decoration decoration
Stories

GROKLAW
When you want to know more...
decoration
For layout only
Home
Archives
Site Map
Search
About Groklaw
Awards
Legal Research
Timelines
ApplevSamsung
ApplevSamsung p.2
ArchiveExplorer
Autozone
Bilski
Cases
Cast: Lawyers
Comes v. MS
Contracts/Documents
Courts
DRM
Gordon v MS
GPL
Grokdoc
HTML How To
IPI v RH
IV v. Google
Legal Docs
Lodsys
MS Litigations
MSvB&N
News Picks
Novell v. MS
Novell-MS Deal
ODF/OOXML
OOXML Appeals
OraclevGoogle
Patents
ProjectMonterey
Psystar
Quote Database
Red Hat v SCO
Salus Book
SCEA v Hotz
SCO Appeals
SCO Bankruptcy
SCO Financials
SCO Overview
SCO v IBM
SCO v Novell
SCO:Soup2Nuts
SCOsource
Sean Daly
Software Patents
Switch to Linux
Transcripts
Unix Books

Gear

Groklaw Gear

Click here to send an email to the editor of this weblog.


You won't find me on Facebook


Donate

Donate Paypal


No Legal Advice

The information on Groklaw is not intended to constitute legal advice. While Mark is a lawyer and he has asked other lawyers and law students to contribute articles, all of these articles are offered to help educate, not to provide specific legal advice. They are not your lawyers.

Here's Groklaw's comments policy.


What's New

STORIES
No new stories

COMMENTS last 48 hrs
No new comments


Sponsors

Hosting:
hosted by ibiblio

On servers donated to ibiblio by AMD.

Webmaster
The HP leak probe: who knew and when did they know it?
Thursday, September 07 2006 @ 04:33 PM EDT

More details are emerging in the HP leak probe story. You can now, thanks to CNET, read [PDF] for yourself, without having to rely on journalistic interpretations, more documents in addition to the Tom Perkins letter to the board of directors and AT&T's letter to him about his account that we linked to yesterday. CNET's PDF has the following in it, and note the last item:
  • Tom Perkins's signed two-page letter (on KPC&B letterhead) to the directors, including this sentence: "As the Company failed to make a full and accurate report (as required by federal law) and having given the Company several opportunities to correct the record, I am now legally obliged to disclose publicly the reasons for my resignation." There is no date on this letter, as scanned;

  • a two-page signed letter from Travis M. Dodd of AT&T to Mr. Perkins, outlining the pretexting attacks (and making it clear, incidentally, that it was Mr. Perkins's home telephone account which was hacked;

  • an email from Mr. Perkins to Ann Baskins (identified by the Wall St. Journal as the head of HP's legal department, dated July 18, 2006, in which he tells her that, after reviewing the draft of the minutes of the board meeting of May 18, he can't accept them. He states that it's not true that he ever approved of the surveillance, as the minutes indicate he did. On the contrary, he questioned its legality at the meeting. He was under the impression that the investigation would be looking at "calendars, travel schedules" and the like. Beneath his email you find hers to him, a cover email sent with the "confidential draft minutes" of the May 18 meeting. Note this is not a draft of the 8K.

  • an e-mail from Mr. Perkins to Ann Baskins and the HP board members, dated July 28, 2006:
    "As previously stated, I cannot accept these minutes. While a number of points were made in my earlier memo, the essential point to be acknowledged is that the sub-rosa surveillance of the HP Board member's personal communications was, and is, illegal....

    "Interestingly, HP has on its board an expert in the matter, namely Larry Babbio, whose company, Verizon, has testified before the F.C.C. on the illegality of the practice, and has filed suits against consultants who engage in 'pretexting.' I attach two pertinent documents pertaining to Verizon's activities in the area. Indeed, AT&T, my home telephone carrier, has confirmed that my confidential records have been compromised pursuant a fraudulent pretext, where the imposter pretending to be me opened an untraceable and inaccessible online account in order to steal the records. AT&T is investigating further....

    "I did not resign from the board for frivolous reasons, but because HP was standing into dangerous waters -- waters hazardous with both illegal and unconscionable governance practices -- and because my advice was being ignored. I have had a long history with the company; and I am appalled at the events, and at the disclosures of the May 18th meeting, which are so out of character for the corporation, formerly an icon of the Valley.

    "I trust that the board will undertake an investigation and take corrective action, without external pressure."

That, of course, is what appears not to have happened. The question now, I gather, is who knew what and when did they know it?

Now, if every member of the board got that last email, a natural question is, why did it take until September, after public reports of the dispute hit the media, to file the information about the dispute and the reasons for the Perkins resignation with the SEC? It's a long, long time between May and September. You can compare the email with the recent HP SEC filing's account:

At the time of his resignation, Mr. Perkins did not provide any written communication to HP concerning the reasons for his resignation. Following his resignation, and after HP on May 22 had disclosed the fact of Mr. Perkins' resignation on Form 8-K in accordance with the applicable federal securities laws, Mr. Perkins notified HP that he had concerns with the HP Board's handling of investigations that had been conducted into leaks of confidential HP information from meetings of the HP Board of Directors.

So an investigation by AT&T is added to the list. And the issue with the SEC is now clear. Mr. Perkins noticed HP in his letter that in his view the 8K filed on May 22nd (press release filed with it as an exhibit) was defective, because it didn't describe his "objection to and disagreement with the Company's operations, policies and practices as they relate to the chair's improper and likely unlawful investigation."

And while it may be technically true that no written objections were presented by Perkins prior to the May 22nd filing, I'm not clear on when he would have had time to do so, since the date of the report on the 8K is May 18, the date he resigned, it's dated at the bottom on the 19th, as is the press release, and then filed on the 22nd. So unless he wrote mighty fast, I don't quite see how he had time to provide a written statement. His letter says that he was never given the opportunity to read the 8K prior to its filing, despite having, in his view, the legal right:

At no time has the Company provided me with a copy of the filing or advised me on my right to review and approve it, as mandated by Item 5.02 of Form 8-K."

His July email opens by saying that he'd requested "the final approved minutes of the May 18th minutes" but had not been sent them. Now, I have to mention that I don't know, and I don't think anyone yet knows, precisely what happened. Anyone can write up a letter or an 8K filing after the fact and say whatever they think is helpful to them legally, once it's clear there is a rat's nest falling on one's head. All I'm doing is highlighting the issues I see, the areas where I see conflicting accounts.

The investigation will probably turn, I would imagine, on whether HP had reason to know by his verbal remarks that he disagreed materially with the company's policies and practices. If a board member storms out, saying he is resigning after a 90-minute heated discussion, do you or don't you know he has objections to and disagreements with the Company's operations, policies and practices? Perkins, according to his letter, told HP's board in July that, in his view, as a publicly traded company, it was required to file with the SEC any time a director resigns in protest over the company's policies. He also told them he had retained a lawyer to advise him. Then there is the issue of whether HP was obligated to show him the 8K prior to filing on the 22nd.

You definitely do not want to get into a dispute with a lawyer, if you are not one. But notice that lawyers, when they are in a dispute, do not rely upon their own legal knowledge and abilities. Lawyers hire lawyers.

Attorney General Bill Lockyer has been quoted all over saying that he doesn't know yet if the pretexting was illegal, but that it certainly was "colossally stupid," and this SFGate.com article gives an indication of when he'll tell us if it was illegal or not:

Lockyer said his office is investigating five other cases of pretexting. But only the HP case involved a corporate boardroom dispute. The others involved data-mining and identity theft.

"This is very unique," he said.

The results of the investigation may be announced in several weeks, he added.

"They are presumed innocent until we determine otherwise," he said. "Still, I think the reputational injury may be the worst aspect of it." ...

Company spokesman Ryan Donovan said, "Perkins was asked if he was leaving because of any disagreement with HP, and he indicated no. Based on that, HP submitted the filing in May."

One hopes it is unique. The article quotes Charles Elson, director of the Weinberg Center for Corporate Governance of the University of Delaware, who says in his opinion, HP should have disclosed the dispute whether Perkins put his reasons in writing or not. We'll see what the SEC decides on that one. Newsweek's update has more info on a subpoena issued by the California AG:

NEWSWEEK has learned that the attorney general has issued at least one search warrant in connection with that investigation. Signed Aug. 31 by a California Superior Court judge, the warrant allows the state to search the records of a communications company. The warrant, a copy of which was obtained by NEWSWEEK, is an attempt to discover the identity of the pretexter who obtained Perkins's telephone records. The warrant may be just one of many issued in the attorney general's investigation.

Editorials are beginning to show up now too, like this one in the Mercury News by Mike Langberg, who says the chairwoman, Patricia Dunn, should leave:

If you've got a pension or a 401(k) or own mutual funds, you've probably got a stake in HP or other big corporations.

You want those companies answering to accomplished, experienced directors.

But who would serve on a board where the chair might single-handedly decide to invade directors' privacy?

But did chairwoman Dunn act alone? Was she really the only person who knew about the investigation? The HP 8K filed yesterday indicates otherwise:

As a result, the Chairman of the Board, and ultimately an internal group within HP, working with a licensed outside firm specializing in investigations, conducted investigations into possible sources of the leaks of confidential information at HP.

So who else was involved? How much did they authorize? Investigations, plural? And when did the "internal group" learn about the pretexting? How much did they know? And the biggest question of all: did HP authorize it? The Newsweek article by David Kaplan that broke this story tells us this:

HP's chairwoman, Patricia Dunn, told another director she wanted to know who it was; she was fed up with ongoing leaks to the media going back to CEO Carly Fiorina's tumultuous tenure that ended in early 2005. According to an internal HP e-mail, Dunn then took the extraordinary step of authorizing a team of independent electronic-security experts to spy on the January 2006 communications of the other 10 directors -- not the records of calls (or e-mails) from HP itself, but the records of phone calls made from personal accounts. That meant calls from the directors's home and their private cell phones.

Is that the same email we are reading today, or another? If another, somebody received that email. Who? One thing we know for sure: after the pretexting was revealed the board didn't all resign in protest. And the "internal group" -- did they protest, or did they go along with it? The article says "Dunn acted without informing the rest of the board" until she told them at the May 18 meeting. So who, if anyone, did she inform? Who made up the "internal group"? And if they were told by counsel that what the investigator was doing was legal, does that get them off the hook?

I couldn't help but notice a series of headlines about HP overhauling its Integrity server line with dual-core Itaniums. Journalists have a definite type of humor. Here's where it shows up, in these headlines:

HP Improves Integrity"

HP to bolster its Integrity

HP Shows Its Integrity

Do the headline writers know we'll do a doubletake? I think they probably do. They play with words for a living. I don't know about you, but it made me smile. A sad, wry smile. That is the issue, to me, in any case, not just the law, but the ethics. I don't think there can be much dispute about where the line is on that.

And the reason it all matters to the FOSS community, in my mind, is this: when "the enterprise" gets interested in Linux and FOSS, unfortunately they come with their type of baggage. I think it matters to notice that and to remember it when various vendors make demands on GPLv3, for example. The FOSS community doesn't do business the way big business seems to. Something like this could never happen, I don't believe, in the FOSS community. The ethics are so different. And we need to educate ourselves about how the other half lives, so to speak, so we don't let them destroy FOSS values. Not saying that they are, with any specificity. Just saying: let's keep our eyes wide open.

And on the note of ethics and business, here's a press release for you:

Global Dosimetry Solutions, Inc. (GDS), a division of Mirion Technologies, today announced that Hewlett Packard (HP) and SCO presented the new UNIX high availability system deployed at GDS during the SCO Forum 2006, the premier UNIX and application mobility conference, which was held in Las Vegas. The GDS system is one of only two in the world selected by the Executives at HP to be presented at SCO Forum.


  


The HP leak probe: who knew and when did they know it? | 86 comments | Create New Account
Comments belong to whoever posts them. Please notify us of inappropriate comments.
Corrections here
Authored by: long_hair_smelly on Thursday, September 07 2006 @ 04:43 PM EDT
So they can be fixed!

[ Reply to This | # ]

Off-Topic stuff
Authored by: long_hair_smelly on Thursday, September 07 2006 @ 04:45 PM EDT
Make them clickable!
<a href="http://somelink> Text </a>

[ Reply to This | # ]

Ethics and Corporations
Authored by: Woad_Warrior on Thursday, September 07 2006 @ 04:50 PM EDT
seems alot like "military intelligence".

[ Reply to This | # ]

At least two crimes
Authored by: WhiteFang on Thursday, September 07 2006 @ 05:00 PM EDT
AG sees 2 crimes in HP's phone record hunt

---
DRM - Degrading, Repulsive, Meanspirited 'Nuff Said.
FDA Warns Consumers Against Drinking High-Strength Hydrogen Peroxide.

[ Reply to This | # ]

HP also went after reporters' phone records
Authored by: AlanF on Thursday, September 07 2006 @ 05:01 PM EDT
According to this article at News.com, HP's investigators also used "pretexting" (lying) to get the phone records of a CNET reporter.

In this case, the phone was in the name of the reporter's husband, so they used his name and SSN.

Even if they could possibly justify going after a board member's home phone records, this is beyond wrong.

As an HP stockholder and customer, I am appalled. This evil must be excised.

[ Reply to This | # ]

So very true.
Authored by: Anonymous on Thursday, September 07 2006 @ 05:14 PM EDT
"And we need to educate ourselves about how the other half lives, so to
speak, so we don't let them destroy FOSS values."

We should keep this in mind at all times, and judge people by what they do, not
what they say.

[ Reply to This | # ]

This is so outrageous. Boycott HP products. Vote with your money.
Authored by: Anonymous on Thursday, September 07 2006 @ 05:41 PM EDT
Well, the boycott should have started when HP lined up with SCOX.

[ Reply to This | # ]

The HP leak probe: who knew and when did they know it?
Authored by: Anonymous on Thursday, September 07 2006 @ 06:28 PM EDT
First
It seems HP has made a rather bad enemy here who is in a position to swing some
clout.

Second
If this is treated as acceptable behavior it will open a floodgate for other
companies to do the same. How much privacy would dissapear at the hint of a
flimsy allegation?

Tufty

[ Reply to This | # ]

Pretexting?
Authored by: janolder on Thursday, September 07 2006 @ 06:34 PM EDT
I don't think "pretexting" is an appropriate name for what is being done here. "Identity theft" is more like it.

It baffles me that the US justice system has such a hard time with this. In Germany, the perpetrators would now be in jail awaiting trial for egregious invasion of privacy, fraud, identity theft and wire tapping.

Similar sentiments go toward the entirety of the SCO case, of course. As you've seen with Blepp's suitcase, it takes a minimum of initial evidence to convince a judge to even start a trial in Germany. If you're just blowing hot air you get to pay both sides and the court for your trouble.

And since there are no juries (a blessing, believe me), the judge can decide on the evidence all by himself without multi-year convoluted processes designed to work around the startling and bizarre concept of a jury. It's like going to a dentist (the judge) and having the janitor do the filling for you while the dentist silently watches and prays the janitor does the right thing. :-)

A German hailing from the shores of Southern California.

[ Reply to This | # ]

The HP leak probe: who knew and when did they know it?
Authored by: Anonymous on Thursday, September 07 2006 @ 06:43 PM EDT
If HP gave out the directors SS numbers to facilitate the identity theft,
can/will they be held accountable ? Or will they just go after the cat's paw ?

[ Reply to This | # ]

AG not sure pretexting is illegal?
Authored by: spuluka on Thursday, September 07 2006 @ 06:45 PM EDT
Perhaps he should talk to the FTC which says:

There Ought to Be a Law — There Is
Under federal law — the Gramm-Leach-Bliley Act — it’s illegal for anyone to:

  • use false, fictitious or fraudulent statements or documents to get customer information from a financial institution or directly from a customer of a financial institution.
  • use forged, counterfeit, lost, or stolen documents to get customer information from a financial institution or directly from a customer of a financial institution.
  • ask another person to get someone else’s customer information using false, fictitious or fraudulent statements or using false, fictitious or fraudulent documents or forged, counterfeit, lost, or stolen documents.

The Federal Trade Commission Act also generally prohibits pretexting for sensitive consumer information.

FTC Article

---
Steve Puluka
Pittsburgh, PA

[ Reply to This | # ]

"Never take your hobby public"
Authored by: ElvishArtisan on Thursday, September 07 2006 @ 06:57 PM EDT
I can easily relate to PJ's concerns. Here's why:

I've worked for a particular broadcast media company (which shall be nameless here) for nearly twenty years now. For the first fifteen years or so of that time, it was privately held. It was also quite successful financially, underwent huge growth, and was generally an exciting, "family friendly" kind of place to work.

About five years ago, the owners decided to take the company public. The stated reasons were the usual ones -- so as to be able to access new sources of capital as well as to provide additional incentives for senior management and employees in the form of stock options (this was just before the dot-com bubble burst).

Since then, I've watched that original corporate culture get slowly emasculated by a new and frighteningly different spirit, one whose acolytes are attorneys and accountants. Whereas previously such virtues as creativity, innovation and efficiency were highly valued and rewarded, the new regime reduces everything to two questions: What do the attorneys think? What will the auditors think?

The most puzzling part of all of this one the face of it is that these changes are occurring under virtually the same leadership and senior management as was in place pre-IPO. The magic phrase, the anti-genie that has and is transmuting so much of what was gold into dross is the phrase fiduciary trust. It means that everything in that organization, no matter what, must ultimately resolve to issues of dollars and cents, and be weighed accordingly. By the very act of becoming a publicly traded entity, organizations make themselves vulnerable to pressures and requiements that no one, not even the CEO and the board members themselves, have the power to resist.

Don't get me wrong -- I am not beating up on capitalism or "Wall Street" as such -- both are needed to ensure fair and efficient markets. However, I think there are warnings here for the FOSS community, especially as we move ever more into the world of "the enterprise". For a great many FOSS developers (I know that this is so for myself), simply having fun is one of the major reasons we do what we do in the first place. How do we, both as individuals and as a community, preserve that precious quality -- the joy of creativity -- in an envrionment that by it's very nature measures all things strictly in monetary terms?

It's a good question. I think that GrokLaw is the prefect place to try to find the answer.

Cheers!

[ Reply to This | # ]

History Repeats
Authored by: overshoot on Thursday, September 07 2006 @ 07:01 PM EDT
"Who will rid me of this troublesome priest?"

[ Reply to This | # ]

Review of Minutes
Authored by: overshoot on Thursday, September 07 2006 @ 07:41 PM EDT
The minutes of the meeting are the official record of what the people present said and did. As such, it must be subject to review by those it purports to represent.

In the extremely rare instances where the minutes might contain sensitive material that a (perhaps departing) member may not have a right to review, the minutes can be divided into "Before Mister Smith left" and "after Mister Smith left," with Smith only having review of the former.

I've been a departing Board member, and that's the way it's always been handled and explained by Counsel.

[ Reply to This | # ]

The HP leak probe: Plausable Explaination
Authored by: PJ on Thursday, September 07 2006 @ 08:54 PM EDT
You get so many facts wrong in this comment that
I had to nuke it.

This is too serious a story to be speculating
based on wrong facts. Either get your facts right
or don't speculate.

[ Reply to This | # ]

The HP leak probe: who knew and when did they know it?
Authored by: arnotsmith on Thursday, September 07 2006 @ 11:53 PM EDT
One thing I noticed; in the second 8K filing, it is stated that Mr Perkins
"stated that he objected to the matter being brought before the full Board
and that he believed the Chairman had agreed that he and she would handle the
matter privately."
This suggests he was involved in the original investigation, which explains why
he is so concerned when it took an unacceptable character.

[ Reply to This | # ]

"one of only two in the world"
Authored by: Anonymous on Friday, September 08 2006 @ 12:13 AM EDT
Wow, I'm impressed! Not one but *two* people actually went to SCO Forum to
present their products!? :-)

[ Reply to This | # ]

The HP leak probe: who knew and when did they know it?
Authored by: ewilts on Friday, September 08 2006 @ 12:12 PM EDT
Here's an interesting tidbit on the IP address. Although AT&T only said
that it was owned by Cox Communications, they did not say that the address
actually originates in Council Bluffs, Iowa, according to dnsstuff.com. When
the investigator went after the phone records, s/he crossed state lines to do
so. That may fall afoul of some federal statutes.

.../Ed

[ Reply to This | # ]

Groklaw © Copyright 2003-2013 Pamela Jones.
All trademarks and copyrights on this page are owned by their respective owners.
Comments are owned by the individual posters.

PJ's articles are licensed under a Creative Commons License. ( Details )