Slashdot Mirror


U.S. And EU Ready International Cybercrime Treaty

Nightspore writes: "Yes, while you slept last night another supra-governmental body was hard at work readying a shiny new set of chains for you. Read more on how the US and EU are putting the finishing touches on their international cybercrimes treaty. The treaty will force all signatories (i.e. your government) to make illegal the 'import and distribution of devices used for hacking.' Signatories also would be required to 'provide law enforcement authorities with the ability to conduct computer searches and seize computer data.' "

193 comments

  1. Devices used for Hacking? by Greyfox · · Score: 4
    IE: Computers?

    Cool! Where do we sign?

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    1. Re:Devices used for Hacking? by interiot · · Score: 3

      Or brains?
      --

    2. Re:Devices used for Hacking? by technos · · Score: 3

      Actually, I'd rather we ban export of people without brains. The typical US tourist seems to make the rest of us look rather sorry, so perhaps this is one good way to prevent sour international relations..

      --
      .sig: Now legally binding!
    3. Re:Devices used for Hacking? by Mignon · · Score: 2
      Or brains?

      Sorry Mr. Torvalds/Mr. Johansen/etc. Your brain has been classified by our government as a munition and you are hereby denied entry into our country.

    4. Re:Devices used for Hacking? by Scrag · · Score: 2

      Where do they draw the line?
      Will computers be illegal? No
      Will encryption tools be illegal? Maybe, or restricted
      Will security tools that can be used for hacking be illegal? Most likely

      This is one of the worst laws I have heard of...
      We need to let our government know that it is not OK with us!
      Another problem is what they consider hacking. Is ping flooding someone hacking? Maybe cracking a box? How about modifying an executable file... No more hex editors, they are a "hacking tool"
      This could be the loss of freedom on the net as we are used to it now.

    5. Re:Devices used for Hacking? by pantherace · · Score: 1
      The typical US person is rather ill informed.
      Most US people aren't dumb, just mis-informed. Lets help educate them.

      You won't get an IQ bonus for logging on, (( just some news that matters in reality, not the my cat was treed, my dog died sort of news,)) but it may take your ignorance down alot.
      You won't get an IQ bonus for logging on, but it may take your ignorance down alot.
      there is the new /. ad.
      Oh, well, most people are "happy" being mindless drones.

    6. Re:Devices used for Hacking? by PepperSFG · · Score: 1

      Well, looks like we're back to carrier pidgeons then. Mind you, they'll probably be outlawed for crapping on the street!

    7. Re:Devices used for Hacking? by Simon+Jester · · Score: 1

      Having encountered USians in their native habitat, as well as outside it, I can state categorically that the latter are, by and large, far more acceptable. At least they know there is a world outside of the US...

      Smilin' Simon

      --
      -- Free Luna!
    8. Re:Devices used for Hacking? by technos · · Score: 2

      Of course there is a higher percentage of 'smart' ones outside the country. How many people you know that can afford a three week trip to Paris on what they make as a peep-show booth cleaner or as the deep fry schmuck at McDonalds??

      Still, Ma and Pa Piddioit are out there..

      --
      .sig: Now legally binding!
  2. hmmm... by B00yah · · Score: 2

    Well, let's see, there goes every compiler, text editor, hand tool, hardware, heck, pencils and paper can be used too! Better take those away!


    öööööööööööööööööööööööööööööööööööö

    1. Re:hmmm... by Yottabyte84 · · Score: 1

      then my name would be yan which sounds gay

    2. Re:hmmm... by Azog · · Score: 3

      Your're right - sort of. The biggest problem with laws like this is that "hacking tools" is obviously too vague. And vague laws are a license for selective enforcement - a way to get people thrown in jail when they have an attitude that powerful people don't like.

      Owning computers, compilers, debuggers, and the like will be legal - until you do something with them that some government agency or big company doesn't like. Then they will call it "hacking" and the fact that you have those tools will be proof that you are a criminal.

      Under a law like this, the people that reverse engineered CueCat could be charged with possession of hacking tools - the same software that millions of other people have - but their knowlege and application of those tools will magically make the tools themselves illegal.

      I figure it will be time to leave the US and move to a free country in about 5 years at the rate things are going. Hope there are some free countries left by then.

      Torrey Hoffman (Azog)

      --
      Torrey Hoffman (Azog)
      "HTML needs a rant tag" - Alan Cox
  3. wait wait wait by evanfarrar · · Score: 1

    "tools for hacking" you mean computers?

    --

    "Sorry, but I don't there's anything charming about ignorance and carelessness." -LordNimon
    1. Re:wait wait wait by evanfarrar · · Score: 1

      damn i hate when we send at the same time, argh, im not even going for first crappy post

      --

      "Sorry, but I don't there's anything charming about ignorance and carelessness." -LordNimon
  4. These proposals sound resonable... by Rombuu · · Score: 2

    After all, they aren't that different than the rules that apply in the offline world. The legality of an act shouldn't vary depending on if something happens offline or online, and enforcement should be the same way.

    --

    DrLunch.com The site that tells you what's for lunch!
    1. Re:These proposals sound resonable... by interiot · · Score: 3
      If you do something illegal on the internet... guess what? It's still illegal.

      This law is like saying "it's illegal to posess any object that could possibly be used to kill someone".

      Hint: that's very different from saying "It's illegal to kill someone".
      --

    2. Re:These proposals sound resonable... by Stonehand · · Score: 2

      That's not a terribly unusual argument, however. Handguns are banned in D.C. for that very same argument if memory serves, as are all long guns in NYC. Of course, the usefulness of such laws is rather dubious...

      A problem right now with internet crime is jurisdiction. Without treaties, it's unclear how international unauthorized access should get handled -- especially since different nations have different ideas on what is or is not illegal, let alone different judicial systems and standards. It's probably a good idea to formalize guidelines...

      --
      Only the dead have seen the end of war.
    3. Re:These proposals sound resonable... by interiot · · Score: 2
      But gun offense and defense technology is mostly developed by now.

      Computer security isn't developed very much yet, and this law will probably encourage admins to be lazier. And the only people who will have hacking skills worth mentioning will be the criminals.

      If hacking were allowed to go on for a few more years, most of it would be innocent. During that time, defense strategies would be refined, allowing our overall security to be actually stronger, rather than legally stronger (which isn't worth much).
      --

    4. Re:These proposals sound resonable... by Miriku+chan · · Score: 1

      i could kill you with a hamseter, you know

      should hamsters be outlawed?

      --
      shaolin punk, activist post-industrial
    5. Re:These proposals sound resonable... by SealBeater · · Score: 1

      I have a pencil in my pocket that can be used to kill a person. Same with my belt, the chain attached to my wallet, and the edge of my hand. Is the goverment going to legislate that away as well?

      --
      -- Its survival of the fittest...and we got the fucking guns!!!
  5. "sieze computer data" by SpitefulBen · · Score: 1

    provide law enforcement authorities with the ability to conduct computer searches and seize computer data. better remember rm -rf /

    1. Re:"sieze computer data" by Virtex · · Score: 1

      "rm -rf /" will not actually remove the data from your hard drive. It merely unlinks the files. Anyone who looks at the drive at the raw level will be able to see what was in your files. If you want to wipe out the data on your drive, do something more like "cat /dev/urandom >/dev/hda" (from a rescue disk) and repeat about 5 times (otherwise, it may still be possible lift the upper layers and recover the underlying data).

      --

      --
      For every post, there is an equal and opposite re-post.
    2. Re:"sieze computer data" by kag · · Score: 1


      In OpenBSD I would recommend `rm -r -f -P /`

      RM(1):

      -P

      Overwrite regular files before deleting them. Files are overwritten three times, first with the byte pattern 0xff, then 0x00, and then 0xff again, before they are deleted.

    3. Re:"sieze computer data" by pantherace · · Score: 1
      One thing I like about KDE 2 is that it has a shred option (and delete) which makes several passes over the hard drive sectors.

      Oh, Dear KDE 2 is another "hacking tool", me and my big mouth!

  6. Good grief. by Samrobb · · Score: 1

    While they're at it, why don't they forbid the import/export of items that can be used to commit murder? Things like automobiles, tobacco, alcohol... oh, wait; that's right. Anything that dulls the senses is good; anything that sharpens the mind is bad. Silly me, next thing you know, I'll start doubting what Ministry of Truth tells me...

    --
    "Great men are not always wise: neither do the aged understand judgement." Job 32:9
  7. More than just the US and EU by scowling · · Score: 5
    The title of this article is a little misleading; in fact, the pact involves the US, Canada, Japan, South Africa, and the Council of Europe (which is a 41-country body which makes loose policy on every topic except for defense.

    The Council of Europe is, therefore, more far-reaching than the EU as it includes all of those countries that didn't join the EU (like Norway). Even Moldavia and Liechtenstein are on the Council.

    So, essentially, this is even worse that you might have thought. There is pretty much no "western data haven" to work from.
    --

    --
    www.kitchengeek.com -- Nosh for
    1. Re:More than just the US and EU by interiot · · Score: 3

      Thus, third world countries can make lots of money by being data havens. The knowledge gap meets the freedom gap.
      --

    2. Re:More than just the US and EU by RoscoHead · · Score: 1

      So, essentially, this is even worse that you might have thought. There is pretty much no "western data haven" to work from.

      Didn't see Australia mentioned anywhere!! Hey maybe we should market our country as the "cyber-crime centre"!!

      --

      Why is there only one Monopolies commission?
  8. Note that it says US and EU... by mholve · · Score: 1

    If you're in a country oustside of those two unions, you're still home free. Countries that have little or no views about "cybercrime" such as cracking and piracy - remain uneffected.

    1. Re:Note that it says US and EU... by j-pimp · · Score: 1

      I'm moving to Russia!!

      I'm for private colonization of the moon. A few volunteers locate themselves in some third world nation and build rockets from surplus parts that they launch to the moon to build a colony with.
      If this is feasable it would be perfect assuming we can aqquire a pair of tranceivers for those high speed wireless connections that the mars probe uses. It might be what we need to acclerate space colonization. Unfortunatly this is just a pipe dream

      --
      --- Justin Dearing http://www.justaprogrammer.net/ We're just programmers.
  9. Drawing the line by Pyromage · · Score: 2

    The big question, of course, is what a hacking device is?

    I mean, if they can ban a "hacking device" they have just been vague enough to sieze anything from a computer, except MAYBE the moniter. And then consider that software product could be a hacking tool. Port scanners and security auditing tools are widely used for cracking. But on the other side they are used to combat it too.

    We are hopeless, for when this passes, the government will have complete control over any and all electronics, and they cannot be held accountable.

    Good luck, we'll need it.

    1. Re:Drawing the line by interiot · · Score: 3
      Well, here's the first draft. The article says they're nearing a final draft, so this one might not be right (anyone find a better one?)

      • a. the production, sale, procurement for use, import, distribution or otherwise making available of:

        1. a device, including a computer program, designed or adapted [specifically] [primarily] [particularly] for the purpose of committing any of the offences established in accordance with Article 2 - 5;

        2. a computer password, access code, or similar data by which the whole or any part of a computer system is capable of being accessed with intent that it be used for the purpose of committing the offences established in Articles 2 - 5;

        a. the possession of an item referred to in paragraphs (a)(1) and (2) above, with intent that it be used for the purpose of committing the offenses established in Articles 2 - 5. A party may require by law that a number of such items be possessed before criminal liability attaches.


      Sounds just like the DMCA's defintion about what a copyright infringement device is. So this type of law now will extend from only covering copyrights to covering anything that was intentionally locked. Which would probably cover the CueCat (keep those articles coming!)

      (please note: offline lockpicks are not illegal. online ones will be illegal soon.)
      --

    2. Re:Drawing the line by interiot · · Score: 2
      Offences consist of violating one of the following: authorization/authentication [2], confidentiality [3], integrity [4], or availability [4,5].

      Additional clauses were added for forgery, fraud, kiddie porn, and copyright infringement on a computer.
      --

    3. Re:Drawing the line by rveety · · Score: 1

      (please note: offline lockpicks are not illegal. online ones will be illegal soon.) Not quite, I own a set of lock picks and I have asked friends that are police officers. They tell me that I could be charged with possing and instrument of crime. I believe this is just as rediculous as software being an instrument of crime just because I have a copy of it. I've never used lock picks to break into anyone's house illegally, only to impress friends and gain knowlege on my own locks. The same goes for computer software, its great to test the latest exploits on my personal computers but I would never use them to take down .com. Does this mean I should be charged with "the possession of an item referred to in paragraphs (a)(1) and (2) above"???? That sucks! It is the act of commiting the crime that is (or should be) illegal, not having the ability to do so. I have the ability to take my kitchen steak knive and stab the authors of this dumb law...they better come arrest me and take away this "instrument of crime" before I eat my dinner tonight.

    4. Re:Drawing the line by interiot · · Score: 3
      The Locksmithing FAQ says:
      • 3. Is it legal to carry lock picks?
      • This depends on where you are. In the U.S. the common case seems to be that it is legal to carry potential "burglar tools" such as keys, picks, crowbars, jacks, bricks, etc., but use of such tools to commit a crime is a crime in itself. Call your local library, district attorney, police department, or your own attorney to be sure. Possession of potential "burglar tools" can be be used as evidence against you if you are found in incriminating circumstances. An example of a state law can be found in the Viginia State Code: Section 18.2-94 _Possession of burglarious tools, etc._ "If any person have in his possession any tools, implements or outfit, with intent to commit burglary, robbery or larceny, upon conviction thereof he shall be guilty of a Class 5 felony."

        Note that the prosecution has to prove "intent". However, the law continues: "The possession of such burglarious tools, implements or outfit by any person other than a licensed dealer, shall be prima facie evidence of an intent to commit burglary, robbery or larceny." This means that the possessor can have a bit of an uphill battle and has to convince the jury that this 'prima facie evidence' is misleading.

        Places where it *is* illegal to carry lock picks: The District of Columbia, New York State and Illinois. New Jersey law appears to make these illegal if they can work motor vehicle locks. There may be many other places as well (such as Canada, Maryland and California.) It can be hard to tell since the relevant laws can be dealing with burglary, motor vehicles or locksmith regulation, etc. This emphasizes the importance of finding out for *your* area - and determining the applicability to *your* circumstances (e.g., locksmith, full or part-time), repo worker, building maintenance worker, ...


      --
    5. Re:Drawing the line by lpontiac · · Score: 1
      Additional clauses were added for forgery, fraud, kiddie porn, and copyright infringement on a computer

      And since it probably could be "adapted" or "primarily used" for such... another nail in Napster's coffin?

  10. Reminder: treaties supercede constitution by coyote-san · · Score: 3

    A friendly reminder that ratified treaties supercede the constitution. That makes sense when the treaty ends a war and the option is rewriting the entire Constitution; it makes much less sense when it will provide a de facto end run around reasonable limits on domestic law enforcement.

    --
    For every complex problem there is an answer that is clear, simple, and wrong. -- H L Mencken
    1. Re:Reminder: treaties supercede constitution by guibaby · · Score: 1

      A friendly reminder that nothing but stupidy supercedes the constitution.

      --
      Historically, the claim of consensus has been the first refuge of scoundrels.
    2. Re:Reminder: treaties supercede constitution by Electric+Angst · · Score: 1

      A friendly reminder that ratified treaties supercede the constitution.

      Thank Goodness!!!
      It time that people start to realize that the only option we are going to have to balance the ever-increasing power of the multinational corporations is a ONE WORLD GOVERNMENT. Yes, I said it, and it's true. Unfortunantly, because too many of the people who are concerned for individual liberty have been bamboozled into thinking that government is the direct enemy of those rights, when in fact at least governments have to keep up some form of representation, while corporations, which have just as much ability to squash human rights, have no accountability.
      Now, if you care for your own liberty, get off your ass, drop your copy of 1984, and start trying to make a difference where it really matters, in creating and strengthening a strong, corporate-checking, world government.
      --

      --
      Feminism is the wild notion that women are human beings.
    3. Re:Reminder: treaties supercede constitution by StevenMaurer · · Score: 2

      BZZT! Wrong answer. Nothing "supercedes" the constitution. Not in the U.S. nor anywhere else I'm aware of. Rather, treaties are *sanctioned* by the Constitution, and *if ratified* (e.g. signed into law by Congress/President) have the same force as any other law - subject to the same constitutional limits that any other law has.

      The original poster should go back and take a remedial course in civics. Either that or go join some random right-wing kook group with their typical habit of making bald assertions that they have no clue about.

    4. Re:Reminder: treaties supercede constitution by interiot · · Score: 2
      Constitution , Article VI:
      • This Constitution, and the laws of the United States which shall be made in pursuance thereof; and all treaties made, or which shall be made, under the authority of the United States, shall be the supreme law of the land; and the judges in every state shall be bound thereby, anything in the Constitution or laws of any State to the contrary notwithstanding.
      I think that means: constitution first, state laws second, treaties third? That hurts my head to read.
      --
    5. Re:Reminder: treaties supercede constitution by krlynch · · Score: 1

      Nope...

      Article VI, paragraph 2

      This Constitution, and the laws of the United States which shall be made in pursuance thereof; and all treaties made, or which shall be made, under the authority of the United States, shall be the supreme law of the land; and the judges in every state shall be bound thereby, anything in the Constitution or laws of any State to the contrary notwithstanding.

      So, treaties are such as to law, only when made under the authority of the United States...which derives from the powers granted it by the people in the Constitution. So, any treaty in violation of the Constitution has not been made under the authority of the United States, and hence is invalid.

    6. Re:Reminder: treaties supercede constitution by Parity · · Score: 3

      It says,
      'The constitution, and laws made by the rules of the constitution, and treaties made by the USA, together make up the supreme law, and all judges are bound by it, no matter what the state laws and state constitutions of the individual states may say.'
      Or in other words, the constitution + federal law + treaties are bigger and badder than state laws and state constitutions; it doesn't say where treaties are relative to the federal constitution... though since the only thing that gives treaties power is the constitution -saying- they have power, there's a certain implication there...


      --Parity

      --
      --Parity
      'Card carrying' member of the EFF.
    7. Re:Reminder: treaties supercede constitution by Anonymous+Coed · · Score: 1
      start trying to make a difference where it really matters, in creating and strengthening a strong, corporate-checking, world government.

      Ummm, reality check, Pollyanna. What makes you think your precious 'world government' will be working on the behalf of (and accountable to) the People? The UN already exclusively serves the interests of major corporations and their proxies (such as the US Federal gov't) ... what makes you think that will change when UN law supercedes any national law (which is next to inevitable, unfortunately.) What mechanism will we have to ensure the world government does not simply become the tyrannical tool of the power elites? The answer: there is no and will be no mechanism. There is no hope. Just remember the golden rule: he who owns the gold makes the rules. If you have trouble picturing this, try to imagine a giant boot pressed in the face of humanity for all eternity. That is, until we're all wiped out by asteroids, which will be a happy, happy (though distant) day.

    8. Re:Reminder: treaties supercede constitution by Vassily+Overveight · · Score: 2
      Either that or go join some random right-wing kook group with their typical habit of making bald assertions that they have no clue about.

      Yes, those kooky right-winger cut-ups. With their assertions about being the inspiration of Love Story, their mothers-in-law paying more for health care than their dogs, being lulled to sleep at age 27 by the "Look for the Union Label" song, and Clinton being the one of our "greatest Presidents." What a bunch of idiots.

      --

      "If I have seen further than other men, it is by stepping on their glasses." - Michael Swaine

    9. Re:Reminder: treaties supercede constitution by Lullabye · · Score: 1

      Unfortunately, the DOJ has consistantly over anylized the constitution to such an extent that they've been able to pass dozens of laws that are unconstitutional. There are tons of laws out there that are unconstitutional, however, by "creative interpertation" of the constitution, they've been able to pass them. Look at how items can get taxed twice, (for instance, you pay tax on a used car, that was already taxed, or the IRS can freeze your money, and the money of your family, without due process, and garner your wages, and you have to prove your innocence to get it back).

      --
      "God is REAL ... unless previously declared as an integer"
    10. Re:Reminder: treaties supercede constitution by Ungrounded+Lightning · · Score: 2

      A Senate ratified (which this one isn't yet - write those letters) treaty is equal in auhotirity to the Constitution, but cannot supersede it.

      Actually, it is not equal to the constition. It's just that it's a member of the set of federal things (constitution, laws, treaties) that override state things (constitutions, laws).

      --
      Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    11. Re:Reminder: treaties supercede constitution by wakebrdr · · Score: 1

      Well said!!!

      --
      Slashdot: Liberal News for Nerds. Liberal Stuff that Matters.
    12. Re:Reminder: treaties supercede constitution by StevenMaurer · · Score: 2

      You are obvously a member of one of those completely utterly clueless rightwing groups.

      It's rather off-topic to the original article, but in the general interest of Slashdot's "News for Nerds, Stuff that Matters", allow me to grant you some small fraction of a clue you so desperately desperately need.

      To wit: Al Gore once said he was the model for the main characters in Erich Segal's 1970 romance novel Love Story. The truth: Al Gore based his account on an article in the Nashville Tennessean. Segal says the newspaper "exaggerated" the connection to the Gores. He says the protagonist was a combination of Gore and his college roommate, actor Tommy Lee Jones.

      The song Gore actually heard as a bedroom lullaby: "Don't Forget the Union Label". He got the titles confused.

      Clinton being one of our greatest president? That's a judgement call. But he didn't get us in any wars, and wasn't suffering early Alzheimers in office either.

      We now return to our regularly scheduled clueless whining.

    13. Re:Reminder: treaties supercede constitution by guibaby · · Score: 1

      Just a point of fac. The DOJ doesn't make laws. The most they can do is lobby for legislation.

      --
      Historically, the claim of consensus has been the first refuge of scoundrels.
    14. Re:Reminder: treaties supercede constitution by 1010011010 · · Score: 2

      linton being one of our greatest president? That's a judgement call. But he didn't get us in any wars,

      Um... yes he has. Quite a number, actually.

      ___________________________

      --
      Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
    15. Re:Reminder: treaties supercede constitution by Electric+Angst · · Score: 1

      What makes you think your precious 'world government' will be working on the behalf of (and accountable to) the People?

      A World Government will only be accountable if the average human will get out there and demand that it is. Unfortunantly, at least on this continent, too many people seem to spend their time bitching about how the people with moneyt are in control, and don't understand that money is still trumped by numbers, and the sheer will of the people. Stop being so cynical, or else there might be a reason to be one day!!!
      --

      --
      Feminism is the wild notion that women are human beings.
    16. Re:Reminder: treaties supercede constitution by Vassily+Overveight · · Score: 2

      And my favorite: "Who are these guys?" while pointing at busts of the founders. Stupid right-wingers.

      --

      "If I have seen further than other men, it is by stepping on their glasses." - Michael Swaine

  11. US and EU? Cybercrime Treaty?! by NowIveSeenItAllGuy · · Score: 1

    Now I've seen it all!

    --
    Appended to the end of comments I post? 120 chars?!
  12. Unintended consequences? by Alioth · · Score: 1
    IANAL...but in the article it said...

    For example, they said, security testing would not be banned, because prosecutors must show there was intent to commit an illegal act.

    If this can trump the DMCA, then DeCSS can't itself be illegal. Only if you can prove a user was going to use it for illegal purposes could you prosecute - and then that user only. But you couldn't stop, say, DeCSS being part of an Open Source DVD player, because the intent there is clearly not criminal: the intent is to be able to watch the DVDs you purchased on your computer.

    However, even though the USA Today article probably only skims the surface (and like everything in the popular press, is probably fairly inaccurate), there were some deeply worrying things in that article. Still - there's always Sealand!

    1. Re:Unintended consequences? by MikeTheYak · · Score: 1

      If only it were that easy. The laws that would result from such a treaty would probably only provide further restrictions, not guarantee freedoms.

  13. Hacking Devices? by theghost · · Score: 1

    The treaty will force all signatories (ie your government) to make illegal the "import and distribution of devices used for hacking".

    Sounds like they want to outlaw computers.
    There's nothing like an overly-broad wording to turn the most well-intentioned concept into a tool of oppression.
    (Though i also doubt the intent of this is entirely noble at heart.)

    --
    The only thing necessary for the triumph of evil is that good men do nothing.
  14. Carnivore World Tour by Samrobb · · Score: 2

    Does anyone else see this as obvious? If they want to regulate the import and distribution of devices used for hacking... well, obviously, you're going to have to regulate and monitor internet traffic, world-wide, just to make sure that nothing that violates this treaty is getting through.

    "Sorry, folks, just passing through looking for suspicious data... really, we hate the idea of doing this; it's just so much more work for us, but hey! - it's in that damn treaty we signed. Now... your papers, please."

    --
    "Great men are not always wise: neither do the aged understand judgement." Job 32:9
    1. Re:Carnivore World Tour by mickwd · · Score: 1
      If you think Carnivore's bad, have a look at the RIP (Regulation of Investigatory Powers) Bill which has just become law in the UK.

      (OK, so that links a little old - it's law now, though possibly with some modifications).

      Basically, they are enforcing ISPs to install interception equipment, and I'm not sure it's just for e-mails - it may also be for all traffic (although how they'll do this I'm not sure (I don't know if the government is either) - they might just store e-mails, and accessed URLs / IP addresses and port numbers).

      The authorities don't even need a warrant to be signed in order to start monitoring you - I think the word of a senior police officer is enough.

      If you encrypt anything, they can force you to decrypt it, or face up to two years in jail. If you've lost the decryption key, it's your responsibility to prove it (er, how, exactly can you do this ?). Bang goes any right not to incriminate yourself. And bang goes the right to be considered innocent until proven guilty.

      If you tell anyone they're being monitored, you can face several years in jail, also.

      As the article says, if you're a terrorist or paedophile, and you've encrypted your illegal stuff, are you really going to decrypt things on demand, or will you stick with a shorter sentence in jail for not decrypting it ?

      Finally, I can see some justification for the police intercepting traffic in this manner (if suitable controls were in place), but with this equipment installed in ISPs, anyone working at that ISP could potentially have access to it. Blackmail, anyone ?

      PS: One of the justifications for intercepting traffic is 'in the interests of the economic well-being of the United Kingdom'. So I guess even if you're not in the UK, this may be a reason to listen in on any of your traffic which might get routed through the UK. Just out of interest, does much traffic between America and Continental Europe get routed through the UK ?

      This RIP Bill may well have sonething to do with the treaty which is the subject of this article.

      Coming soon to a country near you ?

  15. Tools we use by SigmoidCurve · · Score: 1
    "import and distribution of devices used for hacking"

    So I guess gcc and modperl will be made illegal? I can't vouch for anyone else, but those are the tools I use to hack.

    Wait, I can see it now: "If we made keyboards illegal, then only crackers would be using keyboards." (ala NRA)

    Senseless legislation. When will Lars run for Senate?

    --
    Dictionaries are for loosers.
  16. Hey, Great! by the_quark · · Score: 1

    Does this mean my local police deparment won't laugh and hang up when I call and report that script-kiddiez just erased three years of work on my system?

  17. Anti-campaign? by Ripat · · Score: 2

    Does anyone know of some sort of campaign against this?

  18. Easy, now... by update() · · Score: 1
    For example, they said, security testing would not be banned, because prosecutors must show there was intent to commit an illegal act. Peter Csonka, deputy head of the council's economic crime division, said there needs to be a better explanation of the language banning the use of such devices "without right."

    For that matter, exactly what "hacking devices" are restricted? I agree that this treaty needs to be handled carefully and has the potential to restrict legitimate uses but I wouldn't file it in the the this-is-really-bad dept just on the basis of this article. Of course, given how people are flying off the handle over the NSA backdoor story which doesn't have a shred of evidence behind it, there's certainly not much chance of perspective here.

    Incidentally, I'd note this story as evidence that the cyberpunk mentality so popular here may be fun but isn't having the slightest effect on the rest of the world. I'd propose that people make a clear distiction between legitimate and illicit uses of technology and point out when legislation threatens the valid activities, instead of karma whoring about how Napster isn't a piracy tool because the RIAA is ripping off the musicians. Probably not much chance of that, either.

    ---------

    1. Re:Easy, now... by update() · · Score: 1
      Come to think of it, the mistake the Council of Europe made is not using the term "cracking devices". Tedious pedantic geeks would have been so pleased, this treaty would be more popular than Quake.

      ---------

    2. Re:Easy, now... by Flower · · Score: 1
      I agree that this treaty needs to be handled carefully and has the potential to restrict legitimate uses but I wouldn't file it in the the this-is-really-bad dept just on the basis of this article.


      Ummm, can we say WIPO treaty and the birth of the DMCA?

      Recent history has shown that lawmakers will fly off the handle to enact far-reaching legislation without one thought behind if they should when it comes to the Internet. Can you imagine what our congress-critters are going to do with the following from the article?

      The draft calls on signatories to pass legislation against illegally accessing a computer, intercepting computer data or interfering with computer systems. It also would ban the sale, purchase, import and distribution of devices used for hacking, and requires passage of laws against computer-related fraud or forgery and child pornography. Signatories also would be required to provide law enforcement authorities with the ability to conduct computer searches and seize computer data.


      We already have laws to cover most, hell, all of this. In a recent article in my local paper they arrested tried and sentenced a person distributing child porn over the internet giving him the maximum sentence. Ban the sale of what? A compiler if you dont have a degree? Will I be arrested if I download gcc. Heck the feds will have proof of it because they have my ISP's logs showing I went to the GNU ftp site? Oh and now I pay $100 a month because of all the storage the ISP requires to retain logs for a year.

      They say it will require proof of intent but when I examine Jon Johansen's testimony at the 2600 trial and then look at what Kaplan has to say about it I wonder just how much proof Reno and her CyberROTC troops will have to get to prove that I'm "hacking." "Your honor just look at all the source code and RFC documentation he has on his hard drive! This must be a criminal."

      On a lighter note, the only good thing I see coming out of this is a world-wide ban on VBScript.

      --
      I don't want knowledge. I want certainty. - Law, David Bowie
  19. Great. by EEEthan · · Score: 1

    Just what I wanted. So when does my linux laptop become a hacking tool? When I have a portscanner? Or is it already one.
    No governmental organization should be making this kind of law. Nor should these 'cybercrimes' be prosecuted in any way. What's the worst thing that you can imagine? Your credit card being 'stolen?' Your identity being 'taken?'
    There are definitely some very bad things that can be done to and with computers...and they are being done, by governmental organizations. They are trying to put up borders and checkpoints where none are needed, and extracting taxes for the service. Thank you, USA, for arresting me! Now let me pay my taxes so you can enforce your laws.
    But it's a good thing they're doing this...if they didn't, people might get the idea that we don't need physical borders and checkpoints either. Then we'd be screwed...and what would happen to the 'criminals' who've broken other 'laws' like drug possession...they might be set free! Uh oh.
    Well, it's a good thing that I still have free speech and can say this stuff...hey, where are you taking me...guys...

  20. Frigthening by Zappa · · Score: 1
    "When the U.S. government cannot get a
    controversial policy adopted domestically, they
    pressure an international group to adopt it,
    and then bring it back to the U.S. as an
    international treaty - which obliges Congress
    to enact it,"


    Just look at the thread before, I get frigthened at this combination, subverting software companies (to s**t at their customers), suppressing free information exchange and forbidding the usage and/or information about tools to check your system appears quite systematic to me.

    will the next step be an Internet license and an allow list which information is allowed ?


    Brave new world ...

  21. very bad by bakreule · · Score: 1
    There's nothing we can do about this. We can't write to our congressmen, they have no power in this arena. Can the supreme court override an international treaty as unconstitutional? I think that will be our only hope.

    This treaty is ripe with ways to abuse it. What constitutes a hacking device? A perl script that probes a network? If I run a perl script like that, by this treaty the US will have to provide a way for law enforcement to search my home and confiscate my equipement. How is qualified to judge what exactly is a hacking device.

    This is very scary stuff.....

    How long does it take to get sued by the MPAA?

    --

    Buses stop at a bus station
    Trains stop at a train station
    On my desk there's a workstation....

    1. Re:very bad by ethereal · · Score: 1

      On the contrary, your Senators are two of the 100 people in the U.S. who do have power over this, since the Senate approves treaties. So don't throw in the towel yet.

      --

      Your right to not believe: Americans United for Separation of Church and

    2. Re:very bad by Stonehand · · Score: 1

      *shrug*

      You're complaining about a treaty you haven't even seen, and which an article merely casts vague aspersions about? There's no hint of a public draft, let alone reliable information on a final version or exact terminology ("hacking device" perhaps being a reporter's term. It certainly was used unquoted in articles distributed widely in January on "rumor" sites, with an alleged document in Dutch).

      They could easily define it as "a device whose primary purpose is facilitating unauthorized access to network services" or somesuch. And judges, well, there's a reason why we have expert witnesses, no?

      --
      Only the dead have seen the end of war.
    3. Re:very bad by BitwizeGHC · · Score: 1

      OK, let's suppose the treaty appears before the Senate and they vote it down. President Clinton will then sign a bunch of Executive Orders which do an end run around the legislative branch, basically stating that the various executive agencies are to act in accordance of the terms of such-and-such a treaty. Then it doesn't matter whether your actions are legal or not, the jackboots are still gonna bust your door down and seize your machine.

      --
      N4st0r, trixx0r h0bb1tz0rz! Th3y st0l3 0ur pr3c10uzz!
    4. Re:very bad by BitwizeGHC · · Score: 1

      Oops... by the time all this happens Gore will be President.

      --
      N4st0r, trixx0r h0bb1tz0rz! Th3y st0l3 0ur pr3c10uzz!
    5. Re:very bad by ethereal · · Score: 1

      In the worst case, that could happen. However, if the treaty isn't approved by the Senate, then you can still appeal the FBI/ATF/etc. actions on constitutional grounds (4th amendment, etc.) and since there is no official treaty, the Constitution would still be in effect and the executive order might be thrown out.

      As long as the Senate doesn't approve the treaty, it doesn't become enforceable at the same level as the Constitution, and so you can depend on the Bill of Rights to protect you. Well, if you have good lawyers, at least.

      --

      Your right to not believe: Americans United for Separation of Church and

    6. Re:very bad by bakreule · · Score: 1
      You're complaining about a treaty you haven't even seen, and which an article merely casts vague aspersions about? There's no hint of a public draft, let alone reliable information on a final version or exact terminology ("hacking device" perhaps being a reporter's term. It certainly was used unquoted in articles distributed widely in January on "rumor" sites, with an alleged document in Dutch).

      You're right that I don't have a copy of the treaty right in front of me, but I think we all have enough information to figure out what is going on. We've all seen legislation/treaties like this (DMCA comes to mind), and we've seen the damage that it has done. Even without the manuscript in front of me, I can read between the lines and draw some conclusions about this treaty. And I don't like what I'm drawing...

      They could easily define it as "a device whose primary purpose is facilitating unauthorized access to network services" or somesuch. And judges, well, there's a reason why we have expert witnesses, no?

      True.... but you're forgetting that this treaty would give law enforcement officials the right to search and seize equipement based on what THEY feel is a "hacking device". I DO NOT trust the government's judgement on what is a "hacking device". They could search my apartment and confiscate all my computers and then figure out that I'm not using a "hacker device". That's shooting first and asking questions later, and that's crap.

      I might use a sniffer program to diagnose network security on the net. The FBI doesn't like that, they kick down my door, confiscate all my computers, make my life hell. It goes to court. An expert witness testifies that a sniffer has uses that are legitimate. The court says, "Sorry! Here's your stuff back!". Justice served?? Hell no! They shouldn't have been there in the first place.

      Note also, that the courts could rule that since a sniffer can be used to hack something, it is a "hacker device", regardless of anything.

      How long does it take to get sued by the MPAA?

      --

      Buses stop at a bus station
      Trains stop at a train station
      On my desk there's a workstation....

  22. solering irons, gdb, multimeters by 1010011010 · · Score: 3

    I can "hack" anything with anything.

    I can hack a cuecat with a soldering iron, a screwdriver and a multimeter.

    I can hack a computer program with Visual Studio (built in debugger and disassembler).

    I can hack a network program with ordinary windows (netmon) or unix (tcpdump/ethereal).

    I can hack a lock with a paperclip.

    I can hack a mixmaster with a pointed stick.

    I can hack congress with a lobbyist.

    I can take G. Gordon Liddy's advice for dealing with government agents storming my house.

    I can move to a free country. Or maybe I can't.

    ___________________________

    --
    Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
    1. Re:solering irons, gdb, multimeters by i+ronin · · Score: 1

      The most powerful hacking tool ever created is the human mind. I have to assume that this will criminalize international travel by any except the mindless.

  23. Use a debugger - go to jail ... by taniwha · · Score: 2

    or dissasembler or packet sniffer or compiler or ..... a computer, or your brain - doh! - gotta ban those 'tools for hacking' - we wouldn't want any one thinking outside their box (er cell) around here ....

  24. I don't believe that. by Tau+Zero · · Score: 4
    A friendly reminder that ratified treaties supercede the constitution.
    I don't believe it for a minute. The Constitution holds that treaty law should be held as equal to itself. Besides, if it comes to a treaty which was ratified by the Senate, and an amendment to the Constitution which was passed by 2/3 majority of both houses of Congress AND then by 3/4 of the States, which has more backing if there is a conflict between the two?

    No way do I believe that the Supreme Court would hold that a treaty overrides the Constitution. However, I sure wouldn't mind an amendment which holds the limitations the Constitution places on our government, and the rights and privileges recognized thereunder, override the terms of any and all treaties which are to the contrary. Even freedoms need backups.
    --
    Build a man a fire, and he's warm for a day.

    --
    Time is Nature's way of keeping everything from happening at once... the bitch.
    1. Re:I don't believe that. by RickHunter · · Score: 2

      The consitution WAS supposed to be a backup to the freedom provided by democracy, IIRC. A way to prevent the servants of the people from taking over. Unfortunately, the Republicans and Democrats have shown repeatedly that they don't care what it says, they're going to do WTF they want.


      -RickHunter
    2. Re:I don't believe that. by Vassily+Overveight · · Score: 2
      The US government is corrupt BEYOND redemption. Instead of looking to the Constitution to reform it, we should write a NEW constitution that ... blah blah blah.

      Which, by your thesis, will also be ignored. If 'they' are using the original one for toilet paper, what's going to make 'them' respect a new one? If a new constitution is enforceable, why don't we just enforce the one we have?

      --

      "If I have seen further than other men, it is by stepping on their glasses." - Michael Swaine

    3. Re:I don't believe that. by Lullabye · · Score: 1

      You're right, we should. And personally, I think corrupt behavior, if proved in court, should be punishable as treason. However, in order to do this, congress would have to approve it, adn that would never happen. Congress would never allow us to rewrite the constitution, and they would never treat corruption as treason simply because it would screw themselves over, and they know it.

      --
      "God is REAL ... unless previously declared as an integer"
    4. Re:I don't believe that. by Doviende · · Score: 1
      an additional note:

      If treaties superceded the constitution, then treaties are the answer to all those pesky things like free speech.

      just make a treaty with [insert tiny controllable country here] that says "U.S. must enforce anything it wants regardless of its own constitution"

      so, if treaties supercede the U.S. constitution, then the constitution is then ruled invalid and useless.

      -Doviende


      "The value of a man resides in what he gives,
      and not in what he is capable of receiving."
      --
      "The value of a man resides in what he gives,
      and not in what he is capable of receiving."
      --Albert Einstein
    5. Re:I don't believe that. by Anonymous Coward · · Score: 1

      believe it. The supreme court has held exactly that many times. One example which springs to mind is the migratory waterfowl treaty with Canada. Nels

    6. Re:I don't believe that. by MuppetLobbyist · · Score: 2

      The Supreme Court has talked about this on several occasions, and it's clear that the Constitution will always override a conflicting treaty. Here's two cases-- Missouri v. Holland, 252 US 416 (1920): "a treaty cannot be valid if it infringes the Constitution." Reid v. Covert, 354 US 1 (1957): no "agreement with a foreign nation can confer power on the Congress, or on other branch of Government, which is free from the restraints of the Constitution...The prohibitions of the Constitution were designed to apply to all branches of the National Government and they cannot be nullified by the Executive or by the Executive and the Senate combined..." So--treaty will trump any state law or state constitution, but cannot trump the Constitution. The more interesting question is when a treaty conflicts with an existing federal statute. In general, courts would analyze the case "as if" the treaty were another law passed by Congress. And there are several rules courts and lawyers (!) use to resolve apparent conflicts or inconsistencies. For instance, specific trumps the general, later-in-time, etc. Here's a vignette I remember from school: in the Fifties, a group of Southern Congressmen got together to try and pass a constitutional amendment that would clearly resolve this debate we're having--treaties would not apply internally to the US unless Congress passed specific implementation legislation. So, what do you think those Southern members were scared about? The United Nations Charter and the UN Declaration of Human Rights.

    7. Re:I don't believe that. by 1010011010 · · Score: 2

      Actually, we should just get back to respecting the constitution we do have. Tearing it up would be much, much worse than anything going on now. Can you imagine documents like the Declaration of Independance and the Constitution being created today? We'd have a bunch of Pat Robertsons, Bill Clintons, George W. ("there ought to be limits to freedom") Bushes, etc. running the show. A LONG way from Jefferson, Madison, Franklin, et al.

      Take the Strict Construction Cure! Make the government stop doing anything not authorized explicitly by the Constitution!

      ___________________________

      --
      Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
  25. Headline: NSA sued! by martyb · · Score: 1
    The treaty will force all signatories (ie your government) to make illegal the "import and distribution of devices used for hacking".

    Does this mean someone in any of the signatory countries can sue the NSA for hacking into communications? Ex-NSA Analyst Warns Of NSA Security Backdoors

  26. Obligations to pass laws? Not by krlynch · · Score: 1

    I found the statement in the article that the US Congress would be obliged to pass laws in support of this treaty a little disingenuous. This statement would be true if the US Senate approves the treaty. Under the US constitution, no treaty to which we are a signatory becomes legally binding until ratified by the Senate...no Administration can run off to foreign powers and conclude a treaty that gives them legislative powers. So, if they've been unwilling to pass the laws unilaterally, no signed treaty is going to make them do so any faster.

    Now could the Senate ratify a treaty requiring these laws be passed? Sure, and they very well might, but they are not under any obligation to do so (look at the Chemical Weapons Convention, the League of Nations, etc...). And that is a different issue than this article implies.

  27. Make illegal those things used in crimes by Weirdling · · Score: 2

    Like, say, switchblades, double-edged knives, guns, computers, cars, houses, countries (US rape of Mexico, German rape of most of Europe). Much safer life here in my mud hut with no fire and only what I can cultivate with my bare hands. Oh, and the maurauding bands that own all the guns don't bother me much, anyway. Since phones are illegal, all I have to do is run the three miles to the local police department, where they will arrest me for disturbing the peace.

    --
    A society that will trade a little liberty for a little order will lose both and deserve neither. - Thomas Jefferson
  28. International Treaty Makes Everything Illegal! by raygundan · · Score: 3

    Today, in a major coup for international governments, a treaty ratified by the EU and the US (among others) officially makes everything illegal. Under the section innocently labelled "hacking devices", such obvious implements such as computers, modems and network cards are naturally banned, but so are so-called "social hacking" tools, such as telephones, pieces of paper (which may be used to write down passwords, clothing (which may be used to disguise someone), cars (which allow criminals to move to the scene of the hacking). Now that everything is illegal, everyone who is alive has been asked to report to jail, where you will be put to work as cheap slave labor for the super-mega-international-government-corporation producing inexpensive T-shirts for resale in parts of the universe that have more money.

    This reporter, for one, is glad that he no longer has to worry about breaking the law-- it is with complete certainty that I can now say "No matter what I am doing, it is definitely illegal."

    1. Re:International Treaty Makes Everything Illegal! by hackerhue · · Score: 1

      Of course, jail is also illegal, as it will become the place most used to trade hacking tips.

      --

      To get something done, a committee should consist of no more than three persons, two of them absent.

    2. Re:International Treaty Makes Everything Illegal! by Tsujigiri · · Score: 1
      Would that mean it's illegal to GO to jail or to operate a jail.

      "You're under arrest for going to jail!"

      "Not AGAIN!!"

      --

      "I'll take the red pill. No! Blue! AAAaaaahhhhhhhhh"
      - Monty Python meets the Matrix

  29. HAHAHAHAHAHAHA by EEEthan · · Score: 1

    The last paragraph:

    When asked about privacy concerns with the treaty, Csonka said: "These concerns may be legitimate, but they could be raised in relation to any international treaty. Harmonization of laws is necessary to avoid a legal jungle on the Net."

    Right. Keep up the good work, guys, and thank you. Hey, what are those funny red dots, are there snipers around

  30. Importing isn't the problem by 64.28.67.48 · · Score: 1

    We need to start exporting script kidd3z -- and it'll help the trade deficit!

    -------------

    --

    -------------
    The truth is out th- oh, wait, here it is...
  31. Alright! This is cool!!!!! by Atreides_78723 · · Score: 1

    Screw local or state or even federal...

    I can be an INTERNATIONAL criminal!

    MUAHAHAHAHAHAHAH!!!!!!

    --
    "...heroic hearts, made weak by time and fate, but strong in will, to strive, to seek, to find, and not to yield."
  32. This is technological censorship, or the beginning by drnomad · · Score: 3
    You remember that slashdot article - a letter from 2020 -? Perhaps that article on NTFS-legislation is more fresh in the memory.

    Hacking is defined as 'unauthorised data-access', what about reverse engeneering, what about writing a compatible protocol. Will 'patent infringement' be hacking? What about Sony Playstation emulators?

    This is too bad. Supposedly, (just hypothatically) I find the magical holy grail of factoring primes... is that hacking? Can I publish this?

    This is too bad, I thought I'd be safe from US laws here in Europe, reading slashdot I realize that all sorts of laws and lawsuits will deteriate my freedom. So this will change then?

    What's next, regulations on internet protocols? Man is allowed to browse and mail, kill IRC, kill Napster, kill Gnutella?

    This smells like a tool for technological censorship... will I need a license-to-programm in future?

  33. Hummm... by LocalEmperor · · Score: 1

    Hacking devices??

    Sounds a little too vague... very much like the CDA.

    ~LE

    "Evil will always win, because Good is dumb" - Lord Helmet Space Balls

  34. Could be good, could be bad. by Xerithane · · Score: 1

    Aside from stupid enforcement, this could actually be a really good thing
    A while back at a certain gov't job, we had an attacker break in. We did trace him, found out for the most part who he was and everything.
    He was from a EU country, and we couldn't do *anything* about it. It was really frustrating, because what he did went far beyond just the curiosity approach that I advocate to a point.
    His intent was damage, and instead of someone being punished for their crime myself and another coworker had to stay late for days digging through logs of other machines to find out how deep the damage went. That's not fair.
    However this could be the worst thing that we could come up against. Depending upon how far they want to take the 'device used for hacking'.
    I mean.. hell, look back to the young isreali Edin Tenebaum, aka Analyzer. That guy was funny, and aided those kids (by aiding more or less told them information they needed) to break into the pentagon.
    Edin in my opinion is completely innocent. Telling someone how to shoot a gun doesn't make them an accessory to murder.

    nerdfarm.org

    --
    Dacels Jewelers can't be trusted.
    1. Re:Could be good, could be bad. by Stonehand · · Score: 1

      Bad analogy. Using most firearms isn't exactly a complicated skill if you're only looking at unarmed, unsuspecting targets several feet away. Even a chimp could probably use a semi-auto shotgun...

      A closer one would be advising somebody on the vulnerabilities of a bank's security systems. That takes some non-obvious technical knowledge, and in most cases also would demonstrate intent and conspiracy...

      --
      Only the dead have seen the end of war.
  35. ISP tracking? by DranoK · · Score: 2

    According to the doccument, ISP's should facilitate the investigation team by keeping track of who is using the system when, and then turn this info over to the team. At first, this doesn't really sound that bad. I mean, you want to help all you can in a criminal investigation, right?

    The problem comes in the doublestandard that is held between the real and digital worlds, that can quite possibly bring about 1984 in a very real sense; or digital sense, if you prefer ;)

    Think about it: We can step onto a bus, get off at a stop, secretly break into a building, and do whatever it is we're doing in this example. OK, it's not the greatest analogy, but lets fly with it for a moment.

    Now, for comparison, someone is using XYZ SDSL, breaks into a computer system, and does whatever they want to do. I know all the flaws with this example but just think about it -- it's hard to like the digital world with real life.

    In any case, by the new laws that seem OK which are attempting to be passed, XYZ DSL service would be required to keep logs of users, users to identies, and possibly what their users are doing online. This is like the bus driver in the first example being required to take down name, addresses, and phone numbers when you get on the bus, then storing where you got off and when in a notebook. For some strange reason, the very same people who don't react to the digital laws would be screaming murder if a government tried to pass a law like this.

    Just because we have the ability to packetsniff, parse, and store potentially illegal info (or notes which can help prosecute) automatically with scripts doesn't mean we should. I maintain a large office over a single T1, and I admit I am almost always sniffing and parsing the data that's going through the pipe. But I do this in a manner that is consistant with the rest of my ethics: I specificlally filter OUT (so I don't see) port 25 and port 110 traffic. I scan port 21 and 23 for the sole purpose of screaming at the people who try to use these ports *grin*. Often I find people viewing porn or whatnot, but IMHO that's there business. Even though it is against company policy I will never notify anyone of this misuse. About the only thing I do crack down on is Napster (only because of the bandwidth issue). Mainly I want an idea of what's going over my network.

    What scares me is I know the government won't have such scruples. For some reason intercepting and making photocopies of letters is illegal; yet we're trying to legalize sniffing email...



    Shh! Nobody knows I'm gay!

    --

    Shh! Nobody knows I'm gay!
    1. Re:ISP tracking? by Lurker187 · · Score: 1

      • This is like the bus driver in the first example being required to take down name, addresses, and phone numbers when you get on the bus, then storing where you got off and when in a notebook.

      Actually, it's automated and does not allow for human bias, so it's more like having security cameras on public buses. (Which they do, in many areas. In the Washington, D.C. area, buses even have signs that say that they are "subject to surveillance".)

      I don't like the idea of ISPs logging traffic, but I do like the idea of security cameras in buses, convenience stores, etc. I have yet to hear one story of abuse of a security videotape.

      Is this consistent? I don't know. I guess I feel that the public knows enough to raise a stink if the Men in the Black Vans start collecting security tapes in one neighborhood; meanwhile, it would be very easy for certain No Such Agencies to demand logs, and even supress the fact that they did so (re: ApolloMedia).

      My point is that automated logging or surveilance by itself does not restrict freedom. Only the abuse of the information gathered (or, admittedly, fear of such misuse) can restrict individual liberty.

      --
      [command INSERTWITTYQUIP failed: insufficient wit]
    2. Re:ISP tracking? by bfree · · Score: 1

      Just to point out how bad an example this is:
      in Dublin all busses have camera holders in multiple locations and on any bus that actually has the cameras installed at the time (percentage unknown to me) they can see who got on and off where and even what they did on the bus. I don't mind this and I don't mind the sequestering of this information if neccessary providing some form of due process is in place to ensure that this data is only made available where relevant to investigations (and that they can't then scan all the data they have for anything else). I think the same should apply online as real world.
      Come on over and sign http://www.censorthis.net/cybercrime.html

      --

      Never underestimate the dark side of the Source

  36. interesting thought by NialScorva · · Score: 1

    Interesting way for the executive branch to twist congress's arm. What I'm really interested in comes when one of these treaties forces a law to be passed that is obviously not constitutional, and the supreme court throws it out. From the sketchy details in the article, this one may be along those lines (speech and due process come to mind).

    Kinda puts the government in an interesting bind, the treaty requires them to support these laws, where the foundation for our government effectively says they can't do it.

  37. What does "device used for hacking" mean? by Claudius · · Score: 3

    It also would ban the sale, purchase, import and distribution of devices used for hacking....

    And in related news today: Axes, hatchets and machetes are now selling like hotcakes on Ebay in anticipation of the ban. (Time for another /. gripe fest over the meaning of the word "hacker/hacking").

    Lizzy Bordon took an axe
    and sunk it deep into a Vax.
    When she saw what she had done
    she turned and hacked apart a Sun. -author unknown

    1. Re:What does "device used for hacking" mean? by Bassthang · · Score: 1
      I hacked together a printer with a saw, does this count?

      Ingredients:

      • One Applewriter with very poor print quality and broken (and very slow) lower paper feed
      • One HP LaserJet III with broken upper paper feed
      • Miscellaneous tools
      Method: Take both printers apart. Attach upper part of Apple LaserWriter to lower part of HP LaserJet III. Use saw to cut away plastic trim until the lid will shut.

      --
      "What I look forward to is continued immaturity followed by death."
  38. Not good for code verification tools by Cerlyn · · Score: 1

    So if I write a script that looks through my code for potential buffer overflows due to stupidly called subroutines, that would seem illegal due to the fact it could also be used to hack my code and exploit it. I even could use the "find" and "grep" tools to do this - are they now illegal?

    At first glance, this sounds like it will force security through obscurity, and of course the criminals will find a way around it. It's just another charge to bring against someone when they are caught, if they are caught. This sounds almos as good as the US electronic signatures act, where almost any web browser and any link could be a contract.

  39. Council of Europe by 1010011010 · · Score: 3

    The Council of Europe members are from many countries:
    Albania (address) Mr Paskal Milo, Minister for Foreign Affairs
    Andorra (address) Mr Albert Pintat Santolaria, Minister for External Relations of the Principality of Andorra
    Austria (address) Mrs Benita Ferrero-Waldner, Federal Minister for Foreign Affairs
    Belgium (address) Mr Louis Michel, Minister for Foreign Affairs
    Bulgaria (address) Mrs Nadezhda Mihailova, Minister for Foreign Affairs
    Croatia (address) Mr. Tonino Picula, Minister for Foreign Affairs
    Cyprus (address) Mr Ioannis Kasoulides, Minister for Foreign Affairs
    Czech Republic (address) Mr Jan Kavan, Minister for Foreign Affairs
    Denmark (address) Mr Niels Helveg Petersen, Minister for Foreign Affairs
    Estonia (address) Mr Toomas Hendrik Ílves, Minister for Foreign Affairs
    Finland (address) Mr Erkki Tuomioja, Minister for Foreign Affairs
    France (address) Mr Hubert Védrine, Minister for Foreign Affairs
    Georgia (address) Mr Irakli Menagarishvili, Minister for Foreign Affairs
    Germany (address) Mr Joschka Fischer, Minister for Foreign Affairs
    Greece (address) Mr Giorgos Papandreou, Minister for Foreign Affairs
    Hungary (address) Mr János Martonyi, Minister for Foreign Affairs
    Iceland (address) Mr Halldor Asgrimsson, Minister for Foreign Affairs
    Ireland (address) Mr Brian Cowen, Minister for Foreign Affairs
    Italy (address) Mr Lamberto Dini, Minister for Foreign Affairs
    Latvia (address) Mr Indulis Berzins, Minister for Foreign Affairs
    Liechtenstein (address) Mrs Andrea Willi, Minister for Foreign Affairs
    Lithuania (address) Mr Algirdas Saudargas, Minister for Foreign Affairs
    Luxembourg (address) Mrs Lydie Polfer, Deputy Prime Minister, Minister for Foreign Affairs, External trade.
    Malta (address) Mr Joe Borg, Minister for Foreign Affairs
    Moldova (address) Mr Nicolae Tabacaru, Minister for Foreign Affairs
    Netherlands (address) Mr Jozias van Aartsen, Minister for Foreign Affairs
    Norway (address) Mr Thorbjørn Jagland, Minister for Foreign Affairs
    Poland (address) Mr Bronislaw Geremek, Minister for Foreign Affairs
    Portugal (address) Mr Jaime José Matos Gama, Minister for Foreign Affairs
    Romania (address) Mr Petre Roman, Minister for Foreign Affairs
    Russian Federation (address) Mr Igor Ivanov, Minister for Foreign Affairs
    San Marino (address) Mr Gabriele Gatti, Minister for Foreign and Political Affairs
    Slovak Republic (address) Mr Eduard Kukan, Minister for Foreign Affairs
    Slovenia (address) Mr Dimitrij Rupel, Minister for Foreign Affairs
    Spain (address) Mr Josep Pique i Camps, Minister for Foreign Affairs
    Sweden (address) Ms Anna Lindh, Minister for Foreign Affairs
    Switzerland (address) Mr Joseph Deiss, Head of the Federal Department of Foreign Affairs
    "the former Yugoslav Republic of Macedonia" (address) Mr Aleksandar Dimitrov, Minister for Foreign Affairs
    Turkey (address) Mr Ismail Cem, Minister for Foreign Affairs
    Ukraine (address) Mr Borys Tarasiuk, Minister for Foreign Affairs
    United Kingdom (address) The Rt. Hon. Robin Cook, MP, Secretary of State for Foreign and Commonwealth Affairs

    ___________________________

    --
    Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
  40. goodbye by fluxrad · · Score: 2

    i guess Michael Dell, Linus Torvalds, and Bill Gates are among the many violating this new treaty?

    right?


    FluX
    After 16 years, MTV has finally completed its deevolution into the shiny things network

    --
    "It is seldom that liberty of any kind is lost all at once." -David Hume
  41. Sorry guys... by Drashcan · · Score: 1

    ... from now on only non-programmable calculators allowed: +, -, *, /, ln, some geometric functions and no memory registers!

    --
    The nice thing about Windows is: it does not just crash; it displays a nice little dialog box and let's you press 'OK'
    1. Re:Sorry guys... by sith · · Score: 1

      Well.. given long enough you could crack an encryption scheme with a calculator.. hell, you could crack RSA if you just say down "n / 2 .. nope.. n / 3 nope.. n / 4"..

      So, calculators are out...

  42. Doesn't apply to me because... by londenberg · · Score: 1

    Doesn't apply to me because I only crack within my country.

  43. Already Happening by ZBM-2 · · Score: 1
    Signatories also would be required to "provide law enforcement authorities with the ability to conduct computer searches and seize computer data."
    1. You mean this isn't already happening? What about the incident with the International Lyrics Server?
    --
    ==== Warning:this poster contains subject matter that may be offensive. Flaming discretion is advised.
  44. Knock Knock... by ndfa · · Score: 2

    Sir we are here to take all your computer data. Including some of the vintage bootlegs on MP3 that could not be found anywhere else, and those neato shell scripts. YOUR government has given us the permission to take them since you are a threat to internet security (that and being 1 million times the size we do pretty much what we want in YOUR country now). Please do not resist us in any way or we will use any force needed.

    --
    Non-Deterministic Finite Automata
    1. Re:Knock Knock... by minkeyboodle · · Score: 1
      I have a hard time believing the gov't is interested in going around to EVERY person who has an MP3 archive or "neato shell scripts." In fact, I don't think the gov't is too interested in any of what "regular" computer users have.

      On the flip side, I would hope that the definition of hacking tools would be much more clearly defined or this power could be abused in a most horrible fashion. (I think we've established that.) The gov't wants control, but there's hope that they still want to protect and serve...

    2. Re:Knock Knock... by Dr.Dubious+DDQ · · Score: 1
      I have a hard time believing the gov't is interested in going around to EVERY person who has an MP3 archive or "neato shell scripts."

      They don't. Only those they want a way to 'get'. It makes a convenient excuse.
      "This person is subversive. We need to take him out of circulation. Has he done anything we can arrest him for?"
      "Well, according to our specialists, the records in his ISP's logs indicate an 85% chance that he's downloaded a potentially copyrighted .mp3 file, but then, everybody does that."
      "So what, it's still illegal. Bring him in, and confiscate his computer..."

      Joe Sixpack is dead!

  45. Re:Reminder: treaties supercede constitution NOT by 1010011010 · · Score: 5

    Treaties do not supercede the constitution, as it, and only it, is the supreme law of the land.

    Article 1, Section. 10,Clause 1: No State shall enter into any Treaty, Alliance, or Confederation; grant Letters of Marque and Reprisal; coin Money; emit Bills of Credit; make any Thing but gold and silver Coin a Tender in Payment of Debts; pass any Bill of Attainder, ex post facto Law, or Law impairing the Obligation of Contracts, or grant any Title of Nobility.

    Article 2, Section 2, Clause 2: He shall have Power, by and with the Advice and Consent of the Senate, to make Treaties, provided two thirds of the Senators present concur; and he shall nominate, and by and with the Advice and Consent of the Senate, shall appoint Ambassadors, other public Ministers and Consuls, Judges of the supreme Court, and all other Officers of the United States, whose Appointments are not herein otherwise provided for, and which shall be established by Law: but the Congress may by Law vest the Appointment of such inferior Officers, as they think proper, in the President alone, in the Courts of Law, or in the Heads of Departments.

    Article 3, Section 2, Clause 1: The judicial Power shall extend to all Cases, in Law and Equity, arising under this Constitution, the Laws of the United States, and Treaties made, or which shall be made, under their Authority;--to all Cases affecting Ambassadors, other public Ministers and Consuls;--to all Cases of admiralty and maritime Jurisdiction;--to Controversies to which the United States shall be a Party;--to Controversies between two or more States;--between a State and Citizens of another State; (See Note 10)--between Citizens of different States, --between Citizens of the same State claiming Lands under Grants of different States, and between a State, or the Citizens thereof, and foreign States, Citizens or Subjects.

    And the kicker:

    Article 6, Clause 2: This Constitution, and the Laws of the United States which shall be made in Pursuance thereof; and all Treaties made, or which shall be made, under the Authority of the United States, shall be the supreme Law of the Land; and the Judges in every State shall be bound thereby, any Thing in the Constitution or Laws of any State to the Contrary notwithstanding.

    ___________________________

    --
    Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
  46. Define.. by SlashGeek · · Score: 1
    ...calls on countries to pass uniform laws that would, among other things, ban hacking devices...

    So, who gets to define "hacking devices"? After all, isn't a computer a hacking device? And software designed to probe networks to test security, as well as a billion other things. So what's next? Will I need to have a permit to have a port scanner? I'm all for cracking down on cybercrime, but this level of control scares me. I see another case of the gov't making innocent people criminals just for having "hacking devices". And so what if it's illegal to have "hacking devices". If criminals cared about the law, they wouldn't be criminals, would they?

    --

    --I assume full responsibility for my actions, except the ones that are someone else's fault.

  47. Living in a democracy by Virtex · · Score: 1

    I just love living in a free country -- a true democracy where, through the process of voting, we get to choose which people will control our lives. Now that's what I call freedom!

    --

    --
    For every post, there is an equal and opposite re-post.
  48. won't help by ArchieBunker · · Score: 1

    Better rig up a valve to open up a small tank of acid onto the hard drive platters. Its rumored the feds can recover disks that have been formatted up to 16 times.

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
  49. I like it! by Anonymous Coward · · Score: 1

    Why do I like it? Because it reflects just how desperate those with inherited power-- the inbred, over-spacialized, semi-retarded 5% who hold 95% of the assets-- have become. The Internet is decentralizing communications, and with this, central authority is beginning to decline.

    There were no clearly identifiable ringleaders or organizers in the GB fuel strike-- it was almost spontaneous. The Internet is beginning to act as a social nervous system, distributed and self-regulating, that can not be bought out and used for partisan propaganda as the "free press" has been.

    The anti-democratic forces of corporate dictatorship, such as the WTO, IMF, and World Bank, are being dogged everywhere they go by hordes of protestors. The conventional media are careful to cooperatively build and promote the myth that anarchist violence is the theme and content of these protests. But the real news, like 80.000 non violent activists in Seattle last year, has gone out over the 'net.movement Such movements can can not be stopped; they have no charismatic leadership or physical infrastructure to smash.

    Yes, it's getting nasty. And it will get nastier. Politicians and law enforcement agencies have to prove to their masters that they are hard at work "bringing that computer thing under control". Many innocent people will be stomped. But their traditional terrorist tactics are only serving to push a thousand or more people over the line into one or another form of resistance, every day.

    A hard rain's gonna fall. But the new world that will emerge will be a lot cleaner and brighter because of it. That's why I like these BS laws: They prove that those in power today, worldwide, are afraid. They are beginning to realize that their grandchildren will have to work for a living, and advance in society on their merits, if any.

    I like that.

    1. Re:I like it! by interiot · · Score: 2

      Indeed, when the wild west was starting to be civilized, the govmnt didn't outlaw guns altogether. So this situation is clearly worse (primarily because these guns can be copied for free and with very little effort and it's easy to hide the transaction), and they realize it.
      --

  50. -Why- this is bad... by Parity · · Score: 4

    'Laws' being proposed are,
    People with access to information must make all reasonable effort to provide it to the authorities. Ie, 'We need to see all your server logs because we think the cracker routed through your network' or 'We need your entire anonymous remailer database so we can do traffic analysis to determine which 17 accounts belong to the cracker'; With a warrant... without... ? Will it be a 'crime' to not turn over this information on request? (Well, not for long in the USA but who knows about other countries; the courts will make sure warrants and/or subpoenas are still required to coerce information, but it could take time if the law isn't written that way.)

    'Cracker Tools' being outlawed; to draw an analogy, 'lets outlaw drills because they can be used to drill out lock cylinders and gain entry into people's houses!' Uhm. What's a 'computer hacking tool' anyway? Netcat? I'm using it right now to test ftp protocols by hand. nmap? I use it to check that I didn't miss any ports when locking down a box. Nessus? Satan? They'll tell you exactly where a machine is vulnerable. Your machine, somebody else's machine, how are they supposed to know? (Actually, with Nessus you already have to be inside the target to use it, though I'm sure it could be used as a codebase to start a dedicated cracking tool.) My point is, run a security 'auditor' in combination with a 'stealth' portscan and compile a handful of 'demonstration' exploits from securityfocus and you've got yourself a handy-dandy skr1pt k1ddy level cracking-kit built out of security admin tools. Never mind the prior restraint/free speech issues implied since code is text is speech, dammit.

    'Illegal to do unauthorized access' ... What's an unauthorized access? Pinging a machine? Reading a webpage meant for internal use but not secured? Attempting to log in as user 'ftp' on a non-public ftp server? Portscanning? What is a portscan? Does telnetting to ports 21, 23, 25, and 80 out of curiousity to see what they're running count as a 'portscan'? D'oh.

    If you ask me, the only 'computer crime' law we need is to make it illegal to destroy or alter information on a computer that you don't have authorized access too, (where 'alter' does not include doing things that generate log entries, etc, etc, long list of exceptions to describe normal behaviour). Yeah, this means if someone cracks your computer without overwriting files or anything nasty like that (like, maybe they sniff your in-the-clear telnet or ftp password transmission...) that you can't do jack about it in court, but so what?
    Everyone always wants to draw parallels to the real world: In the real world you don't arrest people for walking into the lobby; you don't arrest people for using the bathroom without buying anything even though it says 'customers only'; you don't arrest people for looking in through the window of a jewelry store or even rattling the cage over the windows. You -do- arrest people for spray painting on the walls of the bathroom or for throwing a brick through the window of the jewelry store and running off with a pocketful of diamonds. Where the access lines between 'use' and 'abuse' are is entirely too vague and if we're not careful the government(s) will write up a set of laws that making any new network protocol illegal - not by intent, but because they're politicians and lawyers, not engineers, and won't know the implications of what they're writing! (Presumably they have enough technical advisors to know the -explicit- meaning of what they're writing, but long term implications are another matter.)

    Any-way. The article is very vague; maybe safeguards are being built in to prevent the worries I describe; maybe they aren't; maybe they're penciled in but maybe they'll get erased; keep an eye on it, anyway, because it is -not- 'mostly harmless'.


    --Parity

    --
    --Parity
    'Card carrying' member of the EFF.
    1. Re:-Why- this is bad... by Ondo · · Score: 1

      In the real world, breaking and entering is a crime, even if that is all you do, and that is the closest parallel to cracking a box.

      Unless there's no need to break, of course. Then your just trespassing.

    2. Re:-Why- this is bad... by Parity · · Score: 2

      In the real world we all agree on the difference between 'inside' and 'outside' and the difference between 'an open door' and a 'closed door' and the difference between a private residence and a public facility is usually clear at a glance.

      In the online-world we have no such agreements. So what I'm saying is, don't make 'trespassing' or 'entering' a crime, only make 'breaking' a crime; at least so long as we -don't- have a society-wide agreement about where the lines are.


      --Parity

      --
      --Parity
      'Card carrying' member of the EFF.
  51. devices used for hacking?! by samantha · · Score: 1

    Like computers, compilers, operating systems, debuggers, disassemblers, editors, IDEs and so on?

    Just whose leg are these morons pulling? Will I have to register dangerous tools like compilers?

  52. US Treaties supercede STATE not US constitutions! by PeterM+from+Berkeley · · Score: 2

    Someone else helpfully supplied this quote from the US constitution:

    Article 6, Clause 2: This Constitution, and the Laws of the United States which shall be made in Pursuance thereof; and all Treaties made, or which
    shall be made, under the Authority of the United States, shall be the supreme Law of the Land; and the Judges in every State shall be bound thereby,
    any Thing in the Constitution or Laws of any State
    ^^^^^^^^^^^^^^^^^^^^
    to the Contrary notwithstanding.

    The obvious interpretation of this is that a
    treaty supercedes a STATE law or STATE constitution. Any other inerpretation simply makes no sense.

    PeterM

  53. Re:HAHAHAHAHAHAHA..is this person inept? by sallen · · Score: 1

    >>>When asked about privacy concerns with the treaty, Csonka said: "These concerns may be legitimate, but they could be raised in relation to any international treaty. Harmonization of laws is necessary to avoid a legal jungle on the Net.">>> Somehow I don't see privacy concerns coming up on most treaties, as they deal with how one country deals with another, such as disarmament, trade, or tariffs, etc. This treaty deals with requiring a country to pass laws regarding it's own citizens. IANAL or IANAC(congressperson), but maybe some experts out there can answer this... is this treaty legal anyway? The Congress, IIRC, cannot tread upon a suceeding Congress. ie, even a bill passed by the house or senate that has not been passed by both houses or signed by the President (or vetoed) does not pass to the next session of Congress. So how can a treaty set forth requirements of laws to be passed by a subsequent session of Congress? This is not foreign policy treaties or trade treaties, but a requirement to pass laws. Also, since treaties are the perview of the president (whether or not ratified by the Senate, they are not reviewed by the HOUSE) this seems to permit the executive branch of government to mandate legislative functions and usurp the legislative branch of the government, which the framers insured the Constitution would prohibit, does it not?? It seems a treaty doomed to be violated, or the Congress and the Constitution might as well go home. And this treaty is being lead by DOJ people? Damn, now I KNOW it's time for a change...send Reno back to Miami and clean house at the DOJ. This is absurd. It makes the clipper chip idea seem tame.

  54. 'devices used for hacking' by serial+frame · · Score: 1

    The treaty will force all signatories (i.e. your government) to make illegal the 'import and distribution of devices used for hacking.'

    Well, I guess that means...Great, UNIX itself! Just what if M$ is really doing this as a ploy to make all UNIX illegal? Heh, imagine that.

    --

    -
    And the Angel said unto me, "These are the cries of the carrots! The cries of the carrots!"
  55. Be careful by vla1den · · Score: 1

    "devices used for hacking" might be just the phrase used by journalist of ZD. Meanwhile the threat from this proposal goes far beyond "banning computers as devices used for hacking"

    Read it!:

    Signatories also would be required to provide law enforcement authorities with the ability to conduct computer searches and seize computer data. In addition, the proposed treaty would require those with access to or knowledge of computer data sought by authorities to provide "all necessary information, as is reasonable," for authorities to obtain the data. "These computer-specific investigative measures will also imply cooperation by telecom operators and Internet service providers, whose assistance is vital to identify computer criminals and secure evidence of their misdeeds,"

    Speaking of which, interesting approach taken by FreeNet:

    the objective is that the node operator can plausibly deny any knowledge of the contents of her datastore

    -----

    And by the way, isn't it a common practice to write huge Agreement to remove all right from the customer and NOT to use it for a while. I mean, isn't it what all big business doing here?


  56. Vague by omortis · · Score: 1

    But no less scary. Did anyone notice that only hacking "devices" were explicitly mentioned ? What about software ? I use programs at home, on my own network, to debug same and some of these could certainly be construed as "hacking" programs. What if these were to become "illegal" ? Will the police come to my house to look for "devices" ? Is my computer a hacking "device" ? LOL - well, actually, not laughing at all. JB PS: Sorry if you saw this on the other article - I mis-clicked . . .

  57. Scary point - I have to say it... by Jester99 · · Score: 1

    but as much as I disagree with a lot of what RMS says, The Right to Read is certainly seeming more-and-more a reality. First you can't reverse-engineer anything (DMCA), and now they're going to ration debuggers and compilers? shudder...

    1. Re:Scary point - I have to say it... by interiot · · Score: 2
      1) DMCA = can't reverse engineer something and use the knowldge to make a device that primarily infringes copyright

      2) this law = can't sell/make/link-to debugers or compilers if they're primarily advertised as cracking devices.
      --

  58. Let's nip this nationalist shit in the bud, please by Anonymous Coward · · Score: 1

    This is too bad, I thought I'd be safe from US laws here in Europe,...

    WTF, why is this a case of you being subject to US laws. Apparently we haven't even ratified this treaty on this side of the pond, and even though the linked article even displays a certain anti-US tone through it's choice of quotes, noone is forcing you to sit on your ass and whine about this problem on /. rather than contacting your representatives about this and voicing your concerns. They *do* let you do that in your country, da?

    Ò

  59. Who is "He"? by Froid · · Score: 2

    Article 2, Section 2, Clause 2: He shall have Power, by and with the Advice and Consent of the Senate, to make Treaties, provided two thirds of the Senators present concur; and he shall nominate, and by and with the Advice and Consent of the Senate, shall appoint Ambassadors, other public Ministers and Consuls, Judges of the supreme Court, and all other Officers of the United States, whose Appointments are not herein otherwise provided for, and which shall be established by Law: but the Congress may by Law vest the Appointment of such inferior Officers, as they think proper, in the President alone, in the Courts of Law, or in the Heads of Departments.

    You left out Article II section 1, which specified that "He" is the president. Out of context and coupled with the constitution's peculiar capitalization, it reads like we're talking about the Divine One, who's free to enter into any damn treaties He pleases, I suppose. Perhaps that's what's missing from this treaty: a little divine intervention. I wouldn't want to be in Brussels or Washington when the helfire and brimstone comes a-raining down like on Sodom and Gomorrah of yore, smiting the corrupt tribes of Europe and USiA for this latest of ther abominations.

    1. Re:Who is "He"? by tomed · · Score: 1


      It was common in 18th century period documents to use captialization as a form of emphasis.

      Go look at any other number of tracts from that period. They're not all referring to the Divine.

      --
      -Tom O'Rear -- tomed@radiks.net
  60. Don't forget... by DreamingReal · · Score: 1
    Where do they draw the line?
    Will computers be illegal? No
    Will encryption tools be illegal? Maybe, or restricted
    Will security tools that can be used for hacking be illegal? Most likely

    Remember the ILOVEYOU virus. I guess VBScript and MS Outlook are gone too (although I wouldn't be upset about the latter... )


    -------

    --
    We want some answers and all that we get
    Some kind of shit about a terrorist threat

    - Ministry
  61. "when committed intentionally" by Nos. · · Score: 1
    Note that every article of the draft contains this phrase. Reading some of the specific articles related to things like sniffing, you'll find that you're okay, as long as you don't have criminal intent. So, as someone mentioned, they're sniffing to find people abusing bandwidth with Napster. That's fine under this draft. There is no criminal intent to destroy or copy data.

    As someone else mentioned concern for ISP's that may be forced to store loads of "traffic data" for long periods of time, Article 17 seems to indicate that the gov't would be responsible for any storage of data, relieving the ISP of need for extra disk space, or liability in storing data.

    There's probably more I'd like to mention, but its time to go home!

    1. Re:"when committed intentionally" by interiot · · Score: 2
      Wow. Storage of traffic is mandatory? Time to buy stock in some hard drive companies. My first reaction would be that this attempt would be prohibitive, and that they wouldn't store all traffic, but re-reading it, it looks like they mean to store all the data.

      Okay. Let's say they recorded traffic at a backbone. An OC-48. 5Gbps. That's 52TB of data in one day. I guess that's not terrribly prohibitive...?
      --

  62. Link to Draft Treaty... by mickwd · · Score: 1

    ... is here. I'm not sure if it's the latest draft though, it's dated 27th April 2000.

  63. Hacking or do they mean Cracking?? by Corty · · Score: 1

    In my view hacking is the art(?) of writing/cutting code and cracking is the act which is normally associated with cybercrime. So if they are banning all hacking tools does that mean M$ will not be able to ship Notepad with its Windows OS or Linux with Emacs etc. I think they should perhaps get someone who does more than simply uses a computer on their little multi-national panel, before they manage to get themselves in an arkward situation.

    --
    mv /home/corty/sig.file /dev/null
  64. The UK is a great example of this in action by John+Jorsett · · Score: 2

    If you'd like to see how this type of law can be applied, look no further than our friends in the UK. If you attempt to enter the U.K. with a computer, they want to inspect it for illicit material like child porn. If you have encrypted data on it and the authorities have reason to think that you know the key, you can be thrown in the slammer for not giving it to them. At the least, they'll keep the machine until you give them the key, or hell freezes over, whichever comes first.

    1. Re:The UK is a great example of this in action by John+Jorsett · · Score: 2

      Being an A.C., not to mention semi-literate, I doubt that you'll see this, but just in case others do: go here . Take a look at the template for how an oppressive government goes about its business. I wish you well in your island Gulag, Brits.

  65. Yeah, but.... by DreamingReal · · Score: 1
    If you ask me, the only 'computer crime' law we need is to make it illegal to destroy or alter information on a computer that you don't have authorized access too... Yeah, this means if someone cracks your computer without overwriting files or anything nasty like that... that you can't do jack about it in court, but so what?

    Blegh. No thanks, I don't want your law either. Maybe a cracker wouldn't alter anything on my computer but I would certainly feel violated if someone sifted through my personal journal or my mushy emails to and from my girlfriend.

    you don't arrest people for looking in through the window of a jewelry store or even rattling the cage over the windows.

    No, but I bet you'd be screaming at 911 to get the police to your house if your pervert neighbor was peeping through your window at your wife getting out of the shower.


    -------

    --
    We want some answers and all that we get
    Some kind of shit about a terrorist threat

    - Ministry
    1. Re:Yeah, but.... by Dr.Dubious+DDQ · · Score: 1
      No, but I bet you'd be screaming at 911 to get the police to your house if your pervert neighbor was peeping through your window at your wife getting out of the shower.

      Hmmm. The Internet is more like a public park than a private house. If the hypothetical wife in question sets up a 'camp shower' in the middle of a public park and then steps naked out of it, I'd be screaming if someone called 911 because I looked...(I understand your point, though, and I can't say that I totally disagree, really).

      Seems to me the key thing that really needs to be clearly defined is where the 'external interface' of your computer ends. Personally, I think if it's relatively easy to access (another vague phrase that would need a cleaner definition!) from the Internet, it should be considered part of the "public interface", even if the reason it's easily accessed is 'administrator error' rather than intent. (To go back to the analogy - If I'm standing on the sidewalk when the hypothetical wife steps naked out of the shower in front of an unintentionally-open window, I don't want to be flung in jail because some badly-written law says that it's illegal to 'view a naked woman from outside of a private home without prior explicit permission' - even if it IS called "The Protection from Sick Perverted Peeping-Toms Act of 2001".)

      Anybody got some better thoughts on what should constitute a computer's "Public Interface", and how we might clue lawmakers in on it?


      Joe Sixpack is dead!
    2. Re:Yeah, but.... by DreamingReal · · Score: 1
      Personally, I think if it's relatively easy to access (another vague phrase that would need a cleaner definition!) from the Internet, it should be considered part of the "public interface", even if the reason it's easily accessed is 'administrator error' rather than intent.

      I don't know if I would agree with that. You're saying that it's alright to take advantage of someone else's mistake. Maybe I'm an idealist but I'd rather help the user by identifying it and suggesting a fix rather than exploiting it by snooping around. But that's me.

      To go back to the analogy, if you see our hypothetical wife from the sidewalk you have three choices - walk up to the house and inform her she's showing off all her goodies, walk away and say nothing, or stand and ogle. The first makes you a gallant gentleman; the second, an ambivalent bystander; the third, a perv.

      But to leave the analogies out (TBPH, they really don't apply since computers are a completely different beast) if I want to serve stuff up to the public then I stick in a public folder. At that point, I would say, it is legitimately part of the "public interface". But on the same token, I make sure that personal items are hard to get at. A combination is the best answer, I think - use the honor system to trust that people will respect the bounds of privacy but protect yourself from the pukes who will invariably violate that trust.


      -------

      --
      We want some answers and all that we get
      Some kind of shit about a terrorist threat

      - Ministry
    3. Re:Yeah, but.... by Parity · · Score: 2

      No, but I bet you'd be screaming at 911 to get the police to your house if your pervert neighbor was peeping through your window at your wife getting out of the shower.

      Actually, no; I'd make sure we kept the curtains drawn (my online journal encrypted); unless you mean he was in the yard right up at the window? Then yell at him to get the hell away (kill the process of the intruder and change the passwords he/she got).

      Now, if the peeping time broke into the house and planted a camera and 'fixed' the locks so he could get in any time, then I'd call the police; and in the analogy, damage would have been done to the computer system - software 'damaged' with insertion of backdoors, etc.

      In the real world we don't have a law against looking in through somebody's window, though we do have laws against stomping across the yard and climbing into the azalea bushes to peer through the cracks in the curtains...

      People behave reasonably in the real world; they -don't- call the cops because someone looks out their bedroom window and into yours, or because somebody walked across the corner of the yard and happened to glance into the living room window (even though you could technically say it's trespassing, maybe... sort of...); people want to make the analagous behaviours in the online world felonies, and people are -not- reasonable about it. There are people out there who would (And even try to with current laws!) try to take someone to court for ftping to their machine. (Kinda like insisting the police arrest someone for 'trespassing' when they pulled into your driveway by accident mistaking it for their friend Bill's house... )

      Anyway; if ten years from now, we see that certain loopholes have been left in the legislation, we can close them, but remember - tampering with logs to hide your presence would count as damaging the machine, adding accounts and backdoors makes the machine less secure and is damaging the machine... just about any conceivable 'cracking' attack will at some point 'damage' the machine... a portscan or an attempt to ftp in or whatever are harmless and shouldn't be criminalized, -that's- what I'm saying. (And if someone cracks your machine without fixing the logs you can just block their host forevermore since you know exactly who they are!)

      Anyway. It's much easier to -add- legislation to solve a problem and it's much -harder- to undo draconian legislation, so it's much, much better to add laws for 'digital crimes' slowly and carefully and without any sweeping gestures that might outlaw lots of legitimate activity.


      --Parity

      --
      --Parity
      'Card carrying' member of the EFF.
  66. They've gotta watch these definitions... by Dave114 · · Score: 1

    hacking.... doesn't have to be illegal... of these definitions only one (v. tr. 3b) is illegal....

    I guess judging by the wording of the treaty I can't mail my ax down south to you yankees..... stress relief appears banned too....

    don't u just love that wording?

    hack1 (hk)
    v. hacked, hacking, hacks
    v. tr.

    1.To cut or chop with repeated and irregular blows: hacked down the saplings.
    2.To break up the surface of (soil).
    3.
    a.Informal. To alter (a computer program): hacked her text editor to read HTML.
    b.To gain access to (a computer file or network) illegally or without authorization: hacked
    the firm's personnel database.
    4.Slang. To cut or mutilate as if by hacking: hacked millions off the budget.
    5.Slang. To cope with successfully; manage: couldn't hack a second job.

    v. intr.

    1.To chop or cut something by hacking.
    2.Informal.
    a.To write or refine computer programs skillfully.
    b.To use one's skill in computer programming to gain illegal or unauthorized access to a file
    or network: hacked into the company's intranet.
    3.To cough roughly or harshly.

    n.

    1.A rough, irregular cut made by hacking.
    2.A tool, such as a hoe, used for hacking.
    3.A blow made by hacking.
    4.A rough, dry cough.

    [ Middle English hakken, from Old English -haccian; see keg- in Indo-European Roots V., intr.,
    sense 2, back-formation from hacker1.]

    hackable adj.

    Source: The American Heritage® Dictionary of the English Language, Third Edition
    Copyright © 1996, 1992 by Houghton Mifflin Company.
    Published by Houghton Mifflin Company. All rights reserved.

  67. Re:This is technological censorship, or the beginn by Frank+T.+Lofaro+Jr. · · Score: 1
    Supposedly, (just hypothatically) I find the magical holy grail of factoring primes...

    factoring primes? Who are you, Bill Gates? Only some one of his power can break the laws of mathematics.

    --
    Just because it CAN be done, doesn't mean it should!
  68. Control of Technology a common theme by TheNarrator · · Score: 1
    Anyone ever notice how all these new initiatives put out by the government and global treaty organizations are specifically aimed at controlling the proliferation of technology?

    I think it's interesting that (according to Carrol Quigley) the two times that the armorments that the government could obtain where the same as those that the people could obtain there where huge expansions in democracy. These two times being the times of Pericles in Athens and The late 1700s.

    Did anyone see the Bill Joy interview on Digital West where he said one of the primary challenges of the future will be making sure that powerful technologies are kept in the hands of responsible authorities, and out of the hands of terrorists and unabomber types?

    I feel that this will be a major theme of now and more so in the future, the control of technology. I'm not just talking about weapons or tools used in criminal activity. What happens when we obtain the technology to make ourselves live forever? Will it be controlled, will it be HIDDEN? Will it be "narrated" out, "for our own good"? (Only fools would believe they could live forever using X! X causes some horrible bad thing! X is destroying the rain forest!)

  69. "Selective Enforcement" instead of "good laws"? by Dr.Dubious+DDQ · · Score: 1

    Those In Power(tm) here in USA, inc. seem to have a disturbing trend going. More and more, it seems as though the government in this country is moving towards a "make everything illegal and then just pick and choose who you enforce the laws against" rather than "make clear, rational laws and enforce them".(This isn't just happening in the "computer law" arena)

    Since when do we need "to pass legislation against illegally accessing a computer"? Isn't it already illegal to "illegally access" anything? Is this for some sort of "bonus crime" they can slap you with if they feel like it?

    And I certainly hope the wording is a lot more specific than "intercepting computer data or interfering with computer systems" in this "treaty". If the government dislikes a "hacker" who happens to work as a system administrator, would they be able to fling him in jail because he read the server's logfiles? Or if a kid from som Scandinavian country wrote software to decode encrypted media, would someone in USA, inc. have to work very hard to get this hypothetical kid picked up by his country's police? (Say...why does this sound familiar?)

    The 'party line' along this whole trend seems to always be "Don't worry, this law will only be used to deal with real criminals. Trust us, it won't be misused. You just don't understand the language, it's not as bad as you think." For example:
    DOJ and council officials said much of the concern over the draft stems from a misunderstanding of the treaty's intent and a need for clarifications in the text. For example, they said, security testing would not be banned, because prosecutors must show there was intent to commit an illegal act. That last sentence makes me wonder - if the hypothetical "hacker" that the government doesn't like makes an offhand remark concerning cracking techniques he's interested in finding out more about, and later does a security scan of his employer's system (for legitimate reason), how hard would it be for US Gov't, inc, to convince a typical jury that a comment about 'cracking techniques' shows 'intent' (in the sense of 'conspiracy')? Given what I've heard about the frighteningly-popular-among-legislators "Methamphetamine anti-proliferation act" (which, from the sound of it, would make it illegal to TALK ABOUT the chemistry of phenylethylamine derivatives), this doesn't sound like a too-far-fetched scenario.

    We (here in USA Inc) have about a month-and-a-half to get the word out and try to weasel a stand on the issue out of the various candidates running this year. May the God of your choice help us all....

    Maybe I'm overreacting (and perhaps will be moderated down as "Troll" since there isn't a "Paranoid Whacko" option on the moderation menu), but I'm worried.


    Joe Sixpack is dead!
  70. CENSORSHIP IN THE EXTREME FORM by ultra_5 · · Score: 1

    ahhh wtf i am so tired of this every time i turearound another goverment is trying to rape me from behind, the internet is the internet its made to be used for free exchange of ideas and free exchange of ideas allways comes with a few idiots who want to reek havic so deal with don't just pass another law limiting us, any one know island i can buy that has oc access casue i really want to move out of this domain of censorship to my right

  71. Spaf's Comments by interiot · · Score: 2
    Several academic security specialists wrote a statement of concerns about the treaty:

    • As leading security practitioners, educators, vendors, and users of information security, we wish to register our misgivings about portions of the Council of Europe draft treaty on Crime in Cyberspace.

      We are concerned that some portions of the proposed treaty may inadvertently result in criminalizing techniques and software commonly used to make computer systems resistant to attack. Signatory states passing legislation to implement the treaty may endanger the security of their computer systems, because computer users in those countries will not be able to adequately protect their computer systems and the education of information protection specialists will be hindered.

      Critical to the protection of computer systems and infrastructure is the ability to

      • Test software for weaknesses
      • Verify the presence of defects in computer systems
      • Exchange vulnerability information

      System administrators, researchers, consultants, and companies all routinely develop, use, and share software designed to exercise known and suspected vulnerabilities. Academic institutions use these tools to educate students and in research to develop improved defenses. Our combined experience suggests that it is impossible to reliably distinguish software used in computer crime from that used for these legitimate purposes. In fact, they are often identical.

      Currently, the draft treaty as written may be misinterpreted regarding the use, distribution, and possession of software that could be used to violate the security of computer systems. We agree that damaging or breaking into computer systems is wrong and we unequivocally support laws against such inappropriate behavior. We affirm that a goal of the treaty and resulting legislation should be to permit the development and application of good security measures. However, legislation that criminalizes security software development, distribution, and use is counter to that goal, as it would adversely impact security practitioners, researchers, and educators.

      Please do not hesitate to call on us for technical advice in your future deliberations.


    I guess the treaty would, at the very least, make a significant part of the Bugtraq mailing list illegal.

    Also note that I don't think they're only asking for an academic exclusion. If corporations want to do internal testing, they would need exceptions also. And individuals... and...
    --

  72. How do you figure? by browser_war_pow · · Score: 1

    "A friendly reminder that ratified treaties supercede the constitution" All laws passed by our government must be constitutional and treaties are not exempt from this. The US Constitution is essentially the federal charter and without the Constitution there is no United States of America. So even treaties must be constitutional. Another thing to keep in mind is that without the US Constitution, our national leaders have no power. The states would retake all power lost by the federal government and the United States would collapse and we'd be where we were in 1781, a bunch of little sovereign states.

  73. No, treaties DON'T override the constitution. by Ungrounded+Lightning · · Score: 3
    This constitution, and the laws of the United States which shall be made in pursuance thereof; and all treaties made, or which shall be made, under the authority of the United States shall be the supreme law of the land; and the judges in every state shall be bound thereby, any thing in the constitution or laws of any state to the contrary notwithstanding.

    Emphasis mine. See? Even the constitution takes a back seat to any agreements made in treaties.


    That is incorrect. It's a very common error, and comes from misparsing the sentence. The same misparsing could be used to say that federal law overrides the constitution, or that the constitution overrides itself.

    What it REALLY says is that the (federal constitution, federal laws, and treaties) override state (constitutions and laws).
    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    1. Re:No, treaties DON'T override the constitution. by interiot · · Score: 4
      A lot of people are arguing over this, so maybe some facts will help.

      Reid v. Covert (1957) Supreme Court

      • When the United States acts against its citizens abroad, it can do so only in accordance with all the limitations imposed by the Constitution, including Art. III, 2, and the Fifth and Sixth Amendments. Pp. 5-14. [354 U.S. 2]
      Commentary on the case here.
      --
  74. What all this is really about. by GigsVT · · Score: 1

    Power. I mean of course it is obvious, but there are subtle points.

    Used to be, power was the person who had the gun or had bigger muscles. They made it illegal to use guns or muscles to have power over other people, unless you were an agent of the government.

    These days, technology and knowledge of how to use it are power. Who isn't afraid of someone that can take your life and turn it upside down by erasing years of work, or worse, exploiting years of your work for their own profit. Guns and muscles aren't needed anymore, only technical knowledge.

    The problem is that certain people in society have this power, and the government, who wants a monopoly on power over people, really hates that.

    The government is the rightful holder of some of that power, but they of course abuse it. It is a war, they are trying to end the rouges with the new power with the scepter of traditional power.

    The side effect is that they are taking power away from the people who are trying to use this technological power to prevent, rather than cause abuses.

    What most of us here at Slashdot want to do is use this new power to help control the technology. We want to use our skills to prevent people from doing bad things with technological power. The government doesn't want to help us, they just want to maintain power the old fashioned way, with muscles and guns.

    We must make the government accept that the only viable solution to this problem is technological innovation. Any other heavy handed solution will result in revolution. This is not something I desire, but I see it as inevitable, if the government doesn't turn around.

    In other words, get off your damn ass and vote for someone who knows what is going on before it's too late. There is NO excuse for not voting.
    -

    --
    I've had enough abrasive sigs. Kittens are cute and fuzzy.
  75. How bout Russia? Ironically, the last free nation. by Anonymous Coward · · Score: 1

    The cold wor is indeed over. The west lost. The west is turning into a far worse dictatorship than the Soviets ever were.

  76. International Hackerism by resistant · · Score: 1

    Does this mean massive international man-hunts for the infamous "Carlos the Hacker"?

    Best encrypt with ScramDisk (Windows 95/98 version here) locally, and with GnuPG for transmission, all your CueCat code and use anonymous remailers for version releases to Freenet, or be prepared to live out your life in a shadowy realm of underground coders dwelling in the hidden spaces between the giants of the United Corporations of the World.

    --
    A truly excellent pizza parlor is a delight unto the heavens. Treasure the sauce and the toppings!
  77. Almost... by Ungrounded+Lightning · · Score: 2
    A friendly reminder that ratified treaties supercede the constitution.


    I don't believe it for a minute. The Constitution holds that treaty law should be held as equal to itself.

    Close, but no seegar. The section you're referring to actually says that any of (the federal constitution, the federal laws, treaties) trumps any of (state constitutions, state laws) in any court case.

    THAT section doesn't say anything about the relative strength of the federal constitution, the federal laws, and treaties.

    However: laws, treaties, and constitutional amendments are authorized, and their manner prescribed, by the constitution. And the bar is much higher for amending the constitution than it is for either making a treaty or making a law. So it should be pretty clear that treaties, like laws, haven't qualified as constitutional amendments and thus neither treaties nor (federal) law trumps the (federal) constitution.
    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  78. Rape! by fugue · · Score: 2
    I think that rape is a much more serious and widespread crime than hacking. When will they ban possession of that equipment?

    --
    "The biggest problem with communication is the illusion that it has taken place."
  79. equal != supercedes by astroboy · · Score: 1
    Treaties do not supercede the constitution, as it, and only it, is the supreme law of the land.

    Read VI.2. again. ``This Constitution, and the Laws of the United States [...] and all Treaties made [...] shall be the supreme Law of the Land.''

    1. Re:equal != supercedes by 1010011010 · · Score: 2

      Read the whole thing:

      ...any Thing in the Constitution or Laws of any State to the Contrary notwithstanding.

      The President could not enter into a treaty to revoke the 1st amendment.


      ___________________________

      --
      Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
    2. Re:equal != supercedes by kaphka · · Score: 2
      ...any Thing in the Constitution or Laws of any State to the Contrary notwithstanding.
      Sigh... "Anything in the (consititution or laws) of any state to the contrary notwithstanding."

      Come on guys, I know the style is a little archaic, but it's not like it's Middle English...
      --

      MSK

  80. It's an election year by epcraig · · Score: 1

    It's an election year, the President, 1/3 of the Senate, and the entire House of Representatives are up for election. They're not in the least worried about citizens' reactions to the Digital Millenium Copyright Act. They don't feel there's any significant opposition, so why worry about this treaty? It's going to pass, and be as bad as predicted, and voices in the Slashdot wilderness will wail, to no effect.

    --
    Ed Craig "Who cares what you think?" George W. Bush, 4th of July 2001
  81. Here is the copy.... by Thalia · · Score: 2

    The text of the draft Convention can be found on here. They do welcome comments, By releasing the latest draft of the treaty, the Council of Europe seeks to enhance the consultation process with interested parties, whether public or private. It particularly encourages business and civil society organisations to come forward and share their comments with the experts involved in the negotiations before the text eventually becomes final. Commentaries are welcome on : daj@coe.int So, instead of bitching here, Slashdot should create a communal comment, indicating the worries that we, as a community have. Thalia

  82. Re:-Why- this is good... by AndrewD · · Score: 2

    Because it outlaws pretty much every OS Microsoft have ever produced and, for that matter, Novell prior to (if memory serves) 4.11.

    They're perfect cracking tools. You just have to persuade your target to install them, and the poor fools are wiiiiiide open.

    --

    -- AndrewD

    A Maze of Twisty Little Laws, All Different.

  83. Well, that's fucked up the Federal Reserve Bank .. by torpor · · Score: 2

    .. or has it? I guess they're not a sovereign nation, are they ... which I suppose makes it perfectly acceptable for the US government to make a treaty with it, without the will of the people, to control the US economy.

    (Hint: The Federal Reserve Bank is a privately held organization...)

    --
    ; -- the corruption of government starts with its secrets. a truly free people keep no secrets. --
  84. ...but not quite... by Millennium · · Score: 2

    THAT section doesn't say anything about the relative strength of the federal constitution, the federal laws, and treaties.

    Actually, read it again. The way I look at it, it seems as though it provides a clear hierarchy. State constitutions trump state laws. Federal law trumps state laws. Treaties trump federal law. And finally, the Constitution trumps everything else, at least as far as the US is concerned.

    Of course, technically the government is forbidden to ratify any treaty that would conflict with the Constitution, but go figure; that provision has been ignored for how many years?
    ----------

  85. "Hacking" is not in the proposed treaty. by Ungrounded+Lightning · · Score: 4

    The text of the treaty does not use the term "hacking". That occurs twice in the editor's comments, and nowhere else.

    The treaty explicitly defines the classes of crimes in question.

    There's some bad stuff in there. But it's not QUITE as bad as the article makes it sound.

    (One example is the section on seizure, which includes deliberatly denying access to the siezed data.

    In the US, seizure as part of a search is supposed to be only to preserve evidence. Denial or disruption of access to the seized material is only authorized when it's an unavoidable consequence of preserving the evidence, and copies of the data siezed must usually be made available to the data's owner at some point in the proceedings.)

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    1. Re:"Hacking" is not in the proposed treaty. by Keith_Beef · · Score: 1

      Dead right. As soon as I read the Slashdot leader, I thought "Oh No! That machete I made so I could clear out the brushwwod in the garden has just been declared an illegal hacking tool!"

      Another case of journalistic incompetence. How on earth do people with such a tenuous grasp of the English language, how do these piss-poor scribblers, manoeuvre themselves into jobs where they can communicate their drivel in a sensational manner to such large numbers of people?

  86. I'm scared, please don't take... by jdennett · · Score: 2

    ...my brain. It's the most useful device I have when I want to hack.

  87. Re:What about SATAN? by dmadhatr · · Score: 1

    That brings up an interesting question, as with all things, I would bet that SATAN, SAINT and SARA would all be classified as hacking tools when not used by some corporation or government. It's also a good question of who decides the use of these 'laws'. I'm an American in the classic sense, I don't believe that any organization outside of the US should control privacy issues or legal issues for citizens of the United States. I believe every country should have this right, but in truth, our country and the EU, via the overwhelming force of corporations that push them into this, will sign these laws. It's a sad state of affairs when we sign over our freedoms (or allow some person in Washington or elsewhere), to do the same. What constitutes illegal? That's up to the people, not the corporations or the governments. For me myself, if a law violates the interests of personal freedom (barring laws that protect people from harm, not corporations, I don't believe in corporate rights.), it should be broken. As a Native American, I know that we had laws on the books calling for our extinction, both physical and social. Was this right? If you were good to the tribes, you were doing something illegal. Should we follow all the laws these people make for us like Stepford Hackers? I say no, I say that those in the community who advocate any law that bans free source of any tool should check themselves. Any loss of any freedom is a loss that will never be regained. If anything, we should be signing more treaties to protect the earth, not the back sides of the corporations and governments that are slowly trying to control the lives of people all around the world. When they control everything, where will you go, where will you run? Hacking Tools are code, code is word, and word is free speech. Take it from a Native, they are ultimately out to screw you, not protect you. Trust us on this one.

  88. (Offtopic) - Banning Raping equipment by Dr.Dubious+DDQ · · Score: 2

    Nah, you don't do that sort of thing all at once.

    You start small, like being required to 'register' the equipment. Hmmmm....looks like my birth certificate already takes care of that part.

    The next step then, is to ban "assault" versions of the equipment. In this context, I suppose this means either equipment over a certain length, or equipment that produces or can handle "assault" concentrations of testosterone....

    Once that's in place, we just institute a "buy-back" program which allows owners of the equipment to sell it to the Government (presumably this means taxes go up to pay for nationwide 'sexual reassignment' surgery....) Those who hold out on this will have their equipment taken by force later on.

    Okay, I'll stop. I'm starting to scare myself, and I don't want my legislators to think I'm serious and start getting ideas...


    Joe Sixpack is dead!
  89. Anyone have a better idea? by r-jae · · Score: 1
    Firstly, they shouldn't have used the word 'hackers'.

    Secondly, everyone here KNOWS that people who use their hacking skills to view or alter private data, or to deny service to a system, are doing something illegal, something that is wrong and something that should be stopped. The only people here that would disagree with me are young boys whose hormones haven't quite worked themselves out. I say to you, get a life.

    Having said that, how else are we supposed to protect our systems and our data without INTERNATIONAL laws such as these?

    Sure this all seems a little Orwellian. And sure, this all seems as if it's another excuse for the big powerful look-at-me-I-have-nuclear-weapons gang to take control of the net like they have every other medium of communication, but can someone else suggest a better way to govern this type of thing?

    I'm not saying there is not a better way. I'm simply asking you to put better ways forward. In the event of two or more powerful countries getting together and making decisions, don't have a hissy fit about it and run off to check if your phones are tapped. The idea of posting comments is to stimulate productive discussion.

    And NO I don't work for the government.

    Cheers,
    Daniel.

    --

    Daniel Zeaiter
    daniel@academytiles.com.au
    http://www.academytiles.com.au
    ICQ: 16889511

  90. The Source is not important! by cs668 · · Score: 1

    Oversight is!!!

    Any network sniffing tool is going to be very configurable. A few changes to the filter config and you go from watching only specific communication to watching all communication.

    The oversight of the organizations acting on their net-tap warrants is what is important.

    PS I have posted the same comment each time carnivor comes up, but I really think the source is irrelevant.

  91. Argh! Please, no loophole! by 1010011010 · · Score: 2
    Gee, I've always read it, "any thing in the constitution, or laws of any state, to the contrary, notwithstanding." Meaning, when there is a contradiction, the Constitution wins.

    However, I'm not not so sure that that means what I thought it meant, either way, due to the "notwithstanding." That word means "in spite of." Essentially, the constitution can be repealed via treaty if that's what it means, which scares me and pisses me off. People like Clinton study COnstitutional Law just to find loopholes in it and ways around it. Treaty would be the mother of all loopholes.

    The idea that nothing supercedes the U.S. Constitution is familiar; here's a couple of links I just dug up:

    http://citizens.reagan.com/rig ht/ no-irs/helms.htm
    Thus, when the United States joins a treaty organization, it holds NO AUTHORITY over us.We abide by our treaty obligations because they are the domestic law of our land, and because our elected leaders have judged that the agreement serves our national interest. But NO treaty or law can EVER supercede the one document that all Americans hold sacred: The U.S. Constitution.

    http://www.aei.org/past_event/conf12 09b .htm
    Critics, particularly those from the United States, stress the negative impact allowing treaty law to supercede domestic law would have on the constitutional balance of power and the federal checks and balances. Ultimately, as one observer note, they believe that allowing "treaty law to be superior to federal legislation (let alone to the constitution) to be dangerous to the idea of democracy and democratic representation of individuals."
    Regardless of whether the Constitution can technically be countermanded by treaty, the U.S. can simply withdraw from treaties its citizens do not like. The whole idea of surrendering soverign authority to unelected, unaccountable bureaucracies like the WTO, WIPO, etc. strikes me as highly distasteful, and even treasonous. I for one have no intention of obeying the "laws" made by faceless parties outside of my country.

    Can you provide an explanation of how treaties can supercede the U.S. Constitition as the supreme law of the land? Could the fifth amendment, for example, be nullified by treaty? Wouldn't that constitute a change to the consitution which the states would have to ratify?

    ___________________________
    --
    Napster-to-go says "Fill and refill your compatible MP3 player", which is a lie. It's not MP3. It's WMA with DRM.
    1. Re:Argh! Please, no loophole! by kaphka · · Score: 1

      Oh, I didn't mean to disagree with the main point... I'm pretty sure that treaties do not supercede the constitution.

      I was just pointing out that in the particular clause that was being discussed, the word "constitution" refers to state constitutions, not the U.S. constitution. It would make much sense for it to supercede itself, would it?

      --

      MSK

  92. Re:This is technological censorship, or the beginn by psychonaut · · Score: 1
    Supposedly, (just hypothatically) I find the magical holy grail of factoring primes... is that hacking? Can I publish this?

    Uh, buddy... I hate to detract from your argument, but the method of factoring primes has been well-known since antiquity. Namely, for any prime p, its sole factors are 1 and p. It's really not all that difficult.


    Regards,

  93. proposed solution by wdf · · Score: 1

    Perhaps if UUNet and other companies owning large sections of backbone just went black for like, a year then :
    A) All the AOL subscirbers would forget to resubscribe and the internet would be cool again
    B) they wouldn't bother to make laws to regulate somthing that didn't actualy exist anymore
    C) I might get moderated above 1 for a change

    --
    William D. Freeman http://members.xoom.com/EvilGNU -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS d- s+:++ a---
  94. first... by wdf · · Score: 1

    you kill all the lawyers

    --
    William D. Freeman http://members.xoom.com/EvilGNU -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS d- s+:++ a---
  95. Ethnic Gang Rape of Imprisoned "Hackers" by Baldrson · · Score: 2
    "The horrors experienced by many young inmates, particularly those who are convicted of nonviolent offenses, border on the unimaginable. Prison rape not only threatens the lives of those who fall prey to their aggressors, but it is potentially devastating to the human spirit. Shame, depression, and a shattering loss of self-esteem accompany the perpetual terror the victim thereafter must endure."

    U.S. Supreme Court Justice Harry A. Blackmun,
    Farmer v. Brennan

    This statement by a United States Supreme Court judge was made before prisons had become a primary breeding ground for AIDS, not to mention Hepatitis-C (which is at 40% of inmates in California prisons).

    There is a false myth being promulgated by a woman named Carolyn Meinel, "the Happy Hacker" that young hackers are not subject to sexual exploitation in Federal prisons. Carolyn Meinel has been published as lead author for such establishment magazines as "Scientific American" concerning computer security, makes frequent use of the FBI's services and is rumored to have been in the pay of the FBI on more than one occasion.

    The truth is, rape of young men in Federal prisons is not as frequent as it is in some of the worst state prisons, but is more directly targeted by US Government authorities themselves.

    Assistant U.S. attorney Gordon Zubrod from Harrisburg, PA made the following public statement to 3 suspects who fled to Canada (this statement was captured for the public record during a Canadian Broadcasting Corporation interview):

    "You're going to be the boyfriend of a very bad man if you wait out your extradition."

    Here are a couple of letters written by young men to the late Steven Donaldson, the dead founder of Stop Prisoner Rape:

    I was raped by an inmate that was assisted by an federal correctional officer [at FCI Memphis, Tennessee]. I have attempted to file a law suit in the matter, but with no money and without the legal knowledge to pursue a legal confrontation, I was simply forced to accept what happened to me as if it was the normal thing to do/or happen.

    The incident was also investigated by the Office of Internal Affairs. The officer was then fired and I was simply transfered.

    It is hard for alot of rape victims to seek help from the prison law assistance without the other inmates becoming aware of the fact that a male has been raped. Once this information has been set out there, the rape victims become victims of another type. This could be the reason that many cases such as min[e] never even reaches a court of law, simply becasue we can not initiate this kind of legal process without the help of other inmates. There are some inmates that have been raped in prison that cant even read. Not to mention the mere shame that comes with having your manhood stripped away as concieved by other male prisoners, so it becomes something that is hidden in your past if you are transfered to an institution where it is not known.-Valgene Royal, San Pedro, California

    From Royal's BP-10 administrative appeal: "On July 3, 1991 I was laying in my bed sleeping in disciplinary segregation, when I was awakened by my door being unlocked, at which time an inmate entered my room and appeared at my bedside. The officer that let the inmate into the room left and locked the door before I could identify him. The inmate forced himself on me and proceeded to rape me....Eventually an officer whom I was able to identify...let the inmate out of the room and locked the door back and they left together.

    [Royal reported the rape and was moved to the prison hospital.] I remained in the hospital cell from July 3th until July 9th, 1991 without being allowed to shower or exercise....On a few occasions I was only fed once a day....A F.B.I. polygraph examiner verified my claim `via' polygraph examine." [Royal was kept in segregation involuntarily even after his disciplinary time expired and both the attacker and the officer involved had been transferred from the institution.]

    And another:

    In 1986, at the age of 20...I pleaded guilty to one count of bank fraud....On March 14, 1987, while sun-tanning on a hill away from [the federal prison camp at Lompoc, Calif.], [Tony] Armstrong and his two friends approached me. I was tackled and punched in my gut. I couldn't scream for help because I had the wind knocked out of me. I struggled and twisted, trying to get free, then I was hit and almost became unconscious. They raped me. After they were through, they said that, if I complained to the authorities, I would be killed. No matter where I went, they, or their gang members, would be able to kill me. Later, at dinner, Armstrong and his friends came over to my table and warned that they wanted to rape me again that night. I believed them because we lived in dorms and could move freely. The rape resulted in a large triangular piece of skin being torn off near the base of my tail bone. I still have a scar.

    At 5:30 a.m., on March 15, 1987, I escaped by walking away from Camp. There were no fences around the camp.

    Three months after I was raped [having been rearrested May 4 or 5 and incarcerated at VCI Terminal Island] I tested positive for HIV in a routine medical check up. This test was the first test among other routine ones in which I tested positive.

    While at FCI Terminal Island, I wrote to...the Bureau of Prisons...My letter contained complaints about the amount of protection given to inmates from other inmates....[2 ½ weeks later] prison authroities asked if I had written the letter. I said that I did. The guard, Lieutenant Webb, at that point (and other times) mocked me and said that I should stop complaining and that I "should take it like a man." Other prison guards also made derogatory remarks. I was immediately placed in solitary confinement for over 100 days (January to April) "for my own protection."-Kevin Borkowski, California

    Obscene are the arguments about whether any of the things the government does: treaties, taxes, etc., are "constitutional". Clearly it is well beyond the stage where the US Government gives your rat's ass to one of their civil sodomites whether or not anything they do is "constitutional" in the slightest. The only thing they care about is whether they can get away with what they want to do -- and, since their authority is based on criminal conduct at its very root, this has much more to do with who has the power than who has the law on their side.

    The message the US Government is sending via its well-targetd prisoner rapes in Federal "corrections" institutions is clear:

    Acquire power now.

    Acquire power before they come and batter your door down and take you off to be gang raped by their alpha disease vectors "just to show you who's boss". You should be prepared to defend yourself from these murderous sexual sadists posing as "law" enforcement officers by whatever means necessary.

    Since the US Government has taken to pitting ethnic groups against each other in prisons as a means of enhancing the degree of torment and control of prisoners, the primary means of defense, if you are black, Hispanic, Asian, Jewish or Italian, is to make sure you have friends who are connected with gangs of your ethnicity so that when you enter prison you can be protected from the other ethnic gangs. Be sure you have access to lots of money in the bank to provide insurance payments to your ethnicity's gang.

    Unfortunately, most young "hackers" are Protestant heritage men who, as a result of that ethnicity, have an even bigger problem in prison:

    With the encouragement of the prison system, young Protestant men (especially ones with light-hair color) are considered "prime chicken meat" by other ethnic gangs and the only gangs you can seek out for protection are those targeted by legislation as "terrorist hate groups" and receive correspondingly intense scrutiny, infiltration and even covert control by Federal authorities. Get anywhere near one of those groups and you are almost certainly going to run directly into an FBI operative as one of your first contacts within the group. Some of these under cover FBI operatives pad their reports out to make it look like they are doing some "good" for their civil sodomite paycheck. Furthermore, those Protestant ethnicity gangs are singled out in the prison system for suppression of their activities. In many prisons you can't even get a copy of the Poetic Eddas (a pre-Christian book of religious mythology from tribes that later became Protestant) because it is deemed "hate literature" by the government. Political asylum in other countries is a possibility, but once you have been labeled a "neoNazi" or "white supremacist" by any western country, you effectively lose your rights to political asylum anywhere in the West -- unlike those who are declared by the US Government to be members of gangs of ethnicities other than Protestant heritage.

    PS: Setting up alternative monetary systems like DBarter can't hurt either. If they want to back their money with protection from the very threats they create, then it is high time to dispense with their monetary system.

  96. SOMEONE BETTER READ THIS!!! When In the course... by wdf · · Score: 1

    of huamn events it becomes necissary to say "FUCK YOU" to the new world order, but the need to kill people is not great enough, nor would it have enough support should we try global revolution, the people are entitled to tell the opressors what they think.

    we hold these truths to be self evident, that all nerds are created equal, that they are endowed by Ken Thompson with certain inaliable rights, among these are Bandwidth, Source Code, and the persuite of Information. To secure these rights open standard are instidutd among Men, deriving their just powers from the concent of the hackers, That wheen ever any form of New World Order becomes destructive and/or fucking stupuid beyond belife, it is the right of the people to alter, abolish, or just fucking ignore it, and to institute a new Standard, laying its foundation on such on such principals and organizing its powers in such form, as to them shall seem most likley to effect their Freedom To Use Cool Stuff and Ability To Stand Up For The Deffinition Of "Hacker".
    ....
    .....
    ......
    signatures

    How's this?

    --
    William D. Freeman http://members.xoom.com/EvilGNU -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GCS d- s+:++ a---
  97. Re:How bout Russia? Ironically, the last free nati by PD · · Score: 1

    I agree. I once had a college roommate who claimed that the Soviet Union had infiltrated the United States to such an extent that we are the actual Russians.

  98. Ban it all by greggman · · Score: 1

    Hurry!

    Somebody please write some javascript that hacks. Then all browsers will be banned.

    Some CGI that hacks. Cool, ban all web server sofware.

    A Word Macro that hacks. I know some people that would like to see Word banned.

    Come Flash that hacks. Flash will then be banned.

    Lingo? That too's got to go.

    Write another in C, C++, Java, Perl, and Assembly and maybe you can get all programming languages banned too.

    Yippy!!!

  99. Add GCC to the "munitions" list by sunking7 · · Score: 1

    The treaty will force all signatories (i.e. your government) to make illegal the 'import and distribution of devices used for hacking.'

    Well, there goes my compiler :(

  100. This figures... by Blitherakt! · · Score: 1
    Just another knee-jerk reaction by our wonderful governmental entities. It's about time we (at least in the U.S.) started screaming at our representitives instead of taking a "well, what can I do anyway?" attitude. Depending upon the wording of these laws, it could very well screw up security auditing tools and make companies that sell these types of utilities international outlaws overnight.

    As anybody who's had to hack a box at work can attest, the most important things you can use is the trusty telnet client, perhaps Perl to run through a million passwords in a brute force attack and the good old brain.

    So, do we outlaw ICQ, IRC, ICMP, source-routed packet data, backticks in the *nix shells, poor CGI programs that don't escape their parameters well enough, the Bugtraq mailing list, the sprintf function and just about anything else because it's a tool that could be used for hacking? Remember that Kevin Mitnik (sp?) used social engineering and trash digging more often than any hacking tool...

    It's time for the public to take a stand and stop listening to the overreacting, sensationalizing, hype-strewn media blowing things out of proportion and react with common sense for a change. If we'd just spend some time telling the government what rational people want for a change, we'd be much better off.

    So, if you feel like writing to your representitives, put pen to paper and fire off a letter; almost without exception, the people dictating our "can's" and "cannot's" on-line don't even understand simple e-mail, let alone the complex ways in which a tool can be used for good or bad.

    /tma

    --
    /tma
    ----
  101. Don't panic Mr Mainwaring by Paul+Johnson · · Score: 2
    If you turn off paranoia mode and actually think about what this treaty says it starts to look a lot less frightening.

    The US and UK (and probably other countries) already have laws banning trade in devices used for hacking and other criminal purposes. AIUI in the US the usual test is lack of "substantial lawful purpose" or something along those lines. The treaty doesn't set down detailed rules for this, it just commits the countries in question to have some law on the books which covers that subject.

    Similarly for the provision of information. The treaty doesn't set out criteria for warrants: that is a domestic matter. It merely requires the signatory countries to have some kind of law on the books which enables the police to get at computer data.

    Recall the problem with the virus author in the Phillipines who couldn't be prosecuted because the Phillipines didn't happen to have an anti-virus law on the books? This treaty is intended to avoid that kind of situation.

    Paul.

    (BTW "Mainwaring" is pronounced "Mannering", as every Dad's Army fan will know)

    --
    You are lost in a twisty maze of little standards, all different.
    1. Re:Don't panic Mr Mainwaring by interiot · · Score: 2
      Most US Law up until now have presumed a person innocent until proven guilty. And "guilty" usually meant using that weapon to hurt/kill someone or anything else that's illegal. Okay, there are laws that don't let you carry guns in certain places, but the NRA has been actively fighting that. Any arguments against the Cybercrime treaty are essentially the same as the NRA's arguments that non-criminals should be allowed to have/carry/use-in-a-legal-manner guns.

      It's the act of crime that's illegal, not the weapon itself. What's wrong with that?

      I don't know, maybe they scale things back to allowing people to be licensed virus carriers, since viruses do have ligitimate uses. There are very few of them (eg. making sure your antivirus tool actually works, studying viruses, making an antivirus tool...), but they aren't insignificant uses. Especially the antivirus tester.
      --

  102. Yet another case ... by cah1 · · Score: 1

    of the future coming up to meet where Neal Stephenson ("Cryptonomicon"), Iain Banks ("The Business") and others have trod before.

    But that was only fiction ...

    If the government of your country doesn't represent you, do you change the government or do you make your own country?

    --

    --
    "I do not speak for my employers, though they are controlled from my Teddy's huge pulsating brain."
  103. EU Data Protection by nick_davison · · Score: 1
    'provide law enforcement authorities with the ability to conduct computer searches and seize computer data.'

    How does this gel with the EU Data Protection Law... "Personal data shall not be passed to any state with inadequate Data Protection Legislation" [i.e. US]?

    Under one law the FBI demand my details, under the other my ISP refuses to hand them over to any American organisation.

  104. Whither Prohibition by alephnull42 · · Score: 1

    Let's hope that the implementation of this treaty follows the great success stories of previous prohibitions by international agreements, such as bans on child labour, land mines, arms sales, mary jane etc. etc. etc.

    --
    Not confused enough? http://translate.google.com/translate?u=www.slashdot.jp&hl=en&ie=UTF8&sl=ja&tl=en
  105. That's not the law -- Constitution uber alles! by werdna · · Score: 2
    "Treaties overriding constitution" is an urban legend popular among certain right-wing factions concerned about the New World Order and similar conspiracy theories.

    The constitution doesn't say so, and neither does the most applicable case law. The Supremacy Clause reads as follows:

    This constitution, and the laws of the United States which shall be made in pursuance thereof; and all treaties made, or which shall be made, under the authority of the United States shall be the supreme law of the land; and the judges in every state shall be bound thereby, any thing in the constitution or laws of any state to the contrary notwithstanding.


    Thus, a treaty is no more immune from Constitutional scrutiny than is any other "law[] of the United States which shall be made." While treaties (and federal law) are CLEARLY given special treatment as supreme law over that of states, the Constitution has special overriding status, and the Supreme Court has stated so clearly in several cases. See, e.g., Missouri v. Holland, 252 US 416 (1920) ("a treaty cannot be valid if it infringes the Constitution").
  106. Re:SOMEONE BETTER READ THIS!!! When In the course. by bfree · · Score: 2

    Come on over and sign people
    http://www.censorthis.net/cybercrime.html .

    --

    Never underestimate the dark side of the Source

  107. There go some major products... by bored · · Score: 1