September 01, 2009

Judge won't lower $5M bail for SF IT administrator

After refusing to hand over administrative passwords, Terry Childs has been held in county jail for almost 14 months

A Bay Area man who has spent nearly 14 months in jail after refusing to hand over administrative passwords to San Francisco's city network is likely to remain incarcerated after a county judge denied his motion for reduced bail on Monday.

Terry Childs has been held on a $5 million bond since his July 12, 2008, arrest in a case that captured intense media interest.

[ Terry Childs still faces one charge -- one he shouldn't face, says InfoWorld's Paul Venezia. | Read InfoWorld's jailhouse interview with Terry Childs. | Follow the Terry Childs saga in InfoWorld's special report: Terry Childs: Admin gone rogue. ]

Prosecutors had charged him with holding the city's FiberWAN network hostage and installing unauthorized "back-door" modems on the city's network. On Aug. 21, Superior Court Judge Kevin McCarthy threw out three of the four charges against Childs. Lawyers for the former city network administrator had hoped that this might lead to a bail reduction and a chance to get their client out of jail.

But that was not to be. On Monday, Judge Charles Haines denied the motion to reduce bail, alluding to "public security concerns," according to Richard Shikman, who is representing Childs in court.

Childs is now charged with one count of disrupting computer services and could face as much as five years in prison, Shikman said.

The $5 million bail is high by any measure. The San Francisco Felony Bail Schedule, which provides bail guidelines for a variety of offenses, lists a $1 million bail for the most serious crimes, such as sexual assault of a child, aggravated arson, or kidnapping for ransom.

Prosecutors have argued that the bail is appropriate because, if released, Childs could cause damage to San Francisco's network. They also believe that he represents a flight risk.

Childs eventually did hand over his administrative passwords to San Francisco Mayor Gavin Newsom, about a week after he was arrested last July. In court filings, his lawyers have argued that he refused to give the passwords to superiors at San Francisco's Department of Telecommunications and Information Services (DTIS) because he believed that they were not qualified to manage the city's network.

According to court filings, Childs had gotten embroiled in a dispute with Herb Tong, a DTIS manager who had ordered Childs to route all network configuration changes through the city's change management system for approval. In a July 13 e-mail, filed with the court, Childs accused his managers of "gross incompetence," implying that this policy would leave city systems exposed to attack.

In an Aug. 21 statement of decision, dismissing some of the charges, Judge McCarthy wrote that because the city was unable to gain administrative access to the network without Childs' passwords, there was cause to believe that he had violated California's computer crime law.

"The defendant's withholding the passwords caused DTIS to be denied administrative access to the FiberWAN, which constituted a denial of computer services," Judge McCarthy wrote.

Close

On Twitter now

Security

Powered by Twitter

On Twitter now

additional resources
White Paper - How to Improve Delivery of Advanced Web Applications

White Paper

Virtual Workforce: The Key to Expanding The Business While Cutting Costs

Get the independent advice and expertise you need to support a virtual workforce.

Go inside:
The three-step approach to making a virtual workforce a reality.
The four flavors of client virtualization technologies.
The three key initiatives that solve IT challenges.
Download now »
White Paper: Successfully Secure Your Wireless LAN With Wi-Fi firewalls.

White Paper

Addressing Linux Threats Leveraging Fewer Resources

The increase in Linux popularity has increased the frequency and sophistication of malware attacks. Read this 2 page white paper now to learn how you can protect your Linux environment with real-time protection that is certified by all major Linux vendors.

Download now »
White Paper - The 2009 Handbook of Application Delivery

White Paper

The 2009 Handbook of Application Delivery

Ensuring acceptable application delivery will become even more difficult over the next few years. As a result, IT organizations need to ensure that the approach that they take to resolving the current application delivery challenges can scale to support the emerging challenges. This handbook elaborates on the key tasks associated with planning, optimization, management and control and provides decision criteria to help IT organizations choose appropriate solutions.

Download now »
White Paper - Is Your Backup System Outdated?

White Paper

Mid-range Storage Considerations

A common misconception is that mid-range storage requirements are dramatically different than that of a larger enterprise. Mid-range storage users may require less capacity, but they have similar functionality and management requirements. This ESG paper examines mid-range storage needs and reviews a new solution that adjusts size while retaining value, performance and functionality.

Download now »
GreeneConsulting 2-Sep-09 3:27am

Why do we have a judge that hasn't a clue of tech working these days? this open and shut and Childs did his job right and a was pushed . $5m is just over kill .. what don't they have GPS trackers for people let out? do the think he will Whistle in to the phone and shut the system down in SF?

I say every IT tech in SF and in the State need to show up in support of this guy..butter yet some make a video showing how the set up they said is illegal is stander in a real Server room set up.

and as for the DOS attack the pass words would have to have been change to lock out the admins and he was the main admin so he was not locked out was he..

GC

fushigi 3-Sep-09 6:21am

"Prosecutors have argued that the bail is appropriate because, if released, Childs could cause damage to San Francisco's network."


"Prosecutors have admitted in court that the city hasn't done squat over the past 14 months to turn off Childs' access to the networks he managed."

There, fixed it for ya.

ehloise 8-Sep-09 8:43pm
Granick's comments that the California law does not apply to those engaged in workplace disputes is simply false. The law does not distinguish between an outside hacker or the often far more dangerous insider hackers. If you cause a denial of service, you have crossed the line into criminality and the judge has already affirmed this. Sure, I don't think 14 months of jail would normally be given, certainly not served, but TC chose to fight this without cooperation. He had a chance and went beyond the point of no return. Granick defends hackers for a living and gives grandstanding speeches at conferences full of socially misaligned administrators who have problems with change management, peer review, and oversight. There are other civil liberties at stake too in these cases, those of the of the end users and employees of these organizations. If a network admin turns on a span port and sniffs your IM traffic, your email password, personal or work in unsecured back end networks, watches your web traffic, uses your similar password to break into your bank account or health provider file, you have lost your civil liberties as well. How many careers were affected when one egomaniac decided to take the law into his own hands? Why should other employees at the city of SF or any other organization have to live under the hands of someone like this when they themselves obey the law. At least when the NSA reads my email there is some organization of peer review. Why doesn't Granick insist on stringent background checks on anyone who could turn on a span port on an organization's network especially when it involves the public, an often trusting public. Why not insist on peer review, oversight, and change management before a span port is ever turned on in an organization? The city of SF was correcting a case of managerial oversight by starting to enforce common sense and change management. It doesn't matter if TC was in a workplace dispute or not. He didn't own the keys to the firetruck, and when he was told to surrender them, he refused for over a week, playing an egomaniacal and extremely costly game of cat and mouse. Mayor Newsom and the SFPD had a civic obligation to enforce the rule of law. Most organizations would not have fought it in fear of the embarassment. I and everyone else have a right to work in hostile free and crime free work environment where management and government actually respect the rights of law abiding employees. The judge is being fair and attentive. I can accept any verdict knowing that at least government did it's job and proved probable cause and prosecuted this crime. The problem comes with groups like EFF defending crime when they should remember the real reason they allegedly formed, defending civil liberties. Now, they are just lawyers trying to get $400 per billable hour.

Sign up to receive Security Resource Alerts

Subscribe to the Today's Headlines: First Look Newsletter

Find out what will be news for the day, with our first-thing-in-the-morning briefing.

©1994-2010 Infoworld, Inc.