• On MovieTome: TRANSFORMERS 2 SPOILERS!
July 23, 2008 1:13 PM PDT

SF employee accused of setting network sabotage time bomb

Bail for a San Francisco city employee accused of hijacking the city's network remained at $5 million on Friday after prosecutors accused the worker of rigging the network to sabotage it the next time it was shut down for maintenance or due to a power failure, according to The San Francisco Chronicle.

Terry Childs, 43, was arrested July 13 on charges of tampering with the city's computer network. He remained in jail after the hearing on Wednesday.

In a secret meeting with Mayor Gavin Newsom on Monday, Childs revealed the passwords to the system so officials could take back control of it.

However, the Sheriff's Department and Park and Recreation Department remained locked out, although the network was in operation, the newspaper reported.

"He had a malicious intent to destroy the entire network," Prosecutor Conrad del Rosario is quoted as saying.

Childs' lawyer, Erin Crane, says her client has done nothing illegal and is being made a scapegoat by city officials who wanted to get rid of him for no legitimate reason.

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 and previously covered search, online advertising, and portals. E-mail Elinor.
Recent posts from News - Security
World Bank under cyberattack?
Apple's October update fixes 20 security flaws
Microsoft to issue 11 security patches on Tuesday
Parity provides free online identity management
Symantec eyes pay-per-use software
Add a Comment (Log in or register) 13 comments
by AndrewRich July 23, 2008 1:54 PM PDT
After reading several different articles about this case, and having no other personal knowledge -- but knowing a lot about how incompetent employees are promoted to managers -- I find myself believing Childs. He went overboard with his protection measures, but I have no problem believing that his managers tried to "git in ther an fix that enternit ixplorer thingie".
Reply to this comment
by AndrewRich July 23, 2008 1:54 PM PDT
After reading several different articles about this case, and having no other personal knowledge -- but knowing a lot about how incompetent employees are promoted to managers -- I find myself believing Childs. He went overboard with his protection measures, but I have no problem believing that his managers tried to "git in ther an fix that enternit ixplorer thingie".
Reply to this comment
by Perry_Clease July 23, 2008 1:59 PM PDT
"Childs' lawyer, Erin Crane, says her client has done nothing illegal and is being made a scapegoat by city officials who wanted to get rid of him for no legitimate reason."

I live in California and if, emphasis on "if", I understand the law correctly an employer does not need a reason, legitimate or not, to get rid of an employee. Now a union worker may have different rights depending on the contract, but I don't think that applies to Child's.

As to the legality of withholding the access codes, well we shall see.
Reply to this comment View all 2 replies
by netPirate July 23, 2008 2:28 PM PDT
If a corporation, or in this case, a government wants to ensure that it has complete control over its data then it needs to regularly audit systems and passwords, have key escrow, and, most importantly, not give one person the keys to the kingdom. Dual control systems are good, for instance, don't make your backup admin your primary admin, etc.
Reply to this comment
by Penguinisto July 23, 2008 2:51 PM PDT
FWIW, and judging by what I've read of the guy:

He's an egotist and an overprotective fool who thought himself more potent than the folks who managed him. That said, I sincerely doubt that there was any intent to "destroy the network". Anyone with even passing knowledge of how Cisco routers actually work (and WAN networking in general), knows how drop-easy it is for a not-so-intelligent admin to tear things up accidentally (network loops, black holes, etc etc).

It's an ugly story, and quite frankly, there's more malfeasance on the prosecutor's part (get flashy national-coverage-sized conviction = get elected to higher office) than there is on Childs' part. After all, if the guy really wanted to destroy the network, he could have very easily have done so and made it all look like an accident (or better still - look like incompetence on his co-workers' and/or managers' part)... with 99.9% of his co-workers and managers not even knowing how it happened.
Reply to this comment
by Michichael July 23, 2008 4:23 PM PDT
Look, it's simple. He configured routers in INSECURE LOCATIONS so the configuration files were not saved to flash memory (Think USB stick). That means, as long as it's online, it works, and if it's offline it's wiped clean, instantly setting off warning bells saying something is wrong. Then you log into it, find out what is wrong, and fix it. Also, in the event that the router is broken into and the flash is STOLEN, nothing is compromised. The same password is probably used for all similar devices in the entire network, e.g. the Provider Edge routers have the same password, the Customer Edge have the same password, et cetera.

This is a SECURITY MEASURE not a Malicious attempt. The management KNEW he was the only one with the passwords to the routers and did not put any policies in place to otherwise disperse that password because he was and is the only engineer with intimate enough knowledge of the details to not **** it up. I guarantee you now that the network password is exposed for all of the techs to see, that network is going to "implode."

And they'll blame it on him.

Michichael
Reply to this comment View all 2 replies
by AppleSuxLeo July 24, 2008 4:02 AM PDT
Is he one of the Village People ?
Reply to this comment
by inachu July 24, 2008 6:33 AM PDT
I agree 100%! I hope some IT reporter keeps us informed.
Reply to this comment
by Chris-Anderson July 25, 2008 11:13 AM PDT
Related Article to That Story: SysAdmin Who Locked San Francisco Network Gives Key to Mayor Gavin Newsom
Reply to this comment
Powered by Jive Software
advertisement
Resource center from News.com sponsors
You Need The Speed of Norton 2009
Introducing Norton Internet Security™2009

Click Here!
With one-click, one-minute install, under 8MB of memory usage and fewer, shorter scans, it's the fastest security suite anywhere. Norton. Smart Security, Engineered for Speed. Get a FREE trial today!

Click Here!
The Fastest Security Suite Anywhere

Experience the revolutionary Norton Internet Security™ 2009. With Norton™ Insight, a new feature, you get precision security that targets only at risk files for fewer, faster, shorter scans

Win a Trip to Space!*

Enter the Blast Off with Norton Sweepstakes for your shot at a trip to space. You could experience being fast and weightless, just like the new Norton 2009. *No purchase necessary; click for full details.

FREE Trial!

Act now to get your FREE trial of Norton Internet Security 2009. Try it for the protection. Love it for the speed

Norton Safe Web NEW!

A community-based system that rates web site safety

Norton Labs NEW!

Users can download new security technologies and share input directly with developers. Help us shape our future products!

About News - Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

News - Security topics

Featured blogs

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right