Computer crime laws worry security pros
245945
Moves by several European countries to tighten laws against computer hacking are concerning security professionals, who often use the same tools as hackers.
16602
Companies and others that secretly install "spyware" programs on people's computers to quietly monitor their Internet activities would face hefty federal fines under a bill the House passed Tuesday.
693211
(InfoWorld) - Criminals working with computer hackersÂ pose a rising threat to businesses and governments as those entities increase their dependence on IT systems, a top U.S. federal prosecutor said Thursday. "There's always this worry, and I think a legitimate worry, that terrorists will actually launch computer attacks on critical infrastructure," said Christopher Painter, principal deputy chief of the U.S. Department of Justice's Computer Crime and Intellectual Property Section. Painter, who prosecuted famed hacker Kevin Mitnick before he signed a plea agreement, cited a case where a hacker in Australia fouled a fresh water supply in 2000 by hacking into a wireless connection and releasing tons of sewage. In the U.S. in 1997, a juvenile hacked into a computer phone and data system and turned off the runway lights at an airport in Worcester, Massachusetts, Painter said. "That obviously could have had pretty dire consequences," Painter said, who spoke about cybercrime at the Information Security Systems Association conference in London. Authorities have seen an increase in cases where hackers steal corporate data and then attempt to blackmail companies, Painter said. Others steal data and sell it to other criminals. In October 2004, the U.S. Secret Service busted the "Shadowcrew," a criminal group that stole credit card data and then sold it on a Web site, Painter said. The problem for law enforcement is that the bad guys are showing increased technical sophistication and often commit cybercrimes across borders, Painter said. But countries are coordinating more on investigations and takedowns, Painter said. Forty-five countries have joined the G8 24/7 High Tech Crime Network, a group of contacts that can offer immediate assistance to other countries on terrorist or criminal cases involving electronic evidence, Painter said. Painter cited a success this week whereÂ Moroccan authorities sentenced two people to prison for the Zotob and Mytob worms, which downed computers worldwide in August 2005. The U.S., Turkey, Morocco and Microsoft Corp. aided in that investigation, he said. But a difficulty with international investigations are countries with weak or no laws against computer crime, Painter said. "Any country that doesn't have good laws is going to be a weak link," he said. Â
221493
Internet lawyer Venkat Balasubramani says the outcome of a legal tiff could force big changes in the antispyware landscape.
90778
It only takes 20 minutes on the Internet for an unprotected computer running Microsoft Windows to be taken over by a hacker. Any personal or financial information stored
20487
Tech managers fear businesses are more vulnerable to malware because of wireless devices used by workers
472388
A study released the Computer Security Institute indicates that legal frameworks designed to catch up online attacks are hamstringing security researchers.
589164
According to a new report by the Computer Security Institute (CSI), online security research is being hampered by laws that could land researchers in prison for looking for Web site vulnerabilities, much less disclosing them publicly.
185521
U.K. prosecutors have received guidance on interpreting amendments to a&#160;computer crime law&#160;that introduce stronger penalties for computer hacking.A six-page document published on Monday by the Crown Prosecution Service (CPS) gives prosecutors pointers for handling offenses under soon-to-change provisions of the Computer Misuse Act (CMA) of 1990.The amendments were passed into law in November 2006 but have not yet come into force. The changes are designed to strengthen the government&#39;s ability to prosecute and punish hackers, and increase penalties for accessing systems without authorization.Computer security professionals have expressed concern&#160;about the drafting of the changes, however.The most-discussed change, contained in Section 3A of the CMA, makes it illegal for someone to create an application that is &quot;likely&quot; to be used for hacking. But the precise definition of &quot;likely&quot; has prompted fears the law could potentially target those undertaking activities such as penetration testing.According to the CPS document, prosecutors should look at what an application does and who its creator thought would use it. Conditions to consider would be whether the hacking tool was given to a &quot;closed and vetted list of IT security professionals or was posted openly,&quot; CPS said.Prosecutors should also find out whether the tool has a legitimate purpose, if it has a large installation base and whether it&#39;s commercially sold.Some applications will &quot;have a dual use, and prosecutors need to ascertain that the subject has a criminal intent,&quot; CPS said. Possession of a program is not enough to prosecute, it said.Computer security researchers &quot;might find some comfort in this guidance&quot; since criminal intent must be demonstrated, said Struan Robertson, senior associate with law firm Pinsent Masons.The guidance is generally acceptable, wrote Richard Clayton, a computer scientist at the University of Cambridge, on his blog. But using the criterion of whether a hacking program is available for sale ignores the fact that much software is free, Clayton said.On another issue, the document also clarifies what constitutes unauthorized access to a computer, a crime under Section 1 of the amended CMA. The defendant must know that the intended access wasn&#39;t permitted, and prosecutors must show that the person intended to improperly access information from the computer.&#160;
675654
Although online shopping has its risks, your credit-card number and other personal information are just as likely to be stolen in a very low-tech way.
726987
The loss or theft of personal data such as credit card and Social Security numbers is soaring to unprecedented levels, and the trend isn't expected to turn around anytime soon as hackers stay a step ahead of security and laptops disappear with sensitive information.
564903
A serious security hole in a wide swath of the company's antivirus products could let an outsider crash or hijack a computer.
227898
By Anonymous  Computer Security PEOPLE who use their home computers to access Thrift Savings Plan accounts can be vulnerable to having their personal information stolen.
178553
American lawmakers are close to outlawing the making of spyware that smuggles its way on to your PC.
489711
Police obtain permission from a 91-year-old man to break into his grown son's computer. The court that allowed this search might want to reconsider.
99945
Attackers could use hole in small-business software to trick personal information out of people.
643950
Businesses have more to worry about with end-user abuse and security lapses, research suggests.