Language Selection

English French German Italian Portuguese Spanish

Security Research and Computer Crime - Where do we Draw the Line?

Filed under
Legal

This is interesting - the case of Eric McCarty, a security researcher and sysadmin charged by Federal prosecutors last month with "knowingly having transmitted a code or command to intentionally cause damage" to the University of Southern California's applicant website (I noticed the FBI press release uses the word "sequel" instead of SQL. I hope that wording didn't come from the complaint itself...).

Apparently, McCarty exploited a SQL injection flaw to access student data (which included social security numbers and dates of birth) in the database backing USC's website. He then notified SecurityFocus via email, who notified USC of the vulnerability. USC shut their site down for two weeks while it was being fixed (my guess is the "damage" comes from the fact that USC had to take their applicant website offline, since McCarty didn't do anything malicious with the information). Here is the text of the statute he is alleged to have violated (see section (5)(A)(Sleepy).

The case, and others like it, show the ethical conflict involved in some computer crime prosecutions.

Full Story.

More in Tux Machines

[GNU IceCat] browser is (finally) on Fedora

GNU Icecat will be available on Fedora updates-testing repositories for some days. That’s right time to test harshly this new web browser (really it’s not so new considering it’s a fork of Firefox) and leave a positive/negative karma or open a bug. Read more

today's howtos

today's howtos

Leftovers: Gaming

  • Ryan Icculus Gordon On The Linux Action Show
    Ryan Icculus Gordon has just recently been on a guest on the excellent Linux Action Show to talk about Linux gaming. Ryan Icculus Gordon is the name behind a number of big ports, and you can see here just what he has done. Hint: It's a lot.
  • Empire: Total War Looks Close To A Linux Version, Pokes Fun At Linux Gamers
    We already knew that Total War: Rome II would come to Linux which sadly didn't come out when expected early this year, but now it looks like the original Empire: Total War will come to Linux too.
  • Another (Linux) game added to the Humble Jumbo Bundle 2
    - Legend of Grimrock: Old school and modern gaming combines in this thrilling dungeon crawler RPG from Almost Human Games. A group of prisoners are sentenced to certain death by exile to the secluded Mount Grimrock for vile crimes they may or may not have committed. Unbeknownst to their captors, the mountain is riddled with ancient tunnels, dungeons, and tombs built by crumbled civilizations long perished now. If they ever wish to see daylight again and reclaim their freedom, the ragtag group of prisoners must form a team and descend through the mountain, level by level.