Anti-spammer fined $60K for DNS lookup 'hack'
Whois also ruled dodgy by North Dakota court
David Ritz, the veteran American spam-fighter, has been hit by $60,000 in fines plus lawyers fees after losing a civil suit that accused him of illegal hacking.
Sierra Corporate Design, a North Dakota business run by alleged former spammer Jerry Reynolds, sued Ritz for hacking and trespass offences. Ritz was accused of conducting unauthorized whois and DNS lookups. Edward Falk, another anti-spam campaigner and operator of the "Spam Tracking Page", was named as co-defendant.
The complaint alleged that Ritz "hacked" servers owned by Sierra (which describes itself as a specialist web hosting and internet services firm), obtaining confidential internal network configuration data (using a zone transfer, host -l command) and domain name information (using whois) before publishing that data on the net. It was alleged that Falk assisted Ritz by republishing his findings. The case was originally filed in May 2005. An injunction, which allowed Sierra's lawyers to ask Google to purge its Usenet archives of "offending material" was issued in August 2005.
In October 2006, the North Dakota court ruled that it did not have jurisdiction over Falk, a Californian resident, dismissing the suit against him. The case against Ritz proceeded.
Hearings in Fargo last October before Judge Cynthia Rothe-Seeger resulted in a surprise 11 January ruling (PDF, transcript with commentary) against Ritz. He was ordered to pay $53,000 in damages, a $10,000 fine for contempt against breaching an injunction and lawyers' fees, which could run into tens of thousands.
It's unclear if Ritz intends to appeal. His problems don't stop there because he faces possible criminal prosecution over the same supposed offences.
The case has sparked concern and support from the anti-spam community. "He [Ritz] got prosecuted for using the same Unix tools that the rest of us use all the time to troubleshoot problems, admin our systems, and track spammers," notes Reg reader Mark.
In a separate case Reynolds sued Falk unsuccessfully for defamation for calling him a porn spammer.
Falk had accused Reynolds of involvement with Netzilla, for a time the single largest source of spam on Usenet. The published allegations led to the unsuccessful "John Doe" lawsuit against Falk in Reynolds' home town of Fargo, ND.
Sponsored: Becoming a Pragmatic Security Leader