top | item 605525

Porn at work = felony hacking?

31 points| knieveltech | 17 years ago |wired.com | reply

30 comments

order
[+] briansmith|17 years ago|reply
This is a huge deal. If your company has an acceptable use policy then you could be convicted of a felony for something as benign as checking Facebook or Twittering. That is insane.

You might say "my company has no official policy, so it can't happen to me." Wrong. Accroding to this ruling, you are a felon for doing anything on any computer, unless you were expressly authorized to perform that action on that computer. From the article:

'He added that the city had never actually disseminated a policy regarding internet usage to tell workers what was inappropriate.

'"They had crafted one but they hadn’t published it," he said. "So there was in effect no policy and no protections on the computer--no password protection or filtering of any kind--so basically anybody could access anything on the internet through the city’s computer."'

[+] dreish|17 years ago|reply
Realistically, as mynameishere points out below, they were able to get a jury to convict him because he was doing some genuinely nasty things -- things no half-sane person would do at work, including soliciting prostitutes. It looks like a terrible injustice when you carry it to the logical conclusion, but realistically you would not be able to get a jury to convict someone for twittering at work, nor would a prosecutor ruin his career by pursuing a case like that.

This is just another example of, "Okay, we found a bad guy, now what laws can we use to nail him?" I don't think it's especially uncommon, and it is one reason juries are so important: they're the first line of defense against the unreasonable application of unreasonable laws.

[+] knieveltech|17 years ago|reply
We can only hope some sanity will be injected into this process as the case proceeds through the higher courts.
[+] jmatt|17 years ago|reply
If your company has an acceptable use policy then you could be convicted of a felony for something as benign as checking Facebook or Twittering.

I'm technically breaking our never-enforced acceptable use policy right now by posting on News.YC.

I wonder if it only takes an over-zealous DA or if the company has to be complicit. Ok I'm aware I'm not using complicit appropriately - it's intentional. This is crazy. This guy had some REALLY bad judgment, but this amounts to the government being thought police.

[+] anigbrowl|17 years ago|reply
Don't agree. The law is interpreted, not compiled; this is one possible interpretation of what I admit is a farily broad statute.

But let's be realistic here, if you twitter your other half with 'working late, will eat from freezer xxx snookums' no jury is going to hold that against you. Uploading >700 porn pictures at work, even of your own sexy self, is asking for trouble. You're laying your employer open to all kinds of liability, to say nothing of it not being anything like what they pay you for unless you're in the porn business.

The guy is irresponsible, lacks common sense, and is trying to wriggle off the hook on a technicality. Let's not make a hero out of him, and let's not extrapolate the worst possible future from a single case, because the likelihood of anyone going to jail for checking the sports results or reading Google news on the office computer during lunch hour is vanishingly low.

It's this kind of stupid 'but nobody told me I shouldn't' bullshit that leads to the imposition of idiotic HR policies in the first place.

[+] old-gregg|17 years ago|reply
Back in late 90s I knew a guy who hated his job so much that instead of programming enterprise apps in Java he started running his own porn site on company servers.

When IT finally discovered this, they shot it down immediately and reported the incident to HR. The dude, however, was so ignorant that he called internal (!) IT support and complained that one of his servers in company data center wasn't responding.

He got fired.

That allowed him to work full time on his new business and he advanced to moving to California and opening his own production studio. Here's another entrepreneurial story for you all.

[+] gustavo_duarte|17 years ago|reply
Incredible. From his appeal:

"one count of unauthorized access to a computer, with a specification that the value of the property or services stolen was more than $500 and less than $5000, in violation of R.C. 2913.04(B), a fifth degree felony;"

I'm not sure how they calculate the 'value of property or services stolen'. One could buy a laptop for under $500 and surf the web, no?

The appeal also quotes the law he supposedly broke, R.C. §2913.04:

"No person shall knowingly use or operate the property of another without the consent of the owner or person authorized to give consent." and

"No person, in any manner and by any means (...) shall knowingly gain access to (...) any computer, computer system, computer network, (...) without the consent of, or beyond the scope of the express or implied consent of, the owner of the computer, computer system, computer network (...)"

As briansmith points out, you could be a felon for twittering from a work computer based on this law plus the wacky damage assessment.

Of course, the reason this guy was nailed so hard is because he was using Adult Friend Finder. If he'd been on a cross stitching site or on ebay, he would not have been prosecuted this hard or convicted of hacking by a jury.

[+] dkokelley|17 years ago|reply
I'm not sure how they calculate the 'value of property or services stolen'. One could buy a laptop for under $500 and surf the web, no?

The services stolen in this case are the employee's paid for time. By surfing porn on city time he was depriving the city of $500-$5,000 worth ($2400, it looks like) of their employee's time. Ridiculous, I know.

From the article: "...theft of services in office (essentially for depriving the city of his paid services while he conducted the unauthorized activities on a city computer on city time)"

[+] mynameishere|17 years ago|reply
The best practice is to remote into your home computer.
[+] jonursenbach|17 years ago|reply
Not really, you're still using your computer for things that you shouldn't be using it for.
[+] anigbrowl|17 years ago|reply
The best practice is to conduct your sex life at home instead of the office.