Feeds

Criminal case against ORBZ spam blacklist dropped

Battle Creek holsters legal guns

  • alert
  • submit to reddit

Boost IT visibility and business value

The City of Battle Creek, Michigan, has agreed not to pursue criminal charges against the administrator of spamlisting blacklisting service ORBZ, which led to the withdrawal of the service earlier this week.

The move lets Ian Gulliver, the administrator of ORBZ.org, off the hook for allegedly causing a major slowdown of its mail server in the course of testing for open mail relays, which are often used as a tool by spammers.

According to a statement issued by Battle Creek, the city initially suspected criminal mischief when tests conducted by Gulliver triggered a weakness in the version of Lotus Domino software used by the City. The tests caused a major slowdown of the City's email network for about a day on February 25.

It called the police who served a search warrant on Gulliver, a 20-year-old systems administrator from New York state, who fearful of the consequences of criminal charges, pulled the plug on ORBZ.

Doubtless that helped to convince Battle Creek (the home of Kellogg's) that he had no criminal intent, prompting it to drop charges.

It seems doubtful if the ORBZ blacklist will be restored to operation even though the threat of criminal charges has been lifted. Many Regsiter readers have written to us criticising ORBZ's methodology.

But what about the Lotus Domino security issue?

Last August, Gulliver sent a message to the BugTraq mailing list stating that the ORBZ scanner creates "oddly formed mail envelopes that can cause Lotus Domino to enter a mail routing loop" resulted in the crash of a mail server.

The issue, which we're told was never particularly serious, was fixed with Lotus Domino version R5.0.9 last September. With normal anti-relay configuration in place, the exploit didn't work anyway, Notes administrators have told us.

Apparently Battle Creek failed to update its servers in a timely manner, so it came a cropper in February. It has now fixed the problem, and pledged to review its security policies to learn lessons from its email outage, and prevent a reoccurrence. It said it now recognises that Gulliver "has done us a service", though it has criticisms of his actions.

"We are going to be taking a close look at our policies regarding Lotus security updates and how we can avoid the issue in general," said Michelle Reen, Assistant to the City Manager.

"In turn, however, we have asked him [Gulliver] to reconsider his policy of making unannounced tests on servers. In today's computerised world it is everyone's responsibility to maintain a secure system."

"But, if I can draw the analogy that just because everyone should wear a computerised bullet-proof vest doesn't mean that shooting people to find out who isn't wearing one is the best answer," she added. ®

Related stories

ORBZ shuts up shop, cites criminal charges
ORBS now split into three
ORBS splits into ORBZ and ORBL
Junk mail costs lives

Next gen security for virtualised datacentres

More from The Register

next story
No, thank you. I will not code for the Caliphate
Some assignments, even the Bongster decline must
Fast And Furious 6 cammer thrown in slammer for nearly three years
Man jailed for dodgy cinema recording of Hollywood movie
Caught red-handed: UK cops, PCSOs, specials behaving badly… on social media
No Mr Fuzz, don't ask a crime victim to be your pal on Facebook
Barnes & Noble: Swallow a Samsung Nook tablet, please ... pretty please
Novelslab finally on sale with ($199 - $20) price tag
Ballmer leaves Microsoft board to spend more time with his b-balls
From Clippy to Clippers: Hi, I see you're running an NBA team now ...
6 Obvious Reasons Why Facebook Will Ban This Article (Thank God)
Clampdown on clickbait ... and El Reg is OK with this
Video of US journalist 'beheading' pulled from social media
Yanked footage featured British-accented attacker and US journo James Foley
Assange™: Hey world, I'M STILL HERE, ignore that Snowden guy
Press conference: ME ME ME ME ME ME ME (cont'd pg 94)
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?