Tip: When Leaving Your Job At An ISP, Don't Cancel All Its Customer Accounts

from the just-a-suggestion dept

It's no surprise that people who are leaving their jobs (especially to go work for a competitor) may have a certain dislike for their ex-employer -- but it's still amazing that people don't realize that attacking them isn't a particularly good idea. A former employee of a wireless ISP in Utah apparently logged back into the computers of his former employer (shame on them for leaving access open to the guy) and cutting off customer accounts by reprogramming customer access points. There are plenty of cases detailing similar attacks on former employers -- but it's amazing that these people don't expect to get caught. In this latest case, not only was the guy caught, he's now been sentenced to two years in jail. Still, there are some oddities here. Apparently after the guy turned off service for these customers, it took up to three weeks to reprovision some of them. That seems like an excessively long time -- though, if the company left their computer network open to a former employee who left on bad terms, perhaps they weren't the most technically savvy ISP out there.


Reader Comments (rss)

(Flattened / Threaded)

  1.  
    identicon
    Ajax 4Hire, Dec 15th, 2006 @ 11:06am

    Doing well is the best revenge.

    I know it is not as satisfying but it does work.
    Doing well is the best revenge against divorce, layoff, reject or loosing on American Idle. (not mis-spelling)


    Oh, yeah, I'm first.

     

    reply to this | link to this | view in thread ]

  2.  
    identicon
    Sanguine Dream, Dec 15th, 2006 @ 11:17am

    Re: Doing well is the best revenge.

    Actually it can be very satisfiying especially if you run across a former emplyer so you get the chance to rub it in his/her face. This is especially great if you were downsized or laid off in order to save money in the company.

     

    reply to this | link to this | view in thread ]

  3.  
    identicon
    NSMike, Dec 15th, 2006 @ 11:18am

    Not Uncommon.

    I worked for an ISP for a short while, and a former disgruntled employee was able to log back in and effectively kill our e-mail servers. Of course, this was an ISP in name only, probably much like this one in Utah. Basically some other company provided REALLY cheap service to us, and we re-sold it to our customers. Our tech guy knew nothing about security, there were holes in the billing system so large that anyone could've easily retrieved the passwords of the most important people in the company. Although, calling it a company is a little too much credit. It was run out of a house.

     

    reply to this | link to this | view in thread ]

  4.  
    identicon
    Squee, Dec 15th, 2006 @ 11:28am

    Re: Doing well is the best revenge.

    "Doing well is the best revenge against divorce, layoff, reject or loosing on American Idle. (not mis-spelling)"
    Idle may be your idea of a clever play on words, but you may want to look up the word "losing"......

     

    reply to this | link to this | view in thread ]

  5.  
    identicon
    AC, Dec 15th, 2006 @ 11:36am

    3 weeks not surprising

    It said he reprogrammed the access points. If you have network access and use it to trash the configuration of the client hardware it can be done very quickly. It would the require site visits or walking the customer through the configuration to bring it back up.

    Its easy enough to screw this up by accident when making simple changes, so it would be VERY easy to do intentionally.

     

    reply to this | link to this | view in thread ]

  6.  
    identicon
    misanthropic humanist, Dec 15th, 2006 @ 11:43am

    disproportionate

    I think what this guy did was lame. I think what the guy did was morally wrong.

    But I think handing him a prison term of 2 years is more wrong, a greater crime than either his actions or those of the employer that fired him (assuming it was an unfair or malicious dismissal).

    When crimes against property are punished more severely than crimes against the person we are in danger of losing the legitimacy of our justice system. But when crimes against *abstract* property are punished more severely than crimes against tangible property or the individual, well then I can't see how anybody can maintain respect for the law.

    In a civillised society he would get 100 hours community service and a lasting conviction that would make working another ISP very hard.
    In America, where 1/30th of the population are in prison, he is now entering a penal system that will expand his exposure to criminal mentality, cultivate his grudge against society and ultimately place him at greater risk of reoffending.

    The purpose of a criminal justice system is primarily to protect society, not to punish the individual. In the USA they seem to have it the wrong way round. The authoritarian mentality is a pathology that is counterproductive in every case.

     

    reply to this | link to this | view in thread ]

  7.  
    identicon
    Bishop takes Knight, Dec 15th, 2006 @ 11:53am

    To be honest I feel bad for the guy who got jail time. Employers screw over their employees all the time, just a shame he got busted for getting some payback.

     

    reply to this | link to this | view in thread ]

  8.  
    identicon
    erica, Dec 15th, 2006 @ 11:59am

    Wrong and teaches a lesson

    I agree that it was wrong and morally wrong. I also think this is an opportunity for this company and others to see when terminating an employee to terminate the account and change passwords for crtitical measusre as this.

    There *should* be a method and proceedure in place for all companies no matter how big or small.. with a checklist to go down, passwords to change and accounts to disable upon termination.

    Most employees *do* know more than their own account and password.. even if they are not supposed to know others. Maybe others will learn from this and prevent it from happening in their company so easily when they terminate an employee

     

    reply to this | link to this | view in thread ]

  9.  
    identicon
    The infamous Joe, Dec 15th, 2006 @ 12:11pm

    riiiight.

    Two years jail plus 3 years probabtion plus $65,000. Serves him right, too.

    In this day and age, email is just an important method of communication as any other-- not to mention that in all reality, he took it out on the company's customers, not on the company. That makes him an asshat in my book. To make it even more fun, the man seems to have left to start his own company-- so I have a feeling this wasn't revenge, but instead a way to knock out his competition-- even more asshattery taking place right there.

    As for crimes against abstract property-- well, he gained access to a computer he had no rights to access (the fact that he had his own password doesn't matter-- just having a key to your house doesn't give me the right to enter it) and that is a serious crime to me-- how much personal information can be found on a computer? A business computer? He showed a complete disregard to who he would affect by his actions.

    Two years? That seems fair. Next time slash the boss' tires like everyone else.

     

    reply to this | link to this | view in thread ]

  10.  
    identicon
    I agree, Dec 15th, 2006 @ 12:13pm

    Re: disproportionate

    Nice reply on all levels.

     

    reply to this | link to this | view in thread ]

  11.  
    identicon
    misanthropic humanist, Dec 15th, 2006 @ 12:21pm

    consequences

    "Two years? That seems fair. Next time slash the boss' tires like everyone else."

    And when his front wheel blows out on the fast lane and he dies, along with the family in the oncoming vehicle that he hits - then what?

    You see, your reply merely confirms that there is no sense of proportion
    in our world today, we have totally lost the ability to take measure of things because of disproportionate violence sanctioned by the state
    and the encouragement of agressive behaviour.

     

    reply to this | link to this | view in thread ]

  12.  
    identicon
    Porter Rockwell, Dec 15th, 2006 @ 12:25pm

    He didn't do it the right way

    He should have used a logic bomb. Something that waited a couple of years and the started removing accounts and so on. Then it stops waits another few weeks and repeats. Then sleeps again for some random tie and wake up again.

     

    reply to this | link to this | view in thread ]

  13.  
    identicon
    Anonymous Coward, Dec 15th, 2006 @ 12:41pm

    Re: disproportionate

    Misanthropic Humanist for President. We need more intelligence in office.

    Now why is it so hard for the average American to hold such intelligence? Because we're rich, fat, lazy, retards that would rather watch Larry the Cable Guy than grow a brain.

     

    reply to this | link to this | view in thread ]

  14.  
    identicon
    Bill, Dec 15th, 2006 @ 12:42pm

    I did something ....

    I did something similar when I was left off from a small ISP. But I had been sending e-mails to my former boss telling him to change the passwords. He never did.
    I didn't want to be held responsible if something really bad happen so I set one of the servers to back up every hour on the hour. I know this caused headaches for some of the clients but it got the company to change the passwords the next day.
    Needless to say this company is no longer around and this was back in 2001 but just goes to show things haven't changed.

     

    reply to this | link to this | view in thread ]

  15.  
    identicon
    HateLiberalMentality, Dec 15th, 2006 @ 1:09pm

    Liberal Attitude

    This guy got what he deserved. He knew what he was doing was wrong, but he thought he would either a) get away with it or b) not get punished.

    People learn to take responsibility for their actions. Jail time for behaving like a child and defacing a company will give him time to think about becoming an adult.

     

    reply to this | link to this | view in thread ]

  16.  
    identicon
    The infamous Joe, Dec 15th, 2006 @ 1:10pm

    Rims

    We'll ignore the fact that no one is going to drive his car with a slashed tire-- unless slashed means something different than what I thought it did.

    Speaking of sense of proportion, do you feel that what this guy did ws proportionate to the 'money issues' he was having at his old job? I don't think it has any bearing anyway-- he got off light, as the law allows. The max time for first offense is 10 years. (20 for second) and the reason it's so large is because it's related to the Patriot Act. (It doubled them)

    What I'm trying to say is, if we let the guy off with a slap on the wrist, the terrorists win. ;)

     

    reply to this | link to this | view in thread ]

  17.  
    identicon
    misanthropic humanist, Dec 15th, 2006 @ 1:14pm

    ah, of course

    "He knew what he was doing was wrong, but he thought he would either a) get away with it or b) not get punished."

    Perhaps you could explain the obviously very subtle difference there for us less intelligent posters.

     

    reply to this | link to this | view in thread ]

  18.  
    identicon
    erica, Dec 15th, 2006 @ 1:19pm

    Re: Liberal Attitude

    OR.. he did it without thinking of the legal consequences period

     

    reply to this | link to this | view in thread ]

  19.  
    identicon
    Anonymous Coward, Dec 15th, 2006 @ 1:36pm

    Re: ah, of course

    I think the reality is that we now live in a society that is geared far more toward money and corporations than individuals. It's the reason why in so many countries crimes like rape, drunk driving (even if you kill multiple people), paedophilia etc. the punishment is often much, much leaner than crimes committed against a company where no damage other than monetary loss has occurred.

     

    reply to this | link to this | view in thread ]

  20.  
    identicon
    misanthropic humanist, Dec 15th, 2006 @ 1:43pm

    Re: Rims

    "do you feel that what this guy did was proportionate to the 'money issues' he was having at his old job?"

    No Joe I don't. I already said in so many words that I think the chap was a prick.

    "anyway-- he got off light, as the law allows. The max time for first offense is 10 years."

    No he didn't, not in my opinion. The very fact that such harsh laws exist is something you should be utterly ashamed of. I realise we differ there, but perhaps you need to look at why you feel so vengeful and who that is really directed against.
    And how do you square that with a fraudster from the Enron company whos embezzlement of millions of dollars results in
    a cautionary ruling? Using your logic of arbitary justice do you think it would be acceptable for a cop to shoot a member of your family for looking at him cockeyed?


    "and the reason it's so large is because it's related to the Patriot Act."

    I really can't take you seriously if you are going to quote that comic instrument of oppression. But from your last quip, I suspect deep down you do actually understand, but you're playing up to a role because you don't have the guts to speak up and say "No, enough! I find this unnacceptable in my country" That would be the patriotic thing to do. I think the authoratarian mind is bizzare, but understandable - you want the law to be harsh because you feel vulnerable and you want to be protected by something strong. That is just latent fear an immature lack of personal responsibilty. Strong people not only set their own high ethical standards, they live up to them without appeal to authority. At least after they leave school.

    btw, slashing a tyre can be a pretty dangerous thing to do, people lose fingers and eyes (because of the very high pressures)

     

    reply to this | link to this | view in thread ]

  21.  
    identicon
    erica, Dec 15th, 2006 @ 1:45pm

    Re: Liberal Attitude

    OR.. he did it without thinking of the legal consequences period

     

    reply to this | link to this | view in thread ]

  22.  
    icon
    The Dukeman (profile), Dec 15th, 2006 @ 2:18pm

    Re: ah, of course

    The difference is simple: being found out. "a) Getting away with it" means not being found out, as well as including "b) not getting punished." "A" necessarily includes "B", but"B" does not necessarily mean he wasn't found out. It just means he wasn't (or wouldn't be) punished.

     

    reply to this | link to this | view in thread ]

  23.  
    identicon
    misanthropic humanist, Dec 15th, 2006 @ 2:43pm

    Re: Re: ah, of course

    That distinction does make sense.

    Though, if

    A = evading detection and
    B = not being punished

    it is difficult to imagine anybody assuming A does not imply B

    though perhaps as Erica says, he really thought it was "okay"

     

    reply to this | link to this | view in thread ]

  24.  
    identicon
    misanthropic humanist, Dec 15th, 2006 @ 2:44pm

    correction

    Bollocks ... actually, run that last one through DeMorgans rule :)

     

    reply to this | link to this | view in thread ]

  25.  
    identicon
    needtogetalife, Dec 15th, 2006 @ 3:28pm

    Re: Re: Rims

    Well said. It's nice to hear a reasonable voice on issues like these.

     

    reply to this | link to this | view in thread ]

  26.  
    identicon
    erica, Dec 15th, 2006 @ 5:42pm

    Re: Re: Re: ah, of course

    Aorry about my response posting twice.. I came back in a bit and hit refresh again on the post page instead of BACK... I "wasnt thinking" lol

     

    reply to this | link to this | view in thread ]

  27.  
    identicon
    Anonymous Coward, Dec 15th, 2006 @ 6:09pm

    Re: Re: Rims

    A lot of excellent insight there. I agree with all of it, but it misses the bigger point. Once everything is illegal, then the Almighty self-righteous will be able to forgive their friends and punish their enemies whenever the whim hits them. The war on drugs is the most visible example, but still ignored by the press and public here. Painful and costly as it was, I think some day historians will look back at 9/11 and see it as a turning point that led the US Congress to eventually conclude that they can not pass laws they they expect the whole world to follow: War on Drugs, copyright, digital rights management, on-line gambling and many others are still issues. Once those are properly addressed, fewer people will despise me when I am visiting them in their countries. All that said, the UK is still too "civilized" for me.... and yes, that was a "Zed' :)

     

    reply to this | link to this | view in thread ]

  28.  
    identicon
    PJ Brunet, Dec 15th, 2006 @ 6:33pm

    blah blah

    Reminds me of the computer pranks we did in class in high school, back when I had zits! We had PC Jr's with infrared keyboards, you could sneak up behind someone and type without them knowing. We'd code fake operating systems in BASIC to trick each other and disable "control-break" so you couldn't even get back to DOS.

     

    reply to this | link to this | view in thread ]

  29.  
    identicon
    Mot Nosnews, Dec 15th, 2006 @ 8:16pm

    Re: disproportionate

    >But I think handing him a prison term of 2 years is more wrong, a greater crime than either his actions or those of the employer that fired him

    The is like the old anecdote, when a guy was complaining about the unfairness of being hung for stealing a horse.

    The answer was "You are not being hung just for stealing a horse, you are also being hung that others will not steal a horse."

     

    reply to this | link to this | view in thread ]

  30.  
    identicon
    Anonymous Coward, Dec 15th, 2006 @ 10:00pm

    Re: Doing well is the best revenge.

    not mis-spelling "Idol", however, mis-spelling "losing"

     

    reply to this | link to this | view in thread ]

  31.  
    identicon
    david, Dec 16th, 2006 @ 7:18am

    Re: disproportionate

    BUZZZ!!! WRONG!! The point of the the criminal justice system is to deal with those who commit or are accused of committing acts against individuals and society that have been deemed to be crimes.

    And the point of the penal system is to rehabilitate criminals, not punish them. If sending someone to a prison increases their risk of reoffending there is a problem with that particular prison, because that was certainly not the idea when they were put in place.

    Forming a group of words in an intelligent manner does not make the point of the formation correct. Try enrolling in Criminal Justice 101 before you attempt to theorize on the criminal justice system.

     

    reply to this | link to this | view in thread ]

  32.  
    identicon
    david, Dec 16th, 2006 @ 7:21am

    too little information

    chat chat chat. we don't have enough information to form any sort of opinion on the seriousness of this dudes sentence.

    does he have any priors?

     

    reply to this | link to this | view in thread ]

  33.  
    identicon
    christian, Dec 16th, 2006 @ 7:28am

    ..

    security security security...

    there are alot of companies that do not take security seriously which is a huge mistake..in any case, smaller and mid-sized companies need to look at incidents like this, and realize YOU ARE ALL VULNERABLE..

    you need to create a budge and a plan for securing your network, systems, and most importantly overall, YOUR BUSINESS!

    what the guy did was wrong, but it serves the isp right for overlooking such a critical issue in todays society..

    security will make or break you or or business..remember that..

     

    reply to this | link to this | view in thread ]

  34.  
    identicon
    Keith Dsouza, Dec 16th, 2006 @ 8:02am

    Think about customer security

    Well this is really foolish on part of the ISP too, they should get sued too by their customers.

    I mean when your approach towards an employee who is leaving is so lax think about the security they may provide for their customers.

    I as a part of my role I play at my company apart from the best wishes I give to my leaving colleague (however closely i know them), first ask my system admin to cancel all accounts they held for company purposes including the company email account.

    If i would have been a customer of that ISP I would have sued them first.

     

    reply to this | link to this | view in thread ]

  35.  
    identicon
    misanthropic humanist, Dec 16th, 2006 @ 8:38am

    comprehension

    "And the point of the penal system is to rehabilitate criminals, not punish them."

    correct, as I said

    In fact there are FOUR (4) functions of a criminal justice system.

    i) protect society
    ii) provide a deterrent
    iii) provide a sense of justice to the victim
    iv) rehabilitate the individual

    Read what I wrote before jumping in with your eager desire to contradict me. You missed the word "primarily". Go back and read it again.

    "Forming a group of words in an intelligent manner does not make the point of the formation correct."

    And you've given a proof. Stop trying to be clever, because you clearly cannot even read.

     

    reply to this | link to this | view in thread ]

  36.  
    identicon
    Gustavo, Dec 16th, 2006 @ 8:45am

    Three little words:

    dead man switch!

    (joking!)

     

    reply to this | link to this | view in thread ]

  37.  
    identicon
    Qala, Dec 16th, 2006 @ 8:56am

    This is bad...

    It's a shame such people exists...

     

    reply to this | link to this | view in thread ]

  38.  
    identicon
    Jeff, Dec 16th, 2006 @ 10:17am

    Hmmm

    Does anyone think that maybe the behavior expressed by this criminal act may have been the motivation for the company to fire him (although the article does not say he was fired) in the first place?

     

    reply to this | link to this | view in thread ]

  39.  
    identicon
    Ralph, Dec 16th, 2006 @ 2:30pm

    thats why

    @ years in prison his life is ruined forever
    Might just as well went into his company with a gun and killed everybody
    when that happens now you know why .

    Good luck at your job.

    America the prison country

    Thats why so many people hide in there house afraid to go outside
    its the police they are scared of not crime

    Iknow lots of people who go to prison

    Not one victim of crime.

     

    reply to this | link to this | view in thread ]

  40.  
    identicon
    Max Rubin, Dec 16th, 2006 @ 10:26pm

    Pride in Your Work

    Whatever you do you should have pride in your work.
    Attention to detail shows.
    If you are going to do something do it properly.
    www.adgerlinux.com

     

    reply to this | link to this | view in thread ]

  41.  
    identicon
    Max Rubin, Dec 16th, 2006 @ 10:26pm

    Pride in Your Work

    Whatever you do you should have pride in your work.
    Attention to detail shows.
    If you are going to do something do it properly.
    www.adgerlinux.com

     

    reply to this | link to this | view in thread ]

  42.  
    identicon
    Shaun Stevens, Dec 16th, 2006 @ 10:31pm

    Worst Boss Revenge

    Believe it or not I was asked to be a pallbearer at the funeral with the worst boss I ever had.
    Imagine how the other employees ( who he mostly hired as clones ) thought of him?

     

    reply to this | link to this | view in thread ]

  43.  
    identicon
    Donald McDaniel, Dec 17th, 2006 @ 12:22pm

    Re: disproportionate

    How you can think that this man's crime was just a "crime against the property of the ISP" I do not know.

    Not only was it a crime againt the ISP in question, it was also a crime against EVERY customer whose account he destroyed.

    His two year sentence was very mild, under the circumstances.

     

    reply to this | link to this | view in thread ]

  44.  
    identicon
    Donald McDaniel, Dec 17th, 2006 @ 12:34pm

    Re: thats why

    Considering that the victims of this man's thoughtless and criminal acts probably cost the ISP's customers hundreds of thousands of dollars (at minimum), as well as the ISP losing millions, in addition to the trust of its customers, the sentence against this criminal was mild.

    This man chose to do what he did. He knew the consequences of his criminal acts. Yet he went ahead and committed his crimes anyway.

    How about a little consideration for the VICTIMS rather than the PERPETRATOR?

    By the way, the victims of violent crime DO "go to prisons" of the perpetrator's making, until justice is served. The results of such crimes leave their victims in emotional bars not of their making, which can bind them for years...much longer than the two years this dufus got. In some cases, the monetary damages to the victims last for much longer than 2 years.

    Whiner!!!

    Start considering what these crimes do to the victims, rather than what they do to "American Prisons".

     

    reply to this | link to this | view in thread ]

  45.  
    identicon
    Darkraven, Dec 17th, 2006 @ 4:23pm

    Re: consequences

    Just to let you know, if you slash someones tires then there is no air in the tire and therefore he whouldn't be on an interstate and wreck because the tire was slashed

     

    reply to this | link to this | view in thread ]

  46.  
    identicon
    just me, Dec 17th, 2006 @ 7:50pm

    got cha!

    The guy got what he deserved. But the ISP should of been fined for leaving the gate open too.

     

    reply to this | link to this | view in thread ]

  47.  
    identicon
    Mike, Jan 5th, 2007 @ 5:53pm

    Re: disproportionate

    How can you be so right and so wrong @ the same time?

     

    reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Follow Techdirt
A word from our sponsors...
Essential Reading
Techdirt Reading List
Techdirt Insider Chat
A word from our sponsors...
Recent Stories
A word from our sponsors...

Close

Email This