United States V. Riggs
   HOME

TheInfoList



OR:

In ''United States v. Riggs'', the government of the United States prosecuted Robert Riggs and
Craig Neidorf Craig Neidorf (born 1969), Knight Lightning, was one of the two founding editors of ''Phrack'' Magazine, an online, text-based ezine that defined the hacker mentality of the mid 1980s. Craig, along with ''Phrack'' co-founder Randy Tischler (aka ...
for obtaining unauthorized access to and subsequently disseminating a file held on BellSouth's computers. The file, referred to as the E911 file, gave information regarding BellSouth's products implementing 911 emergency telephone services. Riggs and Neidorf were both indicted in the District Court of the Northern District of Illinois on numerous charges relating to the dissemination of the E911 text file. As Riggs had previously been indicted in the
Northern District of Georgia The United States District Court for the Northern District of Georgia (in case citations, N.D. Ga.) is a United States district court which serves the residents of forty-six counties. These are divided up into four divisions. Appeals from cases ...
in relation to the same incident, his charges from Illinois were transferred to Georgia. Riggs ultimately pleaded guilty in Georgia and was sentenced to 21 months in prison and two years' supervised release. Neidorf pleaded not guilty in Illinois and the government dropped all charges against Neidorf four days after the trial began.


Background of the case


Cultural setting

''United States v. Riggs'' occurred during 1990. At the time, computers and the Internet were not uncommon in businesses and academic institutions, but not yet commonplace in American homes. Several computer break-ins in 1983 had been associated with teenagers in Wisconsin. These teenagers gained notoriety and became known as The 414s. High-profile public incidents perpetrated by groups such as The 414s combined with movies such as '' WarGames'' to create a public stereotype of hackers as wayward youths eager to abuse computer knowledge without regard to the consequence of their actions.


Defendants

Robert Riggs had a previous conviction for computer-related crime in North Carolina in 1986 for unauthorized access to BellSouth's computers. As a result, Riggs was sentenced to 15 days of community service and 18 months of probation.
Craig Neidorf Craig Neidorf (born 1969), Knight Lightning, was one of the two founding editors of ''Phrack'' Magazine, an online, text-based ezine that defined the hacker mentality of the mid 1980s. Craig, along with ''Phrack'' co-founder Randy Tischler (aka ...
was a 20-year-old college student studying pre-law at University of Missouri. Neidorf began publishing the hacker magazine '' PHRACK'' at the age of 16 and published 30 issues from 1985 to 1989.


Previous indictment

Prior to the proceedings described below in the Northern District of Illinois, Riggs was indicted in the Northern District of Georgia on charges related to the same events. Riggs' Georgia indictment included four counts of wire fraud, three counts of access code fraud and one count of conspiracy. The two indictments in Illinois described below charged Riggs with additional crimes. The charges from Illinois were transferred to Georgia in accordance with Federal Rule of Criminal Procedure 20.


District Court proceedings


First indictment

On February 1, 1990, a federal
grand jury A grand jury is a jury—a group of citizens—empowered by law to conduct legal proceedings, investigate potential criminal conduct, and determine whether criminal charges should be brought. A grand jury may subpoena physical evidence or a pe ...
voted to issue an indictment against both Robert Riggs and Craig Neidorf. The indictment alleged that Riggs and Neidorf had defrauded BellSouth by electronically stealing a text file and disseminating that file over the Internet in an online magazine edited by Neidorf known as ''PHRACK''. The indictment alleged that Riggs broke into a BellSouth computer located in
Atlanta Atlanta ( ) is the capital and most populous city of the U.S. state of Georgia. It is the seat of Fulton County, the most populous county in Georgia, but its territory falls in both Fulton and DeKalb counties. With a population of 498,715 ...
, Georgia, downloaded the text file to his own computer located in Decatur, Georgia, and electronically transferred the file to a bulletin board system located in Lockport, Illinois. Neidorf then allegedly downloaded the file from the bulletin board in Lockport, Illinois, to his own computer in Columbia, Missouri. Neidorf then edited the file, at the request of Riggs, to remove details identifying the file as belonging to BellSouth, and uploaded the file to the same bulletin board system in Lockport, Illinois. The indictment charged both Riggs and Neidorf with seven violations of federal statutes: counts 1 and 2 alleged violations of 18 USC § 1343 (
wire fraud Mail fraud and wire fraud are terms used in the United States to describe the use of a physical or electronic mail system to fraud, defraud another, and are Federal crime in the United States, federal crimes there. Jurisdiction is claimed by the ...
), counts 3 and 4 alleged violations of 18 USC § 2314 (interstate transportation of stolen property), and counts 5-7 alleged violations of 18 USC § 1030 ( computer fraud and abuse). Neidorf responded to the indictment by issuing a series of pre-trial motions, including motions to dismiss counts 2–7 of the indictment. Judge Bua subsequently denied all of Neidorf's motions. Neidorf's motions to dismiss counts 3 and 4 (pertaining to interstate transportation of stolen property) were noteworthy as they claim Neidorf should not be charged with violations of § 2314 as he has only caused "electronic impulses" to move over state lines and had not moved any physical property. Although the government conceded that § 2314 had never been applied in this manner before, the court held that it would allow electronic interstate transportation of proprietary business information as a violation of § 2314. In support of the decision to uphold the charge, the court cited ''United States v. Gilboe'', in which the defendants issued wire transfers of money across state lines and were prosecuted under § 2314. The act of the wire transfer was regarded as being tantamount to physically moving the money as the effect of the wire transfer was that tangible funds became available in a bank where they were not previously available.


Second indictment

On June 7, 1990, the
grand jury A grand jury is a jury—a group of citizens—empowered by law to conduct legal proceedings, investigate potential criminal conduct, and determine whether criminal charges should be brought. A grand jury may subpoena physical evidence or a pe ...
issued a superseding indictment against Riggs and Neidorf which took the place of the first indictment. The second indictment dropped charges of violating § 1030 (computer fraud and abuse) and instead charged Riggs exclusively with one count of violating § 1343§ 1343
/ref> (wire fraud), charged Neidorf exclusively with 4 counts of violatin
§ 1343
and charged Riggs and Neidorf jointly with 4 counts of violatin
§ 1343
and 2 counts of violatin
§ 2314
The second indictment also broadened the scope of alleged activities from strictly obtaining and disseminating the BellSouth text file. The second indictment alleged a broader effort to disseminate hacker tutorials with the goals solidifying the hacker community and educating hackers in a range of skills including evasion of law enforcement. In response to the superseding indictment, Neidorf filed motions to dismiss all 10 counts of the indictment in which he was named. Neidorf incorporated arguments made by the
Electronic Frontier Foundation The Electronic Frontier Foundation (EFF) is an international non-profit digital rights group based in San Francisco, California. The foundation was formed on 10 July 1990 by John Gilmore, John Perry Barlow and Mitch Kapor to promote Internet ci ...
in support of his motions to dismiss. Neidorf's arguments included a claims that publication of ''PHRACK'', including the BellSouth text file, was within his First Amendment freedoms and that the laws he was charged with violating were unacceptably vague. The court rejected both of these arguments, holding that criminal laws apply even if the activity in question is speech related. All of Neidorf's motions to dismiss were denied.


District court conclusion

The trial of Neidorf in Illinois began on July 23, 1990. Neidorf was represented by Sheldon Zenner of Katten, Muchin & Zavis in Chicago. Although the trial had been scheduled to last two weeks, the prosecution dropped the charges after four days. No reason for dropping the charges was officially given, although the government's case was considerably weakened by expert witnesses employed by Neidorf and Zenner. John Nagle, an independent computer scientist, and
Dorothy Denning Dorothy Elizabeth Denning (née Robling, born August 12, 1945) is a US-American information security researcher known for lattice-based access control (LBAC), intrusion detection systems (IDS), and other cyber security innovations. She published ...
, a computer security expert, testified for the defense that the text file stolen from BellSouth, as published by Neidorf, actually contained nothing of value for breaking into systems. The defense was also able to demonstrate that the file which the government had alleged was both highly valuable and highly proprietary was actually neither. Nagle demonstrated that more damaging information about BellSouth's 911 system was already publicly available, and Zenner demonstrated that the exact file in question, unedited, could be obtained by calling BellSouth and ordering manuals which cost either $13 or $21. Neidorf ultimately received no conviction, although he did incur legal expenses in excess of $100,000. Riggs' proceedings continued in Georgia, where he pleaded guilty to the conspiracy charge from Georgia and the wire fraud charges from Illinois. Riggs received a prison sentence of 21 months to be followed by two years of supervised release. The conditions of Riggs' supervised release included that he was not allowed to own or control a computer of any type for his own personal use at any point in the two-year period.


Federal Appeals Court proceedings

Riggs issued an appeal to the United States Court of Appeals for the Eleventh Circuit contesting both the length of his sentence and the conditions of his supervised release. Riggs' appeal argued that the sentence was excessive because it exceeded sentencing guidelines for his crimes and previous convictions. The court upheld the sentence, however, on the grounds that they did not feel the criminal history category in which Riggs had been placed was an accurate representation of his past criminal conduct. The terms of Riggs supervised release were also upheld.


Public commentary

''United States v. Riggs'' has been cited in public discourse on the difference between theft of electronic and physical resources, as seen in the ''Berkeley Technology Law Journal'' and ''Internet World'' (a publication of the Electronic Frontier Foundation). ''
Communications of the ACM ''Communications of the ACM'' is the monthly journal of the Association for Computing Machinery (ACM). It was established in 1958, with Saul Rosen as its first managing editor. It is sent to all ACM members. Articles are intended for readers with ...
'' published an article reviewing the events of the case and offering commentary on the proceedings and potential responses from the professional community. The case has also been cited in a number of books dealing with computers, hacking, legality and ethics.


See also

* The Phrack magazine * Phreak *
Hacker (computer security) A security hacker is someone who explores methods for breaching defenses and exploiting weaknesses in a computer system or network. Hackers may be motivated by a multitude of reasons, such as profit, protest, information gathering, challenge ...


References

{{Reflist, refs= {{Cite web , title = Original Indictment of Riggs and Neidorf , url = http://www.911dispatch.com/911/history/hack_indictment.html , access-date = 2011-02-17 {{Cite web , title = Superseding Indictment of Riggs and Neidorf , url = http://massis.lcs.mit.edu/archives/security-fraud/craig.neidorf.indictment , access-date = 2011-02-17 {{Cite court , litigants = United States v. Riggs , vol = 739 , reporter = F.Supp. , opinion = 414 , date = 1990 , url = http://www.kentlaw.edu/faculty/rstaudt/classes/oldclasses/internetlaw/casebook/us_v_riggs1.html {{Cite court , litigants = United States v. Riggs , vol = 743 , reporter = F.Supp. , opinion = 556 , date = 1990 , url = http://www.loundy.com/CASES/US_v_Riggs.html {{Cite court , litigants = United States v. Robert J. Riggs , vol = 967 , reporter = F.2d , opinion = 561 , date = 1992 , url = http://openjurist.org/967/f2d/561/united-states-v-robert-j-riggs {{cite journal , last=Denning , first=Dorothy E. , author-link=Dorothy E. Denning , title=The United States vs. Craig Neidorf: A Debate on Electronic Publishing, Constitutional Rights, and Hacking , journal=
Communications of the ACM ''Communications of the ACM'' is the monthly journal of the Association for Computing Machinery (ACM). It was established in 1958, with Saul Rosen as its first managing editor. It is sent to all ACM members. Articles are intended for readers with ...
, date=March 1991 , volume=34 , issue=3 , pages=24-32, 42-43 , doi=10.1145/102868.102869 , s2cid=14005171 , url=https://dl.acm.org/doi/pdf/10.1145/102868.102869 , access-date=8 April 2022
{{Cite web , title = When Copying Isn't Theft: How the Government Stumbled in a "Hacker" Case , url = http://w2.eff.org/Misc/Publications/Mike_Godwin/phrack_riggs_neidorf_godwin.article , access-date = 2011-02-17 {{Citation , last = Yin , first = Tung , title = Post-Modern Printing Presses: Extending Freedom of Press to Protect Electronic Information Services , journal =
Berkeley Technology Law Journal The ''Berkeley Technology Law Journal'' (BTLJ) is a law journal published at the University of California, Berkeley School of Law. It started publication in Spring 1986 as the ''High Technology Law Journal'' and changed its name to BTLJ in 1996.BT ...
, volume = 8 , issue = 2 , date=Fall 1993 , url = http://www.law.berkeley.edu/journals/btlj/articles/vol8/Yin.pdf , archive-url = https://web.archive.org/web/20060914142752/https://www.law.berkeley.edu/journals/btlj/articles/vol8/Yin.pdf , archive-date = 14 September 2006 , access-date = 8 April 2022
{{Cite book , last = Ludlow , first = Peter , title = High Noon on the Electronic Frontier: Conceptual Issues in Cyberspace , publisher = MIT Press , year = 1999 , location = USA , url = https://books.google.com/books?id=xI_Um3dTTeYC , isbn = 0-262-62103-7 {{Cite book , last = Casey , first = Eoghan , title = Digital Evidence and Computer Crime: Forensic Evidence, Computers and The Internet , publisher = Academic Press , year = 2000 , location = San Diego, CA , url = https://books.google.com/books?id=Xo8GMt_AbQsC , isbn = 0-12-163104-4 {{Cite book , last = Bashman , first = Matthew , title = The Script Kiddie Cookbook , publisher = Lulu Press , year = 2005 , location = USA , url = https://books.google.com/books?id=OUKgWZiRfpUC , isbn = 1-4116-2158-1 1990 in United States case law United States district court cases