Former Yahoo Engineer Who Infiltrated 6,000 Accounts Avoids Jail (siliconvalley.com) 35
This week finally saw the federal sentencing of a former Yahoo software engineer who "admitted to using his access through his work at the company to hack into about 6,000 Yahoo accounts" back in 2018, according to America's Department of Justice:
Ruiz admitted to targeting accounts belonging to younger women, including his personal friends and work colleagues. He made copies of images and videos that he found in the personal accounts without permission, and stored the data at his home. Once he had access to the Yahoo accounts, Ruiz admitted to compromising the iCloud, Facebook, Gmail, DropBox, and other online accounts of the Yahoo users in search of more private images and videos. After his employer observed the suspicious account activity, Ruiz admitted to destroying the computer and hard drive on which he stored the images.
He stopped working at Yahoo in July of 2018. The next month the FBI visited his home. He was indicted in April of 2019 and pleaded guilty in September — facing up to five years in prison and a $250,000 fine.
But it was not until this week that a federal court finally handed down its sentence for the "former Yahoo! engineer who hacked 6,000 accounts on a hunt for private sexual videos and pictures," according to one Bay Area newspaper.
The sentence? Five years of probation, with a home confinement condition: Reyes Daniel Ruiz, 35, of Tracy, is allowed to leave his home for "verified employment, medical needs and religious services," according to the sentencing terms. He has also been ordered to pay nearly $125,000 in fines and restitution, court records show...
He also accessed financial information, but his main goal was to steal pornographic files, prosecutors said. Assistant U.S. Attorney Daniel Kaleba asked for Ruiz to be sentenced to "a period of incarceration," arguing he'd violated not only the trust of his employee but the privacy of thousands of people. "By his estimation, he downloaded approximately two terabytes of data, and possessed between 1,000 and 4,000 private images and videos," Kaleba wrote in a sentencing memo.
The defense argued that Ruiz, who has no criminal history, deserved leniency because he accepted responsibility quickly. He admitted to destroying the hard drive where he stored the ill-gotten files when the FBI visited his home in August 2018. Ruiz told federal investigators that he acquired the pictures and videos for his own personal "self-gratification" and that he didn't share them online, a pre-sentence report says.
In October Gizmodo reported that Ruiz was now working for a Silicon Valley company specializing in SSO (single sign-on) solutions.
He stopped working at Yahoo in July of 2018. The next month the FBI visited his home. He was indicted in April of 2019 and pleaded guilty in September — facing up to five years in prison and a $250,000 fine.
But it was not until this week that a federal court finally handed down its sentence for the "former Yahoo! engineer who hacked 6,000 accounts on a hunt for private sexual videos and pictures," according to one Bay Area newspaper.
The sentence? Five years of probation, with a home confinement condition: Reyes Daniel Ruiz, 35, of Tracy, is allowed to leave his home for "verified employment, medical needs and religious services," according to the sentencing terms. He has also been ordered to pay nearly $125,000 in fines and restitution, court records show...
He also accessed financial information, but his main goal was to steal pornographic files, prosecutors said. Assistant U.S. Attorney Daniel Kaleba asked for Ruiz to be sentenced to "a period of incarceration," arguing he'd violated not only the trust of his employee but the privacy of thousands of people. "By his estimation, he downloaded approximately two terabytes of data, and possessed between 1,000 and 4,000 private images and videos," Kaleba wrote in a sentencing memo.
The defense argued that Ruiz, who has no criminal history, deserved leniency because he accepted responsibility quickly. He admitted to destroying the hard drive where he stored the ill-gotten files when the FBI visited his home in August 2018. Ruiz told federal investigators that he acquired the pictures and videos for his own personal "self-gratification" and that he didn't share them online, a pre-sentence report says.
In October Gizmodo reported that Ruiz was now working for a Silicon Valley company specializing in SSO (single sign-on) solutions.
DIdn't realize Yahoo had that many active accounts (Score:5, Funny)
I'm guessing he hacked into all of the active Yahoo accounts at the time and then quit when he was done.
Re: DIdn't realize Yahoo had that many active acco (Score:2)
Lol, In a better world that would be true. But All AT&T email accounts are actually Yahoo accounts, so there are many.
Re: (Score:2)
Re: DIdn't realize Yahoo had that many active acc (Score:2)
I could be off the mark here, or maybe my onformation is just outdated now.... but 15 years or so ago I was Rogers (Canada) customer, and I'm positive the supplied email account was also a rebranded yahoo web based email service.
Your comment just brought that memory back. Been trying to forget the Rogers experience... It was horrid.. :)
Re: (Score:2)
I'm torn (Score:2)
He's obviously a freak and a scumbag and violated the privacy of 6000 people.
OTOH, I'm not in favor of people getting an extra 20 years just because a crime was committed "with a computer".
I am shocked a security company hired him. Sorry, but no way someone so ethically empty would get a job at any of the companies I've been at. Zero chance.
No one so ethically empty? (Score:1)
If there were a practical way to do it I'd be tempted to make a wager on that particular matter.
Re: No one so ethically empty? (Score:1)
You'd lose that bet. We do serious background checks and have bounced otherwise qualified candidates for serious ethical failures. Why is that so surprising? It's what most real companies do and a security company in particular should be very hardcore about.
Re: (Score:1)
I didn't realize that no true company would do that. I apologize for the misunderstanding.
Re: No one so ethically empty? (Score:2)
I don't know what a true company is but ok, never mind. I've never had a job, even at a tiny startup, without a background check. Ethics problems (lying, theft, etc) are always a bounce. Systems people or devs with a history of destroying code or system or abusing their system access are always bounced. I thought this was common place.
Re: No one so ethically empty? (Score:2)
I worked for Xerox once, the hiring process was extensive, involving 3 interviews over a couple of months. But surprisingly there was no background check required. Though they did have manditory annual training sessions for every employee on a wide range of ethical matters, and a policy where any sort of ethical problem had to be reported. They also had a ton of monitoring software on all machines to detect breeches etc.
Re: No one so ethically empty? (Score:1)
Interesting, how long ago was this?
My part time student job in college was the only time I didn't get a background check. I wasn't old enough to have a background, anyway :-)
Re: (Score:2)
I want to say 5 years or more ago?
But I'll give you some way-points. It was after the ACS acquisition, and before the creation of "Conduent" =)
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
I am shocked a security company hired him.
That does seem to be a real problem. A company that provides single sign on hiring someone with a criminal history of violating people's accounts...
As for the penalty, he's avoided jail, but not confinement. It's not like he could be called free.
Re: (Score:2)
Re: (Score:2)
That's good to know!
Re: (Score:3, Interesting)
He's obviously a freak and a scumbag and violated the privacy of 6000 people.
Perhaps. But he still shouldn't go to prison.
Prison is for people that are a physical danger to society. For everyone else, there are are more appropriate punishments. For instance, we can put an ankle tracker on him, and then he can spend 60 hours per week cleaning bedpans at nursing homes for five years.
One thing that bothers me about the George Floyd incident is that nobody is questioning why the police were arresting him in the first place. His offense (passing a counterfeit bill) was a non-violent
Re: (Score:2)
How is that relevant? Again he didn't use violence and didn't flee the scene.
Re: (Score:2)
What I found odd, was the missing prosecution. Each and every victim should have been a seperate charge, they should have been notified and have been legally enabled to seek damages for theft of their privacy. Something really wrong going on there, the lobbyists and corrupt lawyers hard at work. If they had done it to one person, that person would have been entitled to full justice, the legal harm, civil and criminal suffered. Just because it was over 6,000 why they fuck were they let off the fucking hook.
Re: (Score:2)
Sorry, but no way someone so ethically empty would get a job at any of the companies I've been at. Zero chance.
How would you know in advance? Are you a mind reader in addition to being a blowhard?
Kind of amusing (Score:2)
Will "forced home detention" really mean anything much different from him than for the rest of us for some time? Almost like he's getting ant least six month of his sentence taken off.
Re: (Score:2)
Try this: Get in your car and drive to a local park. You may or may not be required to wear a mask, but please take one with you at least in case you find yourself in a crowded situation. Find a nice spot and take a walk enjoying nature. Notice how the police aren't showing up to arrest you?
Re: (Score:2)
Current guidance is that you don't need a mask for hiking either, but you should take one in case you find yourself in a situation where you have to interact with other people.
I've been hitting the hiking trails two to three times a week since April, and virtually everybody has a mask and a majority of people just wear them all the time on the trail.
Re: (Score:1)
Re: (Score:2)
Could be why California has seen a rise in cases.
In my state we overran our rather large ICU bed capacity in April. People take it seriously here, and there are few significant pockets of people who have ideological objections to masks.
Metaphysical Irony (Score:2)
You can't beat it.
Leniency for all (Score:2)
They gave this guy a break, so why not everyone else?
https://www.ajc.com/news/crime... [ajc.com]