The long, drawn-out persecution of Julie Amero in Norwich, Connecticut, US, has highlighted the critical importance of computer security and the responsibilities of organisations to protect their employees.
Ensuring a computer system is secured from the myriad number of viral ‘nasties’ is the responsibility of the employer, not the employee. Effectively, companies have to ensure the safety of staff from inadvertently getting involved in an activity that could lead to dismissal or criminal charges when using work PCs.
Amero was employed as a substitute teacher on 19 October, 2004 at Kelly Middle School with a seventh-grade class (12 to 13 year olds), when the PC in the classroom displayed some pop-up ads for hard-core pornography sites.
She reported the incident to the assistant principal and was told "not to worry". However, the pupils who had seen the pop-ups told their parents who complained. The school called in the police and Amero was arrested, indicted, tried and convicted of four counts of risk of injury to a minor.
An excellent article on the securityfocus website acknowledged that Amero was guilty of surfing the net when she should have been supervising the class and when the popup porn appeared she followed the verbal instruction she had received to not turn the computer off as she did not have a logon id. But that’s all.
At a school board hearing in January 2007 information services director for schools in Norwich, Bob Hartz, is said to have established that although Kelly Middle School was running security software, the automatic update feature was not activated. For three months the system was not blocking the pornographic websites. He told the school board the automatic update was switched back on after the incident, though that was of little help to Amero.
She was a victim, not a perpetrator. I quote from the securityfocus article:
"The machine’s Internet history showed that a previous user had been accessing the kind of sites likely to plant pornographic malware, such as dubious dating sites. The forensic examination also showed a host of adware and spyware on the machine, much of which had been in place and operating well before the porn incident - including one designed to hijack and redirect the browser. And on this evidence, she was convicted?";
What is really staggering is that she was even charged.
The state attorney prosecuting the case, Michael Regan, has expressed surprise, saying, "For some reason, this case caught the media’s attention."
Well, the prospect of an innocent woman going to jail - along with being branded a sex offender because of his prosecution - does upset people. Particularly, those of us who are IT-literate and do understand the vacuous-nature of the original indictment bought against Amero.
The original conviction was set aside by a second judge on 6 June, 2007, who said it had been based on "erroneous" and "false information", after being shown evidence compiled by forensic computer experts on behalf of Amero.
The felony charges were dropped on 21 November. State Attorney Michael Regan ‘graciously’ said the state was prepared to go to trial again , but because of Amero’s ill health agreed to the reduce the felony charges to a misdemeanor. [The expression down here in New Zealand is ‘weasel words’.]
To have taken her to trial again would have resulted in a not-guilty verdict. Such a dismissal would have opened the door for a hefty potential civil suit from Amero. Instead, she pleaded guilty to a disorderly conduct misdemeanor, paid a $100 fine and had her Connecticut teaching licence revoked.
"Oh honey, it’s over. I feel wonderful," Amero is reported as saying a few minutes after pleading guilty to the disorderly conduct charge. And who is to blame her for just wanting to get on with her life and for pleading guilty to a misdemeanor that she never committed.
There is an interesting echo to this case of Information Technology Ignorance and that’s DNA evidence.
As the technology for identifying individuals from DNA evidence found at crime scenes became more exact in the 1980s, while public understanding of the science was still sketchy, back then lawyers for the prosecution would spend some time in the course of a trial educating juries on precisely what DNA is and how, like fingerprints, an individual’s DNA is exactly that; individual.
Similar education on how PCs can be hijacked would, at this stage, appear to be mandatory by defence lawyers for juries called to judge cases such as that of Julie Amero.
Though, I think a basic education in the viral nature of Web 2.0 would be better directed at US state attorneys. Two ‘braindead’ examples of flawed prosecutions that have secured media attention are below. I suspect there are quite a few other innocent victims fitted up by information technology-challenged US state attorneys.






