Feeds

Criminal case against ORBZ spam blacklist dropped

Battle Creek holsters legal guns

  • alert
  • submit to reddit

Top three mobile application threats

The City of Battle Creek, Michigan, has agreed not to pursue criminal charges against the administrator of spamlisting blacklisting service ORBZ, which led to the withdrawal of the service earlier this week.

The move lets Ian Gulliver, the administrator of ORBZ.org, off the hook for allegedly causing a major slowdown of its mail server in the course of testing for open mail relays, which are often used as a tool by spammers.

According to a statement issued by Battle Creek, the city initially suspected criminal mischief when tests conducted by Gulliver triggered a weakness in the version of Lotus Domino software used by the City. The tests caused a major slowdown of the City's email network for about a day on February 25.

It called the police who served a search warrant on Gulliver, a 20-year-old systems administrator from New York state, who fearful of the consequences of criminal charges, pulled the plug on ORBZ.

Doubtless that helped to convince Battle Creek (the home of Kellogg's) that he had no criminal intent, prompting it to drop charges.

It seems doubtful if the ORBZ blacklist will be restored to operation even though the threat of criminal charges has been lifted. Many Regsiter readers have written to us criticising ORBZ's methodology.

But what about the Lotus Domino security issue?

Last August, Gulliver sent a message to the BugTraq mailing list stating that the ORBZ scanner creates "oddly formed mail envelopes that can cause Lotus Domino to enter a mail routing loop" resulted in the crash of a mail server.

The issue, which we're told was never particularly serious, was fixed with Lotus Domino version R5.0.9 last September. With normal anti-relay configuration in place, the exploit didn't work anyway, Notes administrators have told us.

Apparently Battle Creek failed to update its servers in a timely manner, so it came a cropper in February. It has now fixed the problem, and pledged to review its security policies to learn lessons from its email outage, and prevent a reoccurrence. It said it now recognises that Gulliver "has done us a service", though it has criticisms of his actions.

"We are going to be taking a close look at our policies regarding Lotus security updates and how we can avoid the issue in general," said Michelle Reen, Assistant to the City Manager.

"In turn, however, we have asked him [Gulliver] to reconsider his policy of making unannounced tests on servers. In today's computerised world it is everyone's responsibility to maintain a secure system."

"But, if I can draw the analogy that just because everyone should wear a computerised bullet-proof vest doesn't mean that shooting people to find out who isn't wearing one is the best answer," she added. ®

Related stories

ORBZ shuts up shop, cites criminal charges
ORBS now split into three
ORBS splits into ORBZ and ORBL
Junk mail costs lives

The Essential Guide to IT Transformation

More from The Register

next story
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
You! Pirate! Stop pirating, or we shall admonish you politely. Repeatedly, if necessary
And we shall go about telling people you smell. No, not really
Airbus promises Wi-Fi – yay – and 3D movies (meh) in new A330
If the person in front reclines their seat, this could get interesting
UK Parliament rubber-stamps EMERGENCY data grab 'n' keep bill
Just 49 MPs oppose Drip's rushed timetable
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
Samsung threatens to cut ties with supplier over child labour allegations
Vows to uphold 'zero tolerance' policy on underage workers
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
prev story

Whitepapers

Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.