Fired AOL Engineer gets 15 Months 371
n3hat writes "A former America Online software engineer was sentenced to 15 months in prison for stealing 92 million screen names and e-mail addresses and selling them to spammers who sent out up to 7 billion unsolicited e-mail messages, according to this A.P. story in the Baltimore Sun."
In a related story... (Score:4, Funny)
I know, I know... probably a flamebait rating but come on, you know you giggled!
Re:In a related story... (Score:5, Interesting)
America Online: A sucker born every minute...
According to a corporate press release dated June 16, 2000, America Online has surpassed the 23 million member mark. Founded in 1985, AOL has been a household name to novice computer users worldwide. Unfortunately, many of these novices don't know that they're only seeing a small portion of the Internet and are being limited by AOL's proprietary and archaic interface.
Now, it's fairly safe to make the assumption that at least a quarter of AOL's 23 million customers are simply short-term users along for the free trial or jumping from service to service looking for the best deal. And, using that same line of thinking, roughly half of those 17.25 million remaining customers are probably smart enough to see AOL for what it really is and cancel their service in a desperate fit of fight or flight.
That leaves approximately 8.63 million customers that use AOL as their primary Internet Service Provider, give or take a random three quarter million people at any given time signing up or canceling. With this in mind, and approximately 7.88 million minutes in AOL's 15 year history, this proves that a sucker really is born every minute.
Re:In a related story... (Score:4, Insightful)
Or maybe it means that novices sign up to become familiar with interacting with the online world.
Once they've become comfortable with using a computer and an online service, they feel that they can take the training wheels off and find things on the Web for themselves. The most common Internet activities are e-mail, Web and chat. You don't need AOL for those.
Re:In a related story... (Score:3, Funny)
Re:In a related story... (Score:3, Funny)
Re:In a related story... (Score:3, Funny)
The global growth rate is about 140 ppm (people per minute). Let's consider that anyone with an IQ of <100 will want or need training weels, that means a growth of at least 70 ppm who need/want training wheels.
If we look at the birth rate instead, which is about 270 ppm, we get a growth figure of 135 ppm who need/want training wheels. If we now guesstimate that 40% of these newborns are persons who will eventually clog up the helpdesk more than usual, we get a figure ot 54ppm.
In
Re:In a related story... (Score:3, Interesting)
AOL targets the masses; they fill a niche that allow us geeks to play Battlefield 2 or compile code or peruse usenet, without having to answer a phone every 2 minutes explaining how to use "electronic mail...no you don't have t
Re:In a related story... (Score:3, Insightful)
Most people think that it is just a regular ISP but it isn't
Lucky guy (Score:5, Interesting)
Re:Lucky guy (Score:4, Interesting)
That assumes that the people he sold the names to (and whoever else might have received them downstream) only used them once. I'm going to bet that's not the case. Some hunk of that last has probably made rounds to multiple mail whores for a little merge/purge processing against their other lists. That's not nearly enough time - he should get out when people holding those addresses haven't seen any spam for at least 6 months.
Re:Lucky guy (Score:3, Funny)
Re:Lucky guy (Score:4, Insightful)
In a case such as this, while he may have caused damage and made some money off it, a significant fine would be ample. I mean its not like he is a danger to society if he doesn't get locked away.
He *did* represent a physical threat (Score:5, Insightful)
Why is it that people think a distributed crime is any less of a crime? Do you think it'd be OK if he stole $130,000 from a bank? Then why do you think it's OK that he stole $0.0019 each (1 second's wages at $6.75/hr) from 70 million people? They work out to the same amount of money.
Re:He *did* represent a physical threat (Score:3, Insightful)
but yeah, before yahoo's filter started catching 99% of all the spam instead of having 6-7 spams a week to delete, i'd have 100-200 pwer day. before that i had to manually try and use spamcop. that was even more than 1 second per spam, more like half a minute. y
Re:Lucky guy (Score:3, Insightful)
Sure, Kevin got a bum rap - and I don't want to drag up that debate, so if you think I'm full of crap just let it drop on that count - but his sentence gave most of us pause.
I'm not saying that a sentence like that would do a hell of a lot for the kind of white collar crime you see in accounting and
Maybe not... (Score:3, Funny)
He's NOT that cute.
define irony (Score:5, Funny)
Re:define irony (Score:2)
When AOL sends their crap through snail mail, AOL themselves is paying for it to be sent.
When spammers send their email, they are using bandwidth that other people have to pay for.
Re:define irony (Score:2)
Re:define irony (Score:2)
Costs not included in postage include
I'm sure the list could go on. What is important is that it is taxpayers -- not AOL, who pay these costs. AOL's snail mail spam sh
Hypothetical Prison Conversation (Score:5, Funny)
Prisoner #1: So what're you in for?
Prisoner #2: Aggravated assault. You?
Prisoner #1: Armed robbery. How 'bout you?
AOL Engineer: I stole 92 million screen names and e-mail addresses and sold them to spammers who sent out up to 7 billion unsolicited e-mail messages.
Prisoners #1 and 2 inch away from AOL Engineer at the lunch table
Re:Hypothetical Prison Conversation (Score:5, Insightful)
15 months really isn't that bad, he'll probably do a third of that with good time (5 months). But he'll have to be on probation for years, and nobody worth working for is going to want to let him do anything more than stuff resistors in circuit boards.
The trouble that comes after prison is often worse than doing the time itself.
Michael
I think they'd understand it very well (Score:5, Funny)
The public at large may not be experts in some of the more sophisticated crimes, nor in the finer points of intellectual property (e.g., as applied to those database records), but stuff like spam is something you don't need a Ph.D. in CS to understand. If someone doesn't understand, someone else will explain it to them.
Spammer: "I sold 92 million AOL email addresses to spammers."
Bubba: "Uh, wot's a spammer"
Billy Joe: "Bubba, you know those 'enlarge your penis' and 'horny teens waiting for you' messages you told me your little daughter was getting on AOL? This guy told them where to send those."
Which way it goes from there, I wouldn't know. But from there Bubba understands exactly what the cybercrime was.
Re:Hypothetical Prison Conversation (Score:2)
I don't think so.
My understanding is that when you are sentenced to X months at a federal facility, you spend X months there. There are no early releases or paroles.
That assumes, of course, that he doesn't have a smart lawyer trying to overturn it.
Re:Hypothetical Prison Conversation (Score:3, Interesting)
So he was poor. The crime was harmess. The others involved have better attorneys.. He needed the money. You paint a very sympathetic picture.
However, for any society to live under the rule of law, its citizens do not get to select which laws they obey, and which their circumstances mean don't apply.
My first job out of school in 1993 paid $25k ($32k today, considering inflation), and I had student loans, rent, a car note, insurance, etc
Further details / This looks strangely familiar (Score:5, Informative)
AOL E-mail Data Thief Gets 15 Months in Prison
AP's Larry Neumeister reports that the AOL employee who sold 92 million stolen e-mail addresses and screen names to spammers has been sentenced to one year and three months in prison [businessweek.com]. Jason Smathers sold the list to spammers for $28,000, who then proceeded to send as many as 7 billion spam messages. The prosecutor in the case estimated 'AOL suffered a loss of 10 cents for every 1,000 spam e-mails sent to subscribers.' The judge suggested that Smathers pay $84,000 in restitution [cnn.com] but will decide on the final figure after AOL files details of financial losses due to increased staff, hardware and software costs. An interesting note: Judge Alvin Hellerstein said in December that he canceled his AOL subscription because he received too much spam.
2005-08-17 21:42:32 AOL E-mail Data Thief Gets 15 Months in Prison (Index,Spam) (rejected)
Re:Further details / This looks strangely familiar (Score:2, Funny)
So... (Score:5, Funny)
Re:So... (Score:2)
Re:So... (Score:5, Funny)
1 in 100? I have to think the return on those discs is way lower than 1 in 100. I'd put it at more like 5,000 discs in return for a single year-long contract.
*Maybe* 1 in 100 will put the disc in the drive, perhaps 1 in 500 will begin the trial. However, once the 10 million hours of free* Internet access expire, I expect very few will pony up the $21.95 or whatever the hell they're charging for "special" Internet today.
*10 million hours of free slower-than-hell dialup access expire 10 days after activation. Social security number, date of birth, full name, and valid credit card with a minimum of $20,000 credit limit required. AOL reserves the right to do whatever the hell we want, anytime, anywhere. By agreeing to these terms, you acknowledge you are a complete dumbass.
Why jail? (Score:5, Insightful)
Anyways, save jail for the murderers, rapists, and child molesters of the world. Make people like this guy, Martha Stewart, and Bernie Ebbers repay they're debt in other more productive ways.
Re:Why jail? (Score:5, Insightful)
Re:Why jail? (Score:2, Interesting)
Re:Why jail? (Score:2)
Re:Why jail? (Score:2, Insightful)
Oh, wait...
Re:Why jail? (Score:3, Interesting)
I work hard and don't mind paying taxes for the benefits I receive, but money earned in the conviction of a crime should be returned to those it came from *and* an equal sum paid to the taxpayers for having to put up with the assholes in the first place.
I sure wouldn't mind if Ebbers and
Re:Why jail? (Score:2)
Not if repayment is picking up highway trash for $5/hour. Cause $1,000 damage, work for 200 hours (say 8 hours a week for the next 6 months or something). No option to pay it off, you have to do the work.
Re:Why jail? (Score:4, Funny)
Re:Why jail? (Score:2)
Re:Why jail? (Score:2)
Re:Why jail? (Score:5, Interesting)
Such debts can't be discharged in bankruptcy court.
Re:Why jail? (Score:5, Insightful)
But in cases of very costly (to the rest of us) and profitable (to the perp) white-collar crime, there is very little else that can serve as a deterrent. White-collar criminals tend to have a different attitude from low-level drug offenders: they aren't desperate or sick, and don't even recognize that what they're doing is wrong. Instead, they feel no guilt about gaming the system in any way possible (speaking in generalities, of course).
If you fine them, they'll hide their money (as another poster said). If you try to leverage their knowledge, they'll fail to cooperate. As long as you let them have their freedom, they'll find a way to beat you. The way to make them think twice is to take away their freedom.
If we put one white-collar perp in jail for every five low-level drug offenders we let out and put into intensive treatment programs, we'd make the market a more honest place and solve a lot of social problems at the same time.
Re:Why jail? (Score:2)
In my view, the police and justice system exist to minimize the cost of (crime+police+justice). Prison acts as a deterent, and keeps dangerous people out of harm's way. Fines act as a deterent and restitution.
Prison is appropriate for dangerous criminals, and when fines or other punishment do not provide sufficient deterent. In the case of non-violent financial crime, fines are insufficient if the criminal has little money to take (and, if you're into indentured servitude, as the grandparent see
Re:Why jail? (Score:3, Interesting)
Let me think...
Beheading. Public humiliation (stockades, or something similar). A tattoo on the forehead. Deportation. Loss of driver's license. An intense chemical or physical sensory overload such as being confined with a horrible smell or intense low frequency sound that is nauseating. Flogging.
No, I'm not a sadist, but I did come up with all of these off the top of my head.
Jail and prison are the adult version of being sent to your room when
Re:Why jail? (Score:2)
While I'm in full agreement with your feelings, the trouble with that form of punishment is that it is impossible for an individual person to legally generate the level of capital required for complete restitution. So they do what they think they can do to get the money as quickly as possible, and get stuck into another round of theft to pay off the debts from the first round. Do we really want tha
Re:Why jail? (Score:2)
Granny getting goat porn is wrong, her retirement (and tens of thousands of others) being wiped out, a thousand times worse.
Not saying this guy shouldn't do time though.
That's quite a feat. (Score:3, Insightful)
The truth of the matter is... (Score:4, Insightful)
I mean seriously, you expect me to believe that AOL has 92 million paying customers?
Honestly if I were a spammer, I'd only pay half price for AOL addresses, the odds of someone reading your email (especially after filtering) is nearly zero.
Re:The truth of the matter is... (Score:3, Insightful)
Re:The truth of the matter is... (Score:5, Informative)
Not if you'd RTFA, and noticed where it said "The stolen list of 92 million AOL addresses included multiple addresses used by each of AOL's estimated 30 million customers."
Re:The truth of the matter is... (Score:2)
a quote from Heavy Metal popped into my head (Score:4, Funny)
Indeed.
Lemme get this straight (Score:5, Interesting)
Read TFA (Score:5, Insightful)
Re:Read TFA (Score:2, Funny)
Who picks the nitwits?
Hate to break your bubble, but... (Score:3, Insightful)
There is no such thing as purely objective justice, where the sentence is just spat out based on a formula. (Just feed the crime in, have a computer churn a few seconds, spit out the exact number of days in jail.) It's not even supposed to work that way.
As for who picks the nitwits, that's
Re:Read TFA (Score:4, Informative)
Mitnick was charged for crimes spanning 15 years and four different trials starting in the early eighties and finishing in the late 90s. That he generates so much undeserved sympathy has to be the ultimate meme.
Re:Lemme get this straight (Score:4, Insightful)
I hate to take Kevin's side on this because his actions were illegal and immoral. However, it's very important to accurately appraise the costs (financial, emotional, cultural, etc.) of a crime. If the costs are exaggerated then justice is miscarried, tax money is misspent, the public is misserved, and third parties--such as policy makers, security analysts, and insurance companies--are misinformed.
The $2.1 billion number represents the cost to make the software. If Mitnick merely made an unauthorized copy, burned it to CD, and shoved it in a drawer somewhere, what part of that $2.1 billion did the companies lose? None. Nada. Business would continue uninterrupted.
Alternatively, suppose that Mitnick managed to destroy every copy of the software that the company owned. That would make the $2.1 billion a much more accurate assessment. The business could go bankrupt.
And then there's the middle ground... what about leaking secrets to competitors or providing binaries to black-market distributors? These are things that chip away at that $2.1 billion, but it's unlikely they erode it completely.
Of course, we haven't discussed administrative costs associated with mopping up and responding to the Mitnick incidents. We haven't factored in the intangible losses to privacy or even the hidden gains that might have come from the crime (e.g., if benign criminals attack you early and force you to beef up your security before the truly malignant ones arrive, haven't you inadvertly made money?)
A true valuation is perhaps impossible, but we can be more accurate than to assume that the unauthorized copying of private/proprietary information is directly equivalent to the theft of physical goods.
What's his cellmate's name and address? (Score:5, Funny)
All in the name of poetic justice.
Re:What's his cellmate's name and address? (Score:5, Funny)
It should be here any day now...
Re:What's his cellmate's name and address? (Score:2, Funny)
Re:What's his cellmate's name and address? (Score:2)
Just curious (Score:4, Interesting)
Anybody?
Re:Just curious (Score:2)
Conspiracy (Score:3, Informative)
Everyone All At Once Now... (Score:4, Funny)
Re:Everyone All At Once Now... (Score:2)
"You've got Jail !" [dailyfeed.com]
(from the daily feed [dailyfeed.com])
Camp Cupcake (Score:3, Funny)
Oh come on... (Score:2, Interesting)
Re:Oh come on... (Score:2)
Making $28,000 from a fool who is setting up an offshore gambling site.
Dictionary attacks are smarter than that (Score:3, Informative)
Re:Oh come on... (Score:2)
Thats why there is Cc and Bcc
15 months is all he got?!? Opinion folks - fair? (Score:3, Interesting)
There are a lot of hardcore hackers that got a ton more time than that.
Tell me what you think?
Re:15 months is all he got?!? Opinion folks - fair (Score:3, Insightful)
Everyone understands the notion of an employee stealing personal information from their company. On the other hand, the average
American has no clue how hardcore hackers do what they do, or what they are capable of and so naturally hackers are feared. They are the "boogey man" of technology.
Re:15 months is all he got?!? Opinion folks - fair (Score:3, Interesting)
bfd (Score:4, Interesting)
- more effective, since all of the addresses you gather are known good
- cheaper, since you can get millions of addresses a week then cancel your free trial
- less risky
A spammer that pays that kind of money for such a seemingly worthless list of stolen addresses should look for another line of work.
Time for Master Card Ad: (Score:5, Funny)
Cost to have CompUSSR repair your PC from spyware: $150
The look on the spammer's face as he see "Bubba" get a penis enlargement spam: Priceless
There are some things money can't buy, for everything else there's KARMA!
Russian Spammer's Meet The Proper Fate (Score:2)
I must say, that fate should befall all spammers...
He got 15 months? (Score:5, Funny)
Is Jason Smathers considered to be... (Score:3, Funny)
Take a look at his photo so you'll know what I mean....
Next (Score:4, Insightful)
OK - no chance of the government being that smart... but it would be nice.
Comment removed (Score:3, Funny)
Welcome (Score:5, Funny)
Make him apologize (Score:3, Interesting)
By hand. One at a time.
If courts started making spammers do this instead, it'd be a much better deterrent than jail, and it would much better fit the crime.
And yet, one still walks free (Score:3, Informative)
But they didn't get Heather Robinson [lowculture.com], the former AOL staffer [go.com] who stole celebrities' screen names [wired.com] and worked those "newly found contacts" into various movie deals.
One is a criminal; the other is an "up and coming screenwriter". Obviously there is no consistency in how AOL deals with employee violations.
Re:Please don't call him an "engineer" (Score:2, Insightful)
And most of the people with titles like "software engineer" put just as much time, effort, and money into getting their computer science degrees.
I'll take "software engineer" off my business card as soon as I see engineering professors stop referring to themselves as "Dr.".
Re:Please don't call him an "engineer" (Score:3, Interesting)
And I put just as much time, effort and money into getting my physics degree, but that doesn't make me an engineer. I have friends who similarly invested in their arts degrees - would you call them engineers?
Re:Please don't call him an "engineer" (Score:3, Interesting)
What makes it not an engineering degree?
I have a BSCS from an engineering school. At an engineering school, the curriculum is basically the same for all students up to junior year. For instance, I took the same science and math courses as the rest of the engineering students. I had to take the same number of science courses as the EEs, and more math courses than the EEs. Some of the more advanced courses ar
Re:Please don't call him an "engineer" (Score:4, Insightful)
Don't stow thrones in grass houses.
Re:Please don't call him an "engineer" (Score:4, Informative)
Yes I am.
Re:Please don't call him an "engineer" (Score:3, Insightful)
You may notice certain words in there like "scientific" or "mathematical". So, sad to say, an ex-burger-flipper who faked a resume and copies-and-pastes from tutorials he doesn't even _understand_, doesn't fit that defi
Re:Sentencing (Score:2)
Nah, that would turn them into "hardened criminals".
Re:KARMA WHORE. (Score:2)
Re:Ahh.... (Score:5, Insightful)
Also I guess I missed where the judge included "rape" in the 15 month jail sentence.
Internet tough guys, huh?
Re:Ahh.... (Score:2)
no I lose
Re:Ahh.... (Score:2)
:-) I hope you too get assraped :~P (Score:5, Informative)
-A letter to Human Rights Watch
Prison rape is funny again, guys!
Re::-) I hope you too get assraped :~P (Score:4, Insightful)
Re:Well, see, that's just the point (Score:3, Insightful)
but to claim that being violently raped, repeatedly, is an acceptable repayment to society for any crime, is a sign that some people here need to unplug a bit. If you get more bent out of shape over spam than large
Re:Jason Smathers (Score:5, Funny)