Guilty Plea in AOL Engineer's Address Theft Case 219
ScentCone writes "Jason Smathers, a former AOL software engineer has pleaded guilty in his theft of 92 million in-house account screen names. He'll be paying $200-400k, and serving a year or two of federal time. Smathers used another employee's account to steal the data, and sold it to a Vegas-based online casino operator. Interestingly, one of the charges was 'interstate transportation of stolen property.'"
That's federal pound me in the ass prison. (Score:2, Funny)
Re:That's federal pound me in the ass prison. (Score:1)
Awww crap!
Re:That's federal pound me in the ass prison. (Score:3, Interesting)
Why don't we just go to a system of corporeal punishment, like in Singapore? At least there, the amount of physical punishment you take bears some relationship to the crime you've committed, whereas in our system you're punished according to your physical strength, ability to join a gang, etc. that have nothing to with the severity of the crime you've committed.
If you think prison rape is jus
Prison is a place of punishment (Score:1, Insightful)
Quite frankly, I don't care what goes on in there as long as people fear getting into one. Fucking ream the shit out of the murderers and child rapists with broomsticks and they'll never rape again.
Re:Prison is a place of punishment (Score:2, Insightful)
Uh, who do you think is doing the raping? Nuns with dildos? It's murderers and rapists plying their trade in the big house.
Re:Prison is a place of punishment (Score:4, Informative)
Not necessarily. There are a number of philosophies regarding the reason for prisons; other than punishment, prisons can be said to be places of rehabilitation, places to simply remove the dangerous element from society, and probably other things.
Re:Prison is a place of punishment (Score:2, Informative)
Re:Prison is a place of punishment (Score:2)
Anyone who has taken PSYC101 will tell you that punishment only works when it is temporally near the behavior that it is trying to change.
Prison is about control, revenge, instilling fear in others so they won't do the same thing, and the feeling that the bad guys are "off the street", but it has nothing to do with punishment.
Re:Prison is a place of punishment (Score:2)
Anyone who has taken PSYC101 will tell you that punishment only works when it is temporally near the behavior that it is trying to change.
That only holds true for lab rats and freshmen. Other people are able to understand the consequences of their actions once they have been taught.
Re:Prison is a place of punishment (Score:5, Insightful)
Re: (Score:2)
Re: (Score:2)
Kevin Mitnick may agree (Score:2)
i know a million other people face the same thing, but his is a case most people here should know about.
Re:Prison is a place of punishment (Score:2)
Is it proportionate to the crime that a *non violent* criminal should be subjected to rape and the possibility of HIV infection? That's not justice, that's barbarism.
Yes - the guy should be punished. No - he shouldn't be subjected to violent rape.
Re:Prison is a place of punishment (Score:3, Insightful)
But cop-killers are at the top of the heap, and are looked up to. They don't take kindly to -some- types of f'ed up behavior, and very kindly to others. Please don't make it out as though jailhouse beatings and rape are meted out according to the severity of the prisoner's crime-they're generally meted out according to opportunity and physical strength, or lack thereof.
Such a danger (Score:1, Insightful)
Re:That's federal pound me in the ass prison. (Score:2, Insightful)
Actually, the 1 to 2 year sentence was way too light, IMO. Something more along the line of a public (televised) hanging or draw-and-quartering (or perhaps more toward your tastes, impalement.)
While I really dislike spam, since people who murder children [wave3.com] (no it's not about abortion) often get no prison time, it really seems a little severe. Is spamming 100 million people worse than murdering one child? Is that the Slashdot ethos?
Interstate? (Score:3, Insightful)
Re:Interstate? (Score:1)
Re:Interstate? (Score:1)
http://www.lectlaw.com/def/i061.htm [lectlaw.com]
Re:Interstate? (Score:5, Insightful)
"If he was charged with 'interstate transportation of stolen property', does that mean that he printed out all 92 million screen names and took them in his car across state borders?"
Doubtful. A sometimes common perception among Slashdotters is that the law is immutable and easily defeated by technology, but a look at how the law has changed over the past several hundred years shows that the law does eventually catch up. It's my understanding that interstate transport can now include e-mail as well as the historic methods of postal mail and, as you've mentioned, cars. And, of course, you probably already knew that that database is AOL's property whether it's printed or not.
Other examples: it took several years after the advent of motion pictures before copyright law caught up with them. There were a few years in which films weren't copyrightable, but the law did catch up. When the first cars started being built, there were no vehicle codes (or if there were, they covered things like carriages), but the vehicle codes eventually caught up. And, for most of our history of copyright law, it was basically legal to redistribute copyrighted material without compensation; the law didn't need to cover this because it was simply impractical to print a thousand books and give them away for free. When technology began allowing somebody to put a file on an FTP site and allow widespread duplication, copyright law finally caught up several years later, in the form of the NET act.
Re:Interstate? (Score:2)
It's a tangible copy of a video on your CD. The blank media is your property. You don't have the right to copy the video.
He didn't take the database servers themselves. That would be stolen property. Assuming he copied the database to his own CD-R, there was no property removed from the premises of AOL. This falls under the umbrella of intellectual pr
Deserved it (Score:2, Interesting)
I'm not sure how he's going to pay $200k+ though.
Re:Deserved it (Score:5, Funny)
Re:Deserved it (Score:1)
Re:Deserved it (Score:2)
Re:Deserved it (Score:2)
I guess I should have been more clear. What I said is true, just not in every state.
Clearly, WA is not one of the states where it is true.
Re:Deserved it (Score:2)
The preceeding was a sarcastic comment. I do not actually know what he got for the list. Half a nice day.
Intellectual property (Score:2)
Re:Intellectual property (Score:2)
The anarchist retard comment of the day (Score:2)
Who the hell are you or anybody else to say what's a crime and what's not, not to mention what's a "suitable punishment"? Can't take care of yourself? Buy a gun and shoot the bastard. Hell, even 90 year old granny can do that. Can't buy a gun legally? Shouldn't have given up your rights...
Thank you for the anarchist retard comment of the day.
You've got jail! (Score:5, Funny)
Later in the prison showers... (Score:4, Funny)
Re:You've got jail! (Score:1)
Office Space currupts (Score:1)
What? (Score:3, Interesting)
Re:What? (Score:2)
I'm pretty sure that was deamed legal and that which BT could copyright their phone books, the information therein was (in general) in the public domain.
I dont doubt he abused his employment contract, but this seems like a very tenuous description of stolen property.
Re:What? (Score:2)
Are you sure about that? I am not aware of any case that makes a general database of public domain data copyrightable. In fact, the leading case in this area is Feist v. Rural Telephone, where one company got the other guy's phone book, copied all of the info, and published their own phonebook, and the Supremes held it to be not copyright infrin
28K for that kind of list? (Score:1, Funny)
That guy should have asked for much more than that... like if a casino was short on cash! Omni
I'd like to know (Score:5, Interesting)
Maybe, they'd learn that when spamming, the sysadmin wins.
Re:I'd like to know (Score:2)
Really? I sure don't feel that way watching my mail queues and trying to convince users that the spam filter is not out to get them...
We have to make it so. (Score:1)
Look at http://www.pcworld.com/news/article/0,aid,119011,
Re:We have to make it so. (Score:2)
Obvious (Score:1, Insightful)
Can we really say anything more than 'well deserved'?
Do we know for how much he sold the stolen list? I supe hope for him its more than 400k... but I doubt it!
Re:Obvious (Score:5, Informative)
We who RTFA do.
$28,000
Re:Obvious (Score:2)
I hope you remember you said that when the government locks you up for violating interstate commerce laws because you downloaded some warez from the next state over. Copying and selling the information in a private database is bad, but there is no way that it is worth setting a new and dangerous legal precedent just to get this asshole a couple extra months in jail.
Re:Obvious (Score:2)
Downloading is one thing. Downloading and selling is quite another.
Re:Obvious (Score:2)
Re:Obvious (Score:2)
"Copying and selling the information in a private database is bad, but there is no way that it is worth setting a new and dangerous legal precedent just to get this asshole a couple extra months in jail."
Can you explain what the precedent is here? Over the past decade I've seen dozens of similar cases involving confidential and proprietary information. Before it was e-mail lists, it was snail mail lists. Typically the information is sold to, or taken to, a competitor. Here, it was sold to a spammer.
I'm sorry, but this is crap... (Score:3, Insightful)
Re:I'm sorry, but this is crap... (Score:5, Informative)
I know it's a chore to actually read the article, but:
"Smathers told the judge that he accepted $28,000 from someone who wanted to pitch an offshore gambling site to AOL customers, knowing that the list of screen names might make its way to others who would send e-mail solicitations."
It's not like he is an innocent party in this.
"Smathers allegedly sold the list to Sean Dunaway, of Las Vegas, who used it to send unwanted gambling advertisements to subscribers of AOL, the world's largest Internet provider. Charges are pending against Dunaway."
Say what you want about AOL, but they do appear to be going after these clowns.
Thats it?! (Score:2)
This guy has 'Capital Punishment' written all over him.... he got off lite!!
mandatory restitution? (Score:5, Interesting)
Smathers is only paying "the amount the government estimates AOL spent as a result of the e-mails," which is that $200,000 to $400,000. Is our government unable to represent those who suffered significantly more harm than AOL, the people?
Sufferers may primarily be AOLamers and maybe all of us here will laugh that off to some extent, but consider "The stolen list of 92 million AOL addresses included multiple addresses used by each of AOL's estimated 30 million customers. It is believed to be still circulating among spammers." AOLamers or not, these are our grandparents and grade school teachers; training-wheeled users who if anything, need more protection than we do.
This penalty does them no good, whatsover. TFA makes it clear that a signficant number of them are still getting ruined by the crime, as_we_type. IANAL; can someone add whether "the people" can expect to be served a piece of Smathers?
If this is it, it sure as hell isn't what I'd call "restitution." Anyone want to wager that we also get nothing out of Sean Dunaway, the guy to whom Smathers sold?
BG
Re:mandatory restitution? (Score:4, Insightful)
2 quick points
Re:mandatory restitution? (Score:2)
You seem to be making a common mistake, anthropomorphizing AOLers.
At least you put the term in quotes, to indicate you are using a non-traditional or alternate meaning.
the AC
Bad, bad lawyer! (Score:3, Informative)
'transportation of stolen property'
More like 'transportation of copied property'.
No such law.
Re:Bad, bad lawyer! (Score:1)
I'm sure the terms of use of AOL's corporate networks indicate that all information contained on their computer systems are property of AOL.
This, then, would mean that whether he had an electronic file, had written down each address, a hardcopy listing, whatever...it was property of AOL. He stole that information.
But that's just my take on it, and i'm dumb.
Life is simple, people make it complicated
Re:Bad, bad lawyer! (Score:2)
I doubt he stole anything, or transported stolen property across state lines.
Stealing would have entailed taking the data from a source within AOL and wiping that source clean.
Re:Bad, bad lawyer! (Score:2)
"I doubt he stole anything, or transported stolen property across state lines."
According to the letter of the law, he did. The transport likely happened when he e-mailed (or snail mailed) the file to Nevada.
"Stealing would have entailed taking the data from a source within AOL and wiping that source clean."
I think you're mixing the colloquial and the legal definitions here. The legal world has a different, and often broader, definition of the words "theft," "stolen" and the like. For example, "
Sue AOL? (Score:2, Interesting)
Re:Sue AOL? (Score:2)
But then, you never know. You should try it and tell us how it works out.
Interstellar transportation of stolen property!! (Score:1)
Yikes! At first glance that's what I read.
Thinking about it though, (while not really stolen property) he could do that but it would take at least 4 years for the act to occur.
Punished? (Score:4, Funny)
18-24 Months? (Score:3, Insightful)
I have the ability and resources to do these things but many internet users do not. While I don't have an AOL account, I still think he should have received more hard time. Put him away for a long time, maybe his cell mate will be a disgruntled AOL user who lost it after getting "one too many spams".... make other spammers and their helpers think twice.
Re:18-24 Months? (Score:2)
While Spamassassin is awesome for filtering, I'm still upset at the lack of action taken by the government to address the 143,000 connections in your example; just because it was blocked doesn't mean that the spammers aren't causing "damage" in wasted bandwidth and computing cycles.
Wrong charge (Score:2)
Re:Wrong charge (Score:2)
He sold it? (Score:4, Insightful)
I haven't heard anything against the Vegas company that purchased this information. Why is it OK for a company to carry out these acts but if a citizen does the same acts, he/she is fined a few hundred grand and sent to jail for a year or two?
Re:He sold it? (Score:2)
Well, according to TFA, "yes".
Re:He sold it? (Score:2)
This claptrap gets modded as "interesting"? That's an interesting tinfoil hat, anyway.
AOL (Score:3, Funny)
LOL@FEDERAL PRISON (Score:2, Interesting)
XP PR0, AD0BE, 0FFICE 2OO3 & ALL FOR INSTANT D (Score:2)
----35977.08538_20228509
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
fibration crankshaft spatial
perfecter conjure
downey happenstance aromatic charley gubernatorial
----35977.08538_20228509
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 8bit
Actual spam message
----35977.08538_20228509--
Re:For Chrissake, Slashdot (Score:3, Insightful)
Re:For Chrissake, Slashdot (Score:5, Funny)
Re:For Chrissake, Slashdot (Score:2)
Quack!
Re:For Chrissake, Slashdot (Score:4, Insightful)
$400k for 92 million screen names? That's less than a half-cent per compromised screen name- what a deal! The year in prison is on top of that but that's probably on the order of magnitude of about $500k (judging from how much you'd have to pay me to go) so we're still at less than a cent per screen name. Ask anyone whose screen name was compromised, with a punishment of less than a cent. This guy got off easy.
For christ's sake, spam is NOT that big of a deal.
Yes it is.
Re:For Chrissake, Slashdot (Score:2, Interesting)
Hey man, you and the rest of the hang the spammers crowd need to realise that it cuts both ways. If you want a free and open Internet you have to accept the spam. Don't like spam? Then don't give out your E-mail address to people likely to spam you. Still get spam? Write yourself a spam filter.
I don't like spam, but I'd rather have spam than an over-regulated Internet and I think that spending 5 minutes of my time each day dealing with the spam that gets through the filters is much better than so
From what I can gather... (Score:2, Interesting)
Re:From what I can gather... (Score:2)
How about standing in a room with the teenager who claims to really like the music (enough to seek out a way and take the time to download it), and the artist who created the music. The teenager has to say to the artist, in so many words: "I like your stuff enough to go to some trouble to get it, but not enough to pay you to entertain my with it. Oh, and you have no choice in the mat
Re:From what I can gather... (Score:2)
Why put that in quotes? If the person who creates the material wants to assert their ownership of it, is there any ambiguity? No more than there is if AOL asserts ownership of their operational databases.
Not paying for something (which its owner has said he thinks you should pay for) that you none the less take anyway... that's avoiding a cost, and that's profiting. But why split hairs? Just because you want to give away your own musical creations doesn't mean that you
Re:From what I can gather... (Score:2)
Ah, well, if Karl Marx says so, then it must naturally be correct. You can tell by the fantastic, peaceful, prosperous societies that followed his advice. Of course, the ones that did, and have since managed to provide a decent standard of living and some growth in those countries' overall capacity for their people have... shifted back over to private property. Which, of course, makes sense. Without any prospect of taking that which your do with your time and ma
Re:From what I can gather... (Score:2)
Right... because people have the good or bad luck to be born more or less capable than other people, or in the middle of circumstances more or less desirable/likely (weather, geography, local customs, etc) to result in great opportunities. What Marxism does, though, is ensure that no one has opportunity towards their own ends, and by their own standards. Free trade between people and groups of people does not include "little" wars or any other kind. W
Re:But wait... (Score:4, Interesting)
" Its not theft, right? AOL wasn't deprived of any property!"
If you use the Slashdot groupthink definition of "stolen property," well then sure. You often see this come up in Slashdot discussions regarding copyright protection. Nonetheless, in the world of trade secrets, mailing lists, and the like, these are the terms that are used. If you leave a company and take with you a copy of a customer list, trade secret, or other confidential or proprietary information, you cannot use the "the company still has a copy so I didn't deprive them of anything" defense. In the real world, this claim can get you a +5, Astute from the Slashdot crowd, but that's about it.
Re:But wait... (Score:1)
Re:But wait... (Score:2)
U.S. Courts, U.S. Law: If the law says its property, its property.
That's why the courts come up with all of these crazy rulings that slashdotter's just can't seem to get their heads around...
Re:Wait (Score:2)
Federal prosecutor David Siegal said Smathers had engaged in the interstate transportation of stolen property and had violated a new federal "can-spam" law meant to diminish unsolicited e-mail messages about everything from Viagra to mortgages.
Re:Wait (Score:4, Insightful)
"As I understand it Facts are not copyrightable. A huge list of email addresses is just a big list of facts. If they can't have a copyright on the list of email addresses they can't assert that they've been stolen."
I'm not sure how you made that last logical connection. This isn't a copyright infringement case; it's one of trade secrets and proprietary information. This is the modern equivalent of the old days where somebody might sneak out a big list of customer names and snail-mail addresses -- they're not copyrightable either, but it sure as hell is legally actionable.
Re:Wait (Score:4, Informative)
In aggregate, as a collection, they are... (Score:2)
OpenBSD is FOSS, but you can't make ISOs of the official CDs and sell them because Theo holds copyright of the particular way the CD is laid out. You can make your own CDs/ISOs, with the same data, but not just copy his image.
The OpenBSD project does not make the ISO images used to master the official CDs available for download. The reason is simply that we would like you to buy the CD sets, helping fund ongoing OpenBSD developmen
Re:Stolen? (Score:3, Informative)
You can't infringe a trade secret. You can steal a trade secret, you can misappropriate a trade secret, but you can't infringe a trade secret.
Re:Stolen? (Score:2)
Which is kinda my original question: if the company still has the original information and only loses their exclusive ownership and distribution ability, then has the information been stolen?
It's the same situation with copyrighted materials: you didn't steal the material, you took away their exclusive right to copy. So why isn't that called "stealing"?
Re:Stolen? (Score:2)
There is a difference between trade secrets and copyrights (and patent and trademarks) that may not be obvious. With Copyrights, patents, and trademarks, you are being given an "extra" right (or extra set of rights) that you don't get wi
Re:Stolen? (Score:2)
My assertion may be "unfounded" based on whatever dictionary you used, but it is not "unfounded" based on my experience with trade secret law.
Re:Stolen? (Score:2)
"Now that I ponder the question, I believe a complaint stating infringement of a trade secret would be sufficient to meet notice pleading requirements under federal rules."
That's probably true, but, unlike patent, copyright and federally-registered trademark infringment actions, trade secret actions are generally taken up in state court, which is why I suggested that YMMV.
But you are right, I wasn't very clear -- I was discussing the realities of a legal action, and
Re:Stolen? (Score:2)
""Stolen," as used in National Stolen Property Act, is not term of art and instead is broad in scope with wide ranging meaning. U.S. v. Pre-Columbian Artifacts, N.D.Ill.1993, 845 F.Supp. 544."
I didn't read this case, but my guess is this suggests that the dictionary defintion of "stolen" may not be controlling for the purpose of this statute.
"Proprietary information stolen from telep
Re:Stolen? (Score:2)
Interesting stuff there about hackers and the like. This stuff we've been talking about is a bit out of my area, I spend most of my time litigating and prosec
Re:Menace Off The Street (Score:2)
Well, considering that guys like this literally keep system admins up at night (not sleeping better) as they clean up after the billions of pieces of trash that his "customer" sends out, choking up businesses and private e-mail accounts... fewer of him, and I'd actually, literally sleep better. As for the brick-smashing guy, well, that really sucked. Also, the guy that broke into my car and stole my LAN tools deserves to actually, truly
Re:Just the Fed Out of Control (Again...) (Score:2)
So, what would this thief have to do in order to pass your test of righteousness? Maybe... kill a security guard while stealing the company data? Or is that still OK? Where do you draw the line? Or is theft OK, as long as you're not actually putting someone in the hospital?
Re:Copied, not stole (Score:2)
Not so. The block of data that he stole amounts, by any reasonable standard, as proprietary information and trade secrets. If he had stood there and photocopied customer data, it would have been the same story. His intent is almost beside the point - he knew h