3 ms·

omg dude it literally says that in the code: https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_A

omg dude it literally says that in the code: https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act

ziddoap 2y ago
https://www.justice.gov/opa/pr/department-justice-announces-new-policy-charging-cases-under-computer-fraud-and-abuse-act https://www.justice.gov/opa/pr/department-justice-announces-... >The Department of Justice today announced the revision of its policy regarding charging violations of the Computer Fraud and Abuse Act (CFAA). The policy for the first time directs that good-faith security research should not be charged. Good faith security research means accessing a computer solely for purposes of good-faith testing, investigation, and/or correction of a security flaw or vulnerability, where such activity is carried out in a manner designed to avoid any harm to individuals or the public, and where the information derived from the activity is used primarily to promote the security or safety of the class of devices, machines, or online services to which the accessed computer belongs, or those who use such devices, machines, or online services.
- mdaniel 2y ago
  AIUI "policy" is not "law," and are subject to the whims of the current leadership in the DoJ Then again, it's my opinion that "law" isn't "law" if one has enough lawyers
  - soulofmischief 2y ago
    You're correct, this is not so black and white as you originally established. Glad you came around! And yes, it's posturing if you wax on from such a pedestal without even reading the first paragraph of the article, which addresses your legitimate concerns.
    - archon810 2y ago
      You're not replying to the original poster. It's a different commenter.
      - soulofmischief 2y ago
        Thank you, my mistake!
ergl 2y ago
Would a law specific to the United States apply when you're probing a Chinese company?

omg dude it literally says that in the code: https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act

ziddoap 2y ago

https://www.justice.gov/opa/pr/department-justice-announces-new-policy-charging-cases-under-computer-fraud-and-abuse-act https://www.justice.gov/opa/pr/department-justice-announces-... >The Department of Justice today announced the revision of its policy regarding charging violations of the Computer Fraud and Abuse Act (CFAA). The policy for the first time directs that good-faith security research should not be charged. Good faith security research means accessing a computer solely for purposes of good-faith testing, investigation, and/or correction of a security flaw or vulnerability, where such activity is carried out in a manner designed to avoid any harm to individuals or the public, and where the information derived from the activity is used primarily to promote the security or safety of the class of devices, machines, or online services to which the accessed computer belongs, or those who use such devices, machines, or online services.

mdaniel 2y ago
AIUI "policy" is not "law," and are subject to the whims of the current leadership in the DoJ Then again, it's my opinion that "law" isn't "law" if one has enough lawyers
- soulofmischief 2y ago
  You're correct, this is not so black and white as you originally established. Glad you came around! And yes, it's posturing if you wax on from such a pedestal without even reading the first paragraph of the article, which addresses your legitimate concerns.
  - archon810 2y ago
    You're not replying to the original poster. It's a different commenter.
    - soulofmischief 2y ago
      Thank you, my mistake!

ergl 2y ago

Would a law specific to the United States apply when you're probing a Chinese company?