A lot of you seem to be assuming the EO applies only to people outside the US. It would be a good idea to actually read the EO, which is NOT restricted to peopl

A lot of you seem to be assuming the EO applies only to people outside the US. It would be a good idea to actually read the EO, which is NOT restricted to people outside the US. From the EO[1], reformatted to show clause structure: Section 1 (a) All property and interests ... of the following persons ... are blocked (i) any person determined by the Secretary of the Treasury ... to have engaged in ... directly or indirectly, ... any activity originating form, or directed by ... persons located outside the United States that are reasonably likely to result in ...a significant threat to national security ...or economic health ...of the united states. This language targets "any person" that meets some shockingly vague criteria[2] by few government officials[3]. The clause with "outside the United States" is not describing the person being targeted by the EO; that language is a detail about the type of activity that the targeted person is doing. If the attack is directed by someone outside the US, and you are determined to be indirectly "engaged in" or "complicit with" that that activity, you are targeted by this clause. Neither you nor the attack itself need to be outside the US, as long as it is directed by someone that is outside the US. What kinds of activities? In a previous thread I mentioned[4] how the EO doesn't prohibit harming "critical infrastructure", but instead prohibits: Section 1 (a) (i) (A) harming, or otherwise significantly compromising a computer or network of computers that support ... the provision of service ... in a critical infrastructure sector (C) causing a significant disruption to the availability of a computer or network of computers Note that section (C) does not limit itself to a "critical infrastructure sector". There are so many vague and undefined terms in this EO, I wouldn't be surprised if this EO could be used against some kid that is "indirectly" engaging in a DDOS[5] being run by some *chan troll outside the US. Also note: the EO doesn't mention the SDN list at all. -- [1] https://s3.amazonaws.com/s3.documentcloud.org/documents/1699240/executive-order-obama-establishes-sanctions.pdf https://s3.amazonaws.com/s3.documentcloud.org/documents/1699... [2] "reasonably likely to result in"? seriously? [3] those officials, by the way, can delegate the power according to Sec 8 of the EO [4] https://news.ycombinator.com/item?id=9320343 https://news.ycombinator.com/item?id=9320343 [5] does github-attack style injected javascript count?