Child abuse photo collector forgets to encrypt his USB stick - Bad security is a good thing

Filed Under: Featured, Law & order

USB stick. Image from ShutterstockSometimes some good can come from poor computer security.

The Burton Mail reports that a 46-year-old British man was found guilty of downloading indecent images of children after he accidentally shared his USB memory stick with a work colleague.

According to reports, Nicholas Hill, of Belvoir Crescent, Newhall, handed a memory stick to a female colleague in order to get a recording of a TV programme, but as soon as his workmate plugged the USB drive into her computer she was shocked to be presented with an array of indecent photos.

Clearly, Hill had not encrypted the data on his USB flash drive.

When police were called they found "279 images in the mildest category and six which were slightly more serious" contained on the memory stick.

Hill's defence team said that he had been collecting such images for a number of years, and told a hearing at Derby Magistrates' Court that their client deeply regretted committing the offence, and was previously a "man of good character".

Presiding magistrate Jill Steiner put Hill on probation for three years, and ordered him to attend a community sex offenders' group work programme. If Hill buys computer equipment in future, he must allow it to be inspected by police officers - although he has said that he will access the net only from a public library in future.

Aside from serving probation, Hill has also been ordered to pay £85 costs. As he is currently between jobs, it was has been agreed that he can pay the fine in monthly installments.

Being a consumer of child abuse imagery only encourages others to supply more, and ultimately abuse the young innocent victims. Hopefully Hill will rebuild his life, and not engage in child abuse material again.

If that's the case then some small good will have come out of poor security.

USB flash memory drive image from Shutterstock.

, , ,

8 Responses to Child abuse photo collector forgets to encrypt his USB stick - Bad security is a good thing

  1. Amanda Snyder says:

    He ought to be punished much more severely for that crime! Shaking my head at the UK now.

  2. Miguel Guerreiro says:

    No pen drives, no computer and stay there! put!
    Troubled minds should always be monitored !!
    Sick...

  3. eddie minto says:

    Cut his knackers off, on the other hand I found a few myself and none of them had encryption on them.

  4. Internaut says:

    Who decides what is "mildest category", or "slightly more serious" and is "indecent photos"? Obviously, the police thought so or the prosecutor thought so and so did the judge. But mild? Slightly serious?

    Like too many other laws, too many get to decide what - is what. One persons definition of "indecent" may mean the images seen in catalogs with kids in bikinis to kids in a nudist camp to outright ugly severe porn. With all of that, mildest category gets a mild sentence - for what? Porn is porn, and when it comes to kids, there is no mild or slightly serious crime.

    Such approaches to anything only serves to water-down the crime. After a time, mild and slightly serious becomes more or less acceptable, or lighter and lighter sentences and fines.

    I fear for the children, even those exposed to "mild" to "slightly serious" abuse. Each time someone publishes mild to extreme, a kid is abused.

    As long as the subject has been around the pattern of discussion is about punishment, not prevention. Progress on the issue is like the US Congress verses Progress. Nothing much gets done as hundreds make a living on everything from detection to conviction, and very little spent going after the one's behind the camera lens.

    i

    • anon says:

      In the UK images are graded in severity according to a standardised scale, generally a variant of the COPINE scale. This has reasonably specific definitions of severity in a number of grades. These are related to sentencing guidelines, with certain severities mandating particular degrees of punishment, such as imprisonment.

  5. Dan Buzzard says:

    I doubt encryption would of saved him as he would likely need to allow his co-worker to decrypt the drive. I think it's just as much of a "Don't share USB Drives" lesson.

    • Loki says:

      No. The whole drive doesn't need to be encrypted, just each photograph or folders for the group of them.

      I only have one "thumb" drive that is completely encrypted in itself, but I carry about four of them and all have encrypted contents. None have anything like this stuff on it. Just private files.

    • oppiman says:

      If you set it up correctly, you can have multiple partitions, or multiple folders or files that can be mounted as drives with multiple different encryptions on a stick.
      You can even have encrypted stuff inside of encrypted stuff.
      The tool we use in our company allows one folder to be left "unencrypted" or only encrypted with a group key. He could have shared the group folder with the colleague leaving other stuff secured.
      Well, luckily this guy had no clue despite being stupid enough to carry this stick around and even bring it into the company.
      Besides that I wonder as well about the mild punishment.
      And I wonder even more why material like that still can be found everywhere in the Internet and sites serving such material can't be brought down.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <pre> <q cite=""> <strike> <strong>

About the author

Graham Cluley has worked in the computer security industry for more than 20 years, developing anti-virus software and doing quite a lot of talking about internet threats. He's won awards for his blogging, but is proudest of the text adventure games he wrote when he was still wearing short trousers. You can learn more about those (the games, not the trousers) at grahamcluley.com. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.