Feeds

Criminal case against ORBZ spam blacklist dropped

Battle Creek holsters legal guns

  • alert
  • submit to reddit

SANS - Survey on application security programs

The City of Battle Creek, Michigan, has agreed not to pursue criminal charges against the administrator of spamlisting blacklisting service ORBZ, which led to the withdrawal of the service earlier this week.

The move lets Ian Gulliver, the administrator of ORBZ.org, off the hook for allegedly causing a major slowdown of its mail server in the course of testing for open mail relays, which are often used as a tool by spammers.

According to a statement issued by Battle Creek, the city initially suspected criminal mischief when tests conducted by Gulliver triggered a weakness in the version of Lotus Domino software used by the City. The tests caused a major slowdown of the City's email network for about a day on February 25.

It called the police who served a search warrant on Gulliver, a 20-year-old systems administrator from New York state, who fearful of the consequences of criminal charges, pulled the plug on ORBZ.

Doubtless that helped to convince Battle Creek (the home of Kellogg's) that he had no criminal intent, prompting it to drop charges.

It seems doubtful if the ORBZ blacklist will be restored to operation even though the threat of criminal charges has been lifted. Many Regsiter readers have written to us criticising ORBZ's methodology.

But what about the Lotus Domino security issue?

Last August, Gulliver sent a message to the BugTraq mailing list stating that the ORBZ scanner creates "oddly formed mail envelopes that can cause Lotus Domino to enter a mail routing loop" resulted in the crash of a mail server.

The issue, which we're told was never particularly serious, was fixed with Lotus Domino version R5.0.9 last September. With normal anti-relay configuration in place, the exploit didn't work anyway, Notes administrators have told us.

Apparently Battle Creek failed to update its servers in a timely manner, so it came a cropper in February. It has now fixed the problem, and pledged to review its security policies to learn lessons from its email outage, and prevent a reoccurrence. It said it now recognises that Gulliver "has done us a service", though it has criticisms of his actions.

"We are going to be taking a close look at our policies regarding Lotus security updates and how we can avoid the issue in general," said Michelle Reen, Assistant to the City Manager.

"In turn, however, we have asked him [Gulliver] to reconsider his policy of making unannounced tests on servers. In today's computerised world it is everyone's responsibility to maintain a secure system."

"But, if I can draw the analogy that just because everyone should wear a computerised bullet-proof vest doesn't mean that shooting people to find out who isn't wearing one is the best answer," she added. ®

Related stories

ORBZ shuts up shop, cites criminal charges
ORBS now split into three
ORBS splits into ORBZ and ORBL
Junk mail costs lives

3 Big data security analytics techniques

More from The Register

next story
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
Audio fans, prepare yourself for the Second Coming ... of Blu-ray
High Fidelity Pure Audio – is this what your ears have been waiting for?
Record labels sue Pandora over vintage song royalties
Companies want payout on recordings made before 1972
MtGox chief Karpelès refuses to come to US for g-men's grilling
Bitcoin baron says he needs another lawyer for FinCEN chat
Ex–Apple CEO John Sculley: Ousting Steve Jobs 'was a mistake'
Twenty-nine years later, post-Pepsi exec has flat-forehead moment
Number crunching suggests Yahoo! US is worth less than nothing
China and Japan holdings worth more than entire company
Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
Up, up and away in my beautiful balloon flying broadband-bot
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.