[ox] FWD: Investigation of Security Holes to be Criminalized?
- From: KXX4493553 aol.com
- Date: Thu, 4 Oct 2001 17:37:42 EDT
Investigation of Security Holes to be Criminalized?
http://www.extremetech.com/
Imagine the following scenario. A computer security expert recognizes
what he believes to be a serious security hole in a computer on the
Internet. He pokes around a bit, performing some tests to verify that
the hole exists. He then reports the problem to the appropriate
authorities.
He is tried and convicted as a terrorist under the so-called "PATRIOT
Act" (the anti-terrorism legislation now pending in Congress) and is
sentenced to life imprisonment without any possibility of parole.
Sound far-fetched? Unfortunately, under new legislation now being rushed
through Congress with little consideration for its potential effects,
this is an all-too-plausible scenario. All acts of computer
trespass--including an "offense" as minor as sending an e-mail to
someone who told you not to do so--would be elevated to the status of a
"terrorist act."
Employees of government agencies and corporations, hoping to save face
when they have created security holes due to negligence or lack of
knowledge, will likely press the FBI to lock up those who blow the
whistle on security holes. The law further states that anyone who
"attempts" to commit such an act shall be subject to the same penalties
as one who succeeds, making it impossible for a computer expert to act
as a good Samaritan by testing for and reporting vulnerabilities without
doing harm.
The act also expands government wiretapping privileges and police
powers. As of this writing, it has passed out of the House Judiciary
Committee but has not yet reached the floor of the House. For more
information on this legislation, see the links below.
EFF: Hackers Could Get Life in Prison, No Parole, Under "Anti-Terrorism"
Bill
http://extreme.ziffdavis.com/cgi-bin10/flo?y=eLSJ0CzBVG0FBU0OGe0A3
EPIC: Text of "PATRIOT Act"
http://extreme.ziffdavis.com/cgi-bin10/flo?y=eLSJ0CzBVG0FBU0OGf0A4
CDT Cyber Security: Response to September 11, 2001 Terrorist Attacks
http://extreme.ziffdavis.com/cgi-bin10/flo?y=eLSJ0CzBVG0FBU0OGg0A5
House panel approves antiterrorism bill
http://extreme.ziffdavis.com/cgi-bin10/flo?y=eLSJ0CzBVG0FBU0OGh0A6
,_,.-:*'``'*:-.,_,.-:*'``'*:-.,_,.-:*'``'*:-.,_
¤ Henry Musikar
MS Associate Expert
GRCI ITS
703-506-5016
Kurt-Werner Pörtner
________________________________
Web-Site: http://www.oekonux.de/
Organisation: projekt oekonux.de