Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Why San Francisco's network admin went rogue

By Paul Venezia , InfoWorld , 07/21/2008
  • Share/Email
  • Comment
  • Print

Last Sunday, Terry Childs, a network administrator employed by the City of San Francisco, was arrested and taken into custody, charged with four counts of computer tampering. He remains in jail, held on $5 million bail. News reports have depicted a rogue admin taking a network hostage for reasons unknown, but new information from a source close to the situation presents a different picture.

In posts to my blog, I postulated about what might have occurred. Based on the small amount of public information, I guessed that the situation revolved around the network itself, not the data or the servers. A quote from a city official that Cisco was getting involved seemed to back that up, so I assumed that Childs must have locked down the routers and switches that form the FiberWAN network, and nobody but Childs knew the logins. If this were true, then regaining control over those network components would cause some service disruption, but would hardly constitute the "millions of dollars in damages" that city representatives feared, according to news reports.

Apparently, I wasn't far off the mark. In response to one of by blog posts, a source with direct knowledge of the City of San Francisco's IT infrastructure and of Childs himself offered to tell me everything he knew about the situation, under condition that he remain anonymous. I agreed, and within an hour, a long e-mail arrived in my in box, painting a very detailed picture of the events. Based on this information, the case of Terry Childs appears to be much more -- and much less -- than previously reported.

A man and his network
It seems that Terry Childs is a very intelligent man. According to my source, Childs holds a Cisco Certified Internetwork Expert certification, the highest level of certification offered by Cisco. He has worked in the city's IT department for five years, and during that time has become simply indispensible.

Although Childs was not the head architect for the city's FiberWAN network, he is the one, and only one, that built the network, and was tasked with handling most of the implementation, including the acquisition, configuration, and installation of all the routers and switches that comprise the network. According to my source's e-mail, his purview extended only to the network and had nothing to do with servers, databases, or applications:

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comments (22)
Login
Forgot your account info?

Part of reason..By tuomoks on September 29, 2008, 1:51 amI think the main reasons are panic, incompetence, politics, etc. The first thing in any security is a continuance plan - what if.. Done this 35+ years and never,...

Reply | Read entire comment

Protecting a network from less-than-smart people.By Gregg E. on September 28, 2008, 11:45 pmI have some experience with what can happen to a network when someone does something astoundingly stupid. One place I worked in the mid-90's had just upgraded...

Reply | Read entire comment

He's not doing the best thing for the city.By danbrks on September 12, 2008, 2:56 pmI have worked on several large networks in my career. I also put my heart and soul into the design and implementation. I spent many hours on my own working on...

Reply | Read entire comment

Re: Geek on IslandBy IT_Guy on July 24, 2008, 6:34 pmWhat!? We would appreciated a little objectivity here. Your comment is completely off base, having little to do with the subject matter. We are talking about a single...

Reply | Read entire comment

Only reason he's in jail is because it was a city network.By LabRat on July 24, 2008, 5:20 pmAnd guess what? The city has a jail. If this had happened in a private enterprise, we probably would never have heard about it. I get calls from new sysadmins all...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Network World,to go. Wherever you are. Breaking news delivered to your mobile device. Select the hottest topics in networking and start receiving Network World on your mobile device today.