the passwords." Wouldn't you think maybe you were in some kind of social engineering attack, and want to confirm it with somebody you knew to be your superior? That's all Childs did.