Intrusion Detection Systems mailing list archives

Re: mouse trap + fight back!


From: bacano () esoterica pt (bacano)
Date: Thu, 18 May 2000 19:21:56 +0100


Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
Hi2all

In previous replies to this issue, was well rased the legal issue, and not
just ethics, because legal doesnt mean ethical, and ethical doesnt mean
legal.

IMHO, first of all, before fight back, think that you can be begining a war
you are not prepared too, and probably you will only grow your problem.
(adviced lecture: Sun Tzu, any web search engine can find a copy)

Second, fighting back can be illegal, so better know something about your
country laws on cybercrime, before watching the sun in cubes ...
http://conventions.coe.int/treaty/en/projets/cybercrime.htm is a good start
for thinking about this also.

G8 are now discusting how big can be the arm of the cyberlaw. US want a nice
and big cyber Robocop elite force with worldwide jurisdiction ... this was
the 1st proposal of the meeting, that was rejected by EU because it dont
even have legal basis, since a worldwide cyberspace is something that dont
have a juridical support. Before must came the laws, so the world, and in
particular the G8, must think better about them first of all (as will be the
conclusion of this meating).

Something here must be also cleared, US laws are just laws in US, not in the
world, witch means that someone in a country that dont have cyberlaws, can
fight back without being legally accused of anything. The US Department of
Defense, is *just* the *US* Department of Defence!

Funny things had allready happend in this area, when US forget that is also
life out there, not just in other planets, but in other countries on Earth
too. Was like the old version of the availablety of the 128-bit upgrade of
IE. "You must promise and cross your heart that you will not export 128 bit
crypto technology" ... yeah sure, and what if i'm just importing it and my
country laws allow me that? "We will check your IP to see is it is US or CA"
they said, what they never said was how was possible that in some
conditions, that upgrade was indeed available worldwide. Like other funny
things ... why PGPi became legal, or why EFF had published books as
"Cracking DES".

Think this way, its known that laws can be cracked as well as software,
cyberlaws is a legal issue much more dificult because it mix both areas
vulnerabilities, and there is allways a risk that somebody can legally dump
them. There are nerds for all flavours ... and of course, there are lawyers.

Seems that "they" know how to handle supposed criminals that only know how
to push the mouse, or others that are from the very top but like somehow
that people know who did that stuff ... and sooner or later the signature
will be too big to hide. And that is all? As an answer, i will give another
question, that is not even my own, but from somebody like Mr Richard Power
(CSI): "And what about professional hackers?"

[ ]'s
Bacano

.


Current thread: