Slashdot Mirror


House OKs Life Sentences For Hackers

ByteHog writes "The House of Representatives voted overwhelmingly Monday to create a new punishment of life imprisonment for malicious computer hackers. The article on MSNBC also mentions that police can conduct internet or telephone eavesdropping without first obtaining a court order. Says a Rep from Texas: 'A mouse can be just as dangerous as a bullet or a bomb.'" Other articles can be found here and the text of the bill is available.

35 of 801 comments (clear)

  1. Okay, this is pretty much it. by BadmanX · · Score: 3, Insightful

    Build your own computer? You're a terrorist.
    Run an "unsecured" operating system? You're a terrorist.
    Share files? Terrorist.
    Complain about corporate abuse? Terrorist.
    Demand your Fair Use rights? Terrorist.
    Fail to consume your fair share? Terrorist.

    In 100 years, when they are picking over the ashes of our civilization wondering what went wrong, this will be the turning point day they decide on...the day when you could get LIFE in PRISON for using a computer.

    1. Re:Okay, this is pretty much it. by stevenbee · · Score: 3, Insightful
      the day when you could get LIFE in PRISON for using a computer

      ... To commit certain crimes. In other words, Its not the fact that you are using the computer, but how you use it.

      Using a(licensed) firearm to shoot soda cans off a fence != crime

      Using a(licensed) firearm to shoot someone in the face == crime

      Heated hyperbole will not help to advance your cause; only a reasoned consideration of the issues will.
      I now jump off my soapbox.

      --
      Don't read this!
    2. Re:Okay, this is pretty much it. by Scratch-O-Matic · · Score: 3, Insightful

      Just because the "weapon" is different shouldn't change anything.

      Recall that recently, certain charges were dropped against Massoui because a commercial airliner was not specifically mentioned as a 'means of transportation' in the applicable federal law. It's not a waste of ink to spell out the new versions of old crimes that can be committed with new technology.

      --


      Evil is the money of root.
    3. Re:Okay, this is pretty much it. by PhilHibbs · · Score: 4, Insightful
      John Walker Lindh is A MEMBER OF THE TALIBAN, and is charged as a traitor to the United States, is only receiving 20 years in jail.
      Why is being a member of a political party in a foreign country a crime? The US were never at war with the Taleban until a group that operated out of their country committed the 911 atrocities. Even then, the Taleban offered to extradite OBL if the US could offer any evidence that he was involved. GWB declined, so they said get stuffed, quite reasonably IMO. I really don't understand why affiliation with the government that the US helped to establish is suddenly treason.
  2. Hmm... by MiTEG · · Score: 5, Insightful

    So if I train my dog so it kills someone, I'll get a cushy 4 years in jail, but if I train my computer so it causes only fiduciary damages, I can get life in prison? That seems screwy to me.

    --
    The future isn't what it used to be.
  3. Re:Has hacking ever killed anyone? by CountBrass · · Score: 5, Insightful

    That would sensibly be covered by existing murder and man-slaughter laws. The internet and computers are not some how "special" and "different" - they should and must be subject to the same laws as every other human endeavour. No need for endless special legislation - well except for the senator from disney and his cronies to promote their pay-master's interests.

    --
    Bad analogies are like waxing a monkey with a rainbow.
  4. Wow. by warmcat · · Score: 3, Insightful

    I hope none of the 1 million Governement Snoops I read about via Drudge don't turn you y4nk33 haxxors in. (What happened to fighting the good fight with 'Hacker' vs 'Cracker', anyway?) Actually, its probably reasonable, if someone deliberately set out to kill people by screwing with Air Traffic Control or somethings. But there's a cold wind blowing from the hill.

  5. WorldCom by truesaer · · Score: 3, Insightful
    Smith heads a subcommittee on crime, which held hearings that drew endorsements of CSEA from a top Justice Department official and executives from Microsoft and WorldCom

    The funny thing is that the biggest threat to the internet right now is WorldCom itself....since they own UUnet and are going seriously bankrupt. Of course UUnet will stay alive somehow, either by WorldCom, sold to someone else, or through a government bailout. The major backbones and networks are really in a pretty powerful position, since they control major portions of the internet.

  6. Don't understand... by pubjames · · Score: 5, Insightful

    What I don't understand about this is why there needs to be specific bills related to computer hacking.

    As I understand it, the bill relates to the case of "if the offender knowingly causes or attempts to cause death or serious bodily injury."

    Doesn't the USA have laws against this already? I mean, if I murder someone with a frozen banana, it's still murder, you don't need a law saying "you are not allowed to murder someone with a frozen banana". Surely knowingly causing or attempting to cause death or serious bodily injury is currently against the law anyway, however you go about doing it? Why is this law necessary?

    1. Re:Don't understand... by Zathrus · · Score: 5, Insightful

      Yes, of course we have laws on the books already that provide for a life sentence in the case of attempted murder... and presumably at a federal level where this is in effect (state level is totally different).

      And for quite some time I wondered the same thing a lot of people did on this thread -- why did we need a specific law? Why doesn't current case law apply?

      Well, the answer probably is that, in theory, we don't need a law. Current case law does apply. The problem is that too many lawyers push the law to the limits in defense and start weasling around the letter of the law rather than the spirit. How would you like for a legitimate hacker to get off scott free because a lawyer successfully argued that his client didn't attempt to kill an entire town by sabotaging the water control systems, it was the guy who was working there that day and doing his normal job. Irrelevant that the normal control procedures had been subverted.

      Silly? Sure. But that's the way the legal system runs at times. This law prevents that kind of crap.

      Now, the wiretapping without a warrant is a whole different issue. But people are far too willing to give up their freedom for a false sense of security nowadays. It's very, very sad.

  7. Except by wiredog · · Score: 5, Insightful

    That murder is usually a State, not Federal, matter. In the case of a hacker, who may be operating across State lines, it is proper for the Federal Government to get involved.

    1. Re:Except by Daniel+Dvorkin · · Score: 5, Insightful

      The obvious analogy: after OKC (which resulted in a Federal trial, as you may recall) the government didn't rush to make new laws about rental trucks.

      --
      The correlation between ignorance of statistics and using "correlation is not causation" as an argument is close to 1.
    2. Re:Except by Lemmy+Caution · · Score: 3, Insightful

      And this has happened *how many times?* In the real world, I mean - not in a Bruce Willis movie.

  8. appropriate "department" by Wansu · · Score: 3, Insightful

    I like the "from the but-still-okay-to-rip-off-the-stock-market dept". That's fitting, given the posturing of congress to get tough on corporate crime.They paid lip service to it and raised some of the penalties but they've done nothing to increase the vigor with which these cases are prosecuted. To date, few of these cases have been prosecuted. When they do prosecute a company for cooking it's books, they'll be defended by the best lawyers money can buy. When a hacker is tried, he'll have the standard, substandard legal defense. The result is few corporate criminals will ever go to jail but lots of hackers will be railroaded.

    --
    Wansu, th' chinese sailor
  9. What do these names have in common? by bons · · Score: 3, Insightful
    Loyd Blankenship, Phil Zimmermann, Kevin Mitnick, Jon Johansen, Dmitry Sklyarov

    Pray you never find out the hard way.

  10. Re:Its not as harsh as it sounds. by Bartmoss · · Score: 5, Insightful

    Then why is a new law needed?

  11. Re:Typical by sqlrob · · Score: 5, Insightful

    Get what repealed?

    IT'S A BILL

    This still needs to go to the Senate and the Pres. Lobby them.

  12. level of sophistication by plumby · · Score: 3, Insightful
    Require the U.S. Sentencing Commission to revise sentencing guidelines for computer crimes. The commission would consider whether the offense involved a government computer, the "level of sophistication" shown and whether the person acted maliciously.

    I'm not sure I see how the level of sophistication should affect the sentencing. Does this happen in other crimes? ("He shot her a bit amateurishly, so we'll only give him 5 years"). And why does it make a difference whether its a government computer or not?

  13. Re:Its not as harsh as it sounds. by BCoates · · Score: 3, Insightful

    This does make it a federal offense, while "ordinary" murder is a violation of state law in most cases, so the law's not a total noop.

    --
    Benjamin Coates

  14. Context people, context... by Chocky2 · · Score: 3, Insightful

    SEC. 106. STRENGTHENING PENALTIES.
    Section 1030(c) of title 18, United States Code, is amended--
    `(B) if the offender knowingly or recklessly causes or attempts to cause death from conduct in violation of subsection (a)(5)(A)(i), a fine under this title or imprisonment for any term of years or for life, or both.'.


    If you try to kill somebody you might get a life term, no different to recklessly or knowingly causing death any other way. So you try to crash air traffic control computers you get thrown in jail for life - sorry if I'm not too sympathetic.

  15. Re:Has hacking ever killed anyone? by Zarf · · Score: 3, Insightful

    Once again America doesn't need MORE laws just to apply the existing ones judiciously.

    In all seriousness, could some one explain to me why we need to crack down on "Cyber Terrorists"? I thought it was the regular, box-cutter-weilding, gun-toting, bomb-making kind that were giving us problems lately. Shouldn't the government be trying to stream line its paperwork processes and attempting to fix internal security problems?

    Shouldn't we be working harder to fix existing government agencies that don't work as intended instead of making new ones?

    --
    [signature]
  16. Re:Its not as harsh as it sounds. by orthogonal · · Score: 3, Insightful

    It's "needed" so that Joe Congressman can claim he's "doing something" about a "problem" that Joe Constituent has heard Katie Couric say is "pretty bad".

    Not unlike hate crime laws, which legislate additional penalties for already criminal acts based on the victim's membership in some group and the criminal's thoughts.

    Assaulting me: 1 year.
    Assaulting me because I'm Zoroastrian: 5 years.
    Assaulting me by hitting me over the head with a computer: 10 years.

    Passing feel-good laws that make a patchwork of justice: priceless!

  17. Since I doubt you actually read the legislation... by Scratch-O-Matic · · Score: 5, Insightful

    here is the focal point of this discussion:

    `(B) if the offender knowingly or recklessly causes or attempts to cause death from conduct in violation of subsection (a)(5)(A)(i), a fine under this title or imprisonment for any term of years or for life, or both.'. (my bold)

    You may think of 'hacking' as an act in and of itself. This bill deals with various crimes that a 'hacker' might perform, using hacking as a tool or a means.

    For additional perspective, refer to these acts mentioned in the bill:

    (F) whether the offense involved a computer used by the government in furtherance of national defense, national security, or the administration of justice;
    (G) whether the violation was intended to or had the effect of significantly interfering with or disrupting a critical infrastructure; and
    (H) whether the violation was intended to or had the effect of creating a threat to public health or safety, or injury to any person;...


    Examples of acts that are contemplated here: disabling a national defense warning system; flooding a city by opening the spillways on a dam; disabling the air traffic control system in a busy metropolitan area.

    And for those who will quickly argue that these systems should not be connected to the Internet, note that the bill does not limit these acts of 'hacking' to access from the Internet. Hacking can also include access from inside a company or facility, dialup access to a piece of critical equipment, or even some acts of 'social engineering.'

    These are not new criminalizations of innocent acts. They are simply expansions of existing principles to include new technology and means of hurting people and property.

    you could get LIFE in PRISON for using a computer.

    That's like complaining that you could get LIFE in PRISON for using a screw driver. If you use that screw driver to tighten screws, you're fine. If you stick it in someone's eye and wiggle it around, you may be facing LIFE in PRISON for the MURDER that you committed with your SCREW DRIVER.

    --


    Evil is the money of root.
  18. Slight correction by LittleGuy · · Score: 3, Insightful

    Nicely put. But I'll add:

    Peace: A situation where there hasn't been any overt terrorist activities, and the government decides it cannot afford to sustain the high-level of alert because of budget deficits and the coming elections.

    --
    Mod Karma -1: I sed bad wurds. If I cep my mouf shut, I wud be at riyses.
  19. Re:Has hacking ever killed anyone? by Saltine+Cracker · · Score: 4, Insightful

    If a hack causes death the hacker can never be the only one to blame IMHO.

    Maybe so, but read some of L0pht's papers about the widely insecure remote access to power grids, city works (traffic controls, etc.), and other such things which are probably very hackable and not connected to the internet.

    I think the premiss of this law is probably correct. If you commit a robbery and someone gets killed during the commision of that crime the law regarding that crime says you may be held accountable for that death. I don't think this law is much different.

    If I hack something like a city's traffic control system and start playing around, only to leave the busiest intersections lights green in both directions, then unbeknownst to me some Soccer mom and her 5 kids get killed by a 18 wheeler driving through said intersection, I'm the one liable for their deaths. The people responsible for maintaining the traffic system may also be liable under either criminal or civil matter for neglegence or something like that, but they can't be held responsible for my actions. Just like, going back to the robbery, if that store owner pulls his gun and shoots and me but hits a customer, I'm still on the hook for the customer's death.

    I am not a lawyer, nor a gynocologist, but I play both in my back shed.

  20. Re:Its not as harsh as it sounds. by thales · · Score: 3, Insightful
    "Then why is a new law needed?"

    Because it's an election year, and Joe Congressman needs the law to show the voters he's tough on terrorist hackers.

    --
    Quemadmodum gladius neminem occidit, occidentis telum est
  21. Read the bill before you post people by jarek · · Score: 3, Insightful

    I had the same "knee jerk" reaction but...

    "(B) if the offender knowingly or recklessly causes or attempts to cause death from conduct in violation of subsection (a)(5)(A)(i), a fine under this title or imprisonment for any term of years or for life, or both.'."

    This just acknowledges that computers are integral and vital parts of our lifes and can be used in malicious ways just as knifes or guns. Welcome to the global village and the on-line world people. /jarek

  22. Re:Since I doubt you actually read the legislation by Oniros · · Score: 3, Insightful


    (G) whether the violation was intended to or had the effect of significantly interfering with or disrupting a critical infrastructure; and
    (H) whether the violation was intended to or had the effect of creating a threat to public health or safety, or injury to any person;...


    So if Joe sends an email to Jane and for some reason that email trigger some weird bugs that somehow cause some shitty system to go down and that system going down cause G or H then you can get life imprisonment for sending an email?

    Ok that exemple is a bit extreme, but still, given how everthing is/can be interconnected through computers who knows how much unintended effects can result from some interraction with buggy software.

  23. Re:Its not as harsh as it sounds. by Yohahn · · Score: 4, Insightful

    Didn't the leaders of Enron and Worldcom ruin lifes?
    If there is a life sentence for computer hacking why isn't there one for mallicious cooking of the books?

    (answer: The politicians would be so vulnerable that they couldn't pass it)

  24. It will be nice when nerds learn to read... by night_flyer · · Score: 3, Insightful

    (5) if the offender knowingly causes or attempts to cause death or serious bodily injury in a violation of subsection (a)(5)(A)(i), a fine under this title, imprisonment for any term of years or for life, or both.

    they arent talking about a DoS attack & they arent talking about defacing someones website. they are talking about air traffic contol systems, stoplight controls on busy intersections, railway switching programs, nuclear powerplant software and other things that have the potential to cause graet harm...

    they may have been watching to many movies, but I see where they are coming from....

    --


    Thanks to file sharing, I purchase more CDs
    Thanks to the RIAA, I buy them used...
  25. Redundant and Unconstitutional by dh003i · · Score: 5, Insightful

    First, survelliance without a court order is unconstitutional. This portion of the bill will surely be stricken down by the Supreme Court.

    Second, the rest of the law is redundant and unnecessary. Crimes committed via the internet should receive the same punishment as those in the real-world, where the situation is analagous. For example, breaking and entering can be treated the same. Simply hacking into a persons computer is breaking and entering, even if it causes no damage; similarly, breaking/entering into a person's home, even if you do no damage or steal nothing (and don't damage the locks), is a crime.

    When a hacker purposefully hacks into, say the USAF HQ, and steals top-secret documents on airplane design, then divulges them to China that's a crime just as it is in real life (treason). Similarly, it should be punishable just as it is in real life (by life in prison or death).

    Another example, if a mob boss orders an underling to kill someone via an on-line e-mail, that's murder and conspiracy to commit murder. It should be punished just as it is in real life: by life in prison or death.

    The fact that a crime took place over the media of the internet does not greaten or lessen its severity or lack-thereof. It simply creates a jurisdictional issue. The issue can be solved like such: if a crime is committed on the internet and its affect occurs in that state, then its the state's jurisdiction; if it occurs in one state and affects another (i.e., the mob boss in NY orders his hitman to kill someone in CA), then it should be under federal jurisdiction.

    1. Re:Redundant and Unconstitutional by dh003i · · Score: 3, Insightful

      Perhaps legal clarifications about what is and is not, for example, "breaking and entering" are necessary; obviously, removing the end of a url or a port scan doesn't constitute that online.

      To determine how I know these are obviously not breaking and entering, you have to go back to what makes breaking an entering wrong: because it violates a person's right to propertty and privacy.

      In the case of deleting the last part of a url, that's not breaking/entering, because in offering a website to the public w/o access restrictions, its like having a garage sale. You can't have a garage sale and then sue someone for tresspassing when they come to inquire whats for sale. In other words, simply putting a site on the net without any restrictions implies that you want people to view it.

  26. Re:Its not as harsh as it sounds. by Jeppe+Salvesen · · Score: 3, Insightful

    As a matter of fact, they probably ruined more lives than the jets in WTC did. How many people lost their savings and pensions on Enron, Worldcom and Arthur Andersen? While it is extremely sad to lose someone you love, the effect of losing all your money is much more tangible. Yep. I'm arguing that from an impact-on-society point of view, fraud is worse than murder. Am I losing it?

    --

    Stop the brainwash

  27. The Hacker Manifesto by chuckw · · Score: 5, Insightful

    Somehow this seemed appropriate:

    The Conscience of a Hacker
    by Mentor
    Written on January 8, 1986

    Another one got caught today, it's all over the papers. "Teenager Arrested in Computer Crime Scandal", "Hacker Arrested after Bank Tampering"...

    Damn kids. They're all alike.

    But did you, in your three-piece psychology and 1950's technobrain, ever take a look behind the eyes of the hacker? Did you ever wonder what made him tick, what forces shaped him,what may have molded him?

    I am a hacker, enter my world...

    Mine is a world that begins with school. I'm smarter than most of the other kids, this crap they teach us bores me...

    Damn underachiever. They're all alike.

    I'm in junior high or high school. I've listened to teachers explain for the fifteenth time how to reduce a fraction. I understand it. "No, Ms. Smith, I didn't show my work. I did it in my head."

    Damn kid. Probably copied it. They're all alike.

    I made a discovery today. I found a computer.

    Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up.

    Not because it doesn't like me...
    Or feels threatened by me...
    Or thinks I'm a smart ass...
    Or doesn't like teaching and shouldn't be here...

    Damn kid. All he does is play games. They're all alike.

    And then it happened. A door opened to a world rushing through my phone line like heroin through an addict's veins, an electronic pulse is sent out, a refuge from the day-to-day incompetencies is sought... a board is found.

    "This is it... this is where I belong." I know everyone here... even if I've never met them, never talked to them, may never hear from them again... I know you all.

    Damn kid. Tying up the phone line again. They're all alike.

    You bet your ass we're all alike... we've been spoon-fed baby food at school when we hungered for steak... the bits of meat that you did let slip through were pre-chewed and tasteless. We've been dominated by sadists, or ignored by the apathetic. The few that had something to teach found us willing pupils, but those few are like drops of water in the desert.

    This is our world now... the world of the electron and the switch, the beauty of the baud. We make use of a service already existing without paying for what could be dirt-cheap if it wasn't run by profiteering gluttons, and you call us criminals.
    We explore... and you call us criminals. We seek after knowledge... and you call us criminals.

    We exist without skin color, without nationality, without religious bias... and you call us criminals. You build atomic bombs, you wage wars, you murder, cheat, and lie to us and try to make us believe it's for our own good, yet we're the criminals.

    Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for.

    I am a hacker, and this is my manifesto. You may stop this individual, but you can't stop us all...

    After all, we're all alike.

    Copyright 1986 by Loyd Blankenship (mentor@blankenship.com). All rights reserved.

    --
    *Condense fact from the vapor of nuance*
  28. What happened to community service? by LuYu · · Score: 3, Insightful

    It is interesting that Congress has approved a penalty usually reserved for murder for a crime that essentially amounts to expensive vandalism. If you deface a wall, you get a few hours of community service. If you deface a website, you get life. I would say that it is difficult to consider a society that can put people in prison for life for a crime that is more or less a misdemeanor a free society.

    What about those Enron and Worldcom executives? When do they get life in prison or an even stiffer sentence? The crime they committed was premeditated stealing. That at least would be considered a felony in most cultures.

    Moral:
    If you are greedy and like to steal, Uncle Sam wants you to run a major corporation and write a book. If you are a teenager and have nothing better to do than deface a little property, better do it with spray paint, because if you use your computer, you can grow old in prison.

    Nice message we are sending to young people these days. I suppose Gecko was right: "Greed... is good!"

    --
    All data is speech. All speech is Free.