Language Selection

English French German Italian Portuguese Spanish

Security Research and Computer Crime - Where do we Draw the Line?

Filed under
Legal

This is interesting - the case of Eric McCarty, a security researcher and sysadmin charged by Federal prosecutors last month with "knowingly having transmitted a code or command to intentionally cause damage" to the University of Southern California's applicant website (I noticed the FBI press release uses the word "sequel" instead of SQL. I hope that wording didn't come from the complaint itself...).

Apparently, McCarty exploited a SQL injection flaw to access student data (which included social security numbers and dates of birth) in the database backing USC's website. He then notified SecurityFocus via email, who notified USC of the vulnerability. USC shut their site down for two weeks while it was being fixed (my guess is the "damage" comes from the fact that USC had to take their applicant website offline, since McCarty didn't do anything malicious with the information). Here is the text of the statute he is alleged to have violated (see section (5)(A)(Sleepy).

The case, and others like it, show the ethical conflict involved in some computer crime prosecutions.

Full Story.

More in Tux Machines

Release: SymphonyOS 15.0

I am pleased to announce the release of SymphonyOS 15.0. This release continues improvements to the Mezzo 4 desktop bringing it to a much more stable state. Read more

GOL Survey Results: January

Thanks to GOL reader Fedso, we now have month-by-month comparisons for the survey as well as an automated program which takes the raw survey data and makes graphs. This is pretty exciting stuff since now one of the main goals of the survey project has been achieved and we can observe trends over time. You can find the new survey for this month here. Read more

2014 was a record-breaking year for Android smartphones

Apple may be selling more iPhones than ever before, but 2014 was a record-breaking year for Android too: New analyst figures show that one billion smartphones running Google’s mobile OS were shipped over the 12 month period. That’s a rise of 30 percent over the previous year and means that 81 percent of the mobile phones shifted in 2014 were running Android. If you’re wondering why both iOS and Android can be doing so well simultaneously, it’s worth remembering that profits and market share are not the same metric — more devices run Android but Apple is raking in more of the cash. A number of different manufacturers produce Android phones of course, none of whom are doing particularly well at making money from it. Read more

CoreOS 'Rockets' Ahead With Docker Alternative

Linux operating system distribution vendor CoreOs aims to expand its own vision for container-based virtualization. CoreOS is moving forward on its plans to displace the Docker application virtualization technology and expand its own vision for container-based virtualization. CoreOS got its start in 2013 as a clustered operating system project focused on the optimized delivery of Docker containers but has found fault in the Docker model that it aims to correct with its own Rocket approach. Read more Also: CoreOS Linux: it's how Google, Facebook & Twitter run at scale