Skip Links

Network World

  • Social Web 
  • Email 
  • Close

(Comma separation for multiple addresses)
Your Message:

Parts of San Francisco network still locked out

By Robert McMillan , IDG News Service , 07/23/2008
  • Share/Email
  • Tweet This
  • Comment
  • Print

The high-profile troubles on the city of San Francisco's computer network continue, despite a dramatic jailhouse intervention by the city's mayor this week.

While the city has regained control of the five devices at the heart of its FiberWAN network, which carries data between city government buildings, administrators are still locked out of the city's VoIP system and LANs within the Sheriff's Department and the Recreation & Park Department. Assistant District Attorney Conrad Del Rosario revealed the ongoing problems Wednesday at a bail hearing for Terry Childs, the former network administrator with the city's Department of Telecommunications and Information Services (DTIS) who is accused of holding the city's networks hostage for the past 10 days.

During that time, the networks have functioned normally, but IT staffers have been unable to make administrative changes to some of the city's critical routers and switches. (Read what network administrators can do to thwart insider threats.)

Childs' attorney, Erin Crane, had moved for a reduction in the $5 million bail set in the case. San Francisco Superior Court Judge Lucy McCabe denied that motion Wednesday.

Childs' defense has portrayed him as a capable engineer, surrounded by incompetent management, who simply didn't trust anyone with the administrative passwords to the five network devices at the heart of the FiberWAN. On Monday, Childs had a secret meeting with San Francisco Mayor Gavin Newsom where Childs turned over the passwords.

Del Rosario argued against any reduction of bail, noting that Childs handed over the passwords only after a scheduled July 19 power outage at the city's One Market Street data center failed to take down the FiberWAN. Because Childs did not store network configuration files on the routers' hard drives, a power outage would wipe this information out of memory, disabling the network until it was reconfigured, he said.

The assistant DA said it was "extremely suspicious" that Childs only communicated with the mayor after the network did not go out of service.

In court filings, prosecutors say they do not know where these critical router configuration files are located.

As the city's principal network engineer, Childs worked on about 1,100 networking devices throughout the city, Del Rosario said. Even with the FiberWAN passwords, there are still questions about the rest of these systems. "We do not know whether we have control of these devices," he said.

Crane said her client was the victim of jealous co-workers who were upset because his good work made them look bad. "I think the entire thing is specious," she told the judge. "This is a DTIS management problem."

This is not Childs' first time in criminal court. He also served four years in Kansas prison on aggravated robbery and aggravated burglary charges, prosecutors said. Those charges stem from an incident that occurred when Childs was 16 years old, Crane said.

The court also ordered Childs to stay away from several of his former co-workers, including Jeana Pieralde, the DTIS director of security who was allegedly so afraid of Childs that she locked herself in a room in the data center, and his former supervisor Herb Tong, whom Childs felt was undermining his work at the department.

  • Share/Email
  • Tweet This
  • Comment
  • Print

Comments (5)
Login
Forgot your account info?

HARD DRIVES?By Anonymous on July 24, 2008, 10:50 am"Because Childs did not store network configuration files on the routers' hard drives ... he (Assistant District Attorney Conrad Del Rosario) said" Oh, oh. Where...

Reply | Read entire comment

Does Herb Tong still have a job?By Anon on July 24, 2008, 11:18 amI sure hope not...how the city of SF could have allowed this scenario to develop is beyond me. His manager and probably even the next fool up the chain should be...

Reply | Read entire comment

Can you say "password recovery"......anyone?By Anonymous on July 24, 2008, 11:19 amThere are ways to recover lost or forgotton passwords on network devices. I do not know the tech specs of the affected devices but the device vendors should be able...

Reply | Read entire comment

RE: Can you say "password recovery"......anyone?By Anonymous on July 24, 2008, 1:03 pmMaybe you're not aware of the "no service password-recovery" command for Cisco IOS devices: e.g. http://www.cisco.com/en/US/products/hw/routers/ps274/products_configuration_example09186a00801d8113.shtml Cheers, ahb.

Reply | Read entire comment

Password Recovery usually wipes out configs for security reasonsBy billstewart on July 29, 2008, 3:41 pmUsing router password recovery features is mildly annoying, because it wipes out the configuration for security reasons and you have to rebuild it. That's fine...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed