Network admin Terry Childs gets 4-year sentence

[Renew Deal]

A City of San Francisco administrator who refused to hand over administrative passwords to the city's network has been sentenced to four years in state prison.

Terry Childs was convicted in April of violating California's hacking laws after he refused to hand over administrative control to the city's FiberWAN network in July 2008.

He was sentenced Friday by Judge Teri Jackson, according to Erica Derryck, a spokeswoman for the San Francisco district attorney's office.

Although the city's network continued to run during the 12 days that Childs refused to hand over control, jurors found that by denying the city the administrative control to its own network, he had violated state law.

Childs defended his actions during a long court trial, saying that he was only doing his job, and that his supervisor, Department of Technology and Information Services Chief Operations Officer Richard Robinson, was unqualified to have access to the passwords. Childs eventually handed over the passwords to San Francisco Mayor Gavin Newsom.

Prosecutors characterized the former network administrator as a power hungry control freak who couldn't be managed.

His attorney, Richard Shikman, disagreed, saying that Childs is a "man of great character."

"He clearly is not a hacker. The state's case is based on a theory which needs to be tested on appeal," he said via email. "The case stands as a metaphor for both human folly and human achievement."

Childs has already served 755 days in county jail, Derryck said.

That time served will be applied to his sentence, so Childs could be paroled within the next four to six months. He had faced a maximum sentence of five years in prison.

Childs may also have to cover the city's $900,000 bill, spent on trying to regain control of its network. A hearing on financial penalties is set for August 13.

http://www.infoworld.com/d/adventures-in-it/network-admin-terry-childs-gets-4-year-sentence-247

The case here was always borderline. The case started with a conference call where Childs correctly in my opinion not handing over the passwords on an open conference call. Of course, it shouldn't have taken 12 days and the mayor to get this resolved. The mayor isn't qualified to have the passwords either.

[TygrBright]

1. In a public administration situation like this, shouldn't passwords be escrowed?

Sheeeesh, what if the guy had keeled over from a heart attack or something.

Security cuts both ways. When only one person controls a network that critical, it's not secure in a whole different way.

concernedly,
Bright

[Renew Deal]

2. I used to put passwords in a sealed envelope that was in a sealed band deposit bag

that was in a safe. I'd know it if someone got in that envelope.