Slashdot Mirror


Hacking Victim Can't Sue Foreign Government For Hacking Him On US Soil, Says Court (vice.com)

According to Motherboard, a court of appeals in Washington D.C. ruled that an American citizen can't sue the Ethiopian government for hacking into his computer and monitoring him with spyware. "The decision on Tuesday is a blow to anti-surveillance and digital rights activists who were hoping to establish an important precedent in a widely documented case of illegitimate government-sponsored hacking." From the report: In late 2012, the Ethiopian government allegedly hacked the victim, an Ethiopian-born man who goes by the pseudonym Kidane for fear for government reprisals. Ethiopian government spies from the Information Network Security Agency (INSA) allegedly used software known as FinSpy to break into Kidane's computer, and secretly record his Skype conversations and steal his emails. FinSpy was made by the infamous FinFisher, a company that has sold malware to several governments around the world, according to researchers at Citizen Lab, a digital watchdog group at the University of Toronto's Munk School of Global Affairs, who studied the malware that infected Kidane's computer. The U.S. Court of Appeals for the District of Columbia Circuit ruled that Kidane didn't have jurisdiction to sue the Ethiopian government in the United States. Kidane and his lawyers invoked an exception to the Foreign Sovereign Immunities Act (FSIA), which says foreign governments can be sued in the U.S. as long as the entire tort on which the lawsuit is based occurred on American soil. According to the court, however, the hacking in this case didn't occur entirely in the U.S. "Ethiopia's placement of the FinSpy virus on Kidane's computer, although completed in the United States when Kidane opened the infected email attachment, began outside the United States," the decision read. "[It] gives foreign governments carte blanche to do whatever they want to Americans in America so long as they do it by remote control," Nate Cardozo, a staff attorney at the Electronic Frontier Foundation, a digital rights group who represented Kidane in this first-of-its-kind lawsuit, told Motherboard.

6 of 102 comments (clear)

  1. What's good for the goose is good for the gander by Anonymous Coward · · Score: 2, Insightful

    The CIA has been doing this for ages.

  2. Obviously this requires new legislation by Baron_Yam · · Score: 4, Insightful

    Look at what would happen if you shot an American on American soil from Canada or Mexico.

    Now get your lawmakers to apply that same logic to digital aggression and draft some new legislation for what happens if you commit a computer offence against someone across legal jurisdictions.

    1. Re:Obviously this requires new legislation by Anonymous Coward · · Score: 2, Insightful

      Nothing is stopping them from suing in Ethiopia. Or, in your case, in Canada or Mexico.
      Plus, this is about a citizen suing a foreign government, not another individual. Totally different laws.

    2. Re:Obviously this requires new legislation by sit1963nz · · Score: 4, Insightful

      Or, as has actually been the case, an American shot and killed an unarmed Mexican teenager on Mexican soil and the US government has refused to extradite him for criminal prosecution in Mexico.

      US airforce pilot breaking the rules/laws in Italy while hot dogging hit and broke the cables for a gondola killing some people, the US very quickly returned the guilty parties to the USA and refused to extradite them to face criminal charges.

      Yet the USA is demanding Kim Dotcom be extradited to the USA when he (at the time) broke no New Zealand laws.

  3. Re:What's good for the goose is good for the gande by Luthair · · Score: 3, Insightful

    The gander I'm wondering about are people who have hacked US government systems while not on US soil. Seems like the US should not be able to extradite them either....

  4. Retarded Summary by Notabadguy · · Score: 4, Insightful

    "Hacking Victim Can't Sue Foreign Government For Hacking Him On US Soil, Says Court "

    It SHOULD say "US Court Rules that it lacks jurisdiction to hear a lawsuit against a sovereign government by a private citizen."

    It didn't say that the hacking victim can't sue the Ethiopian government, just that he can't sue the Ethiopian government in U.S. Court. Sounds like the U.N. or the African Council of Nations, or another international body - someone that has any purview over the Ethiopian government would be the place to go.

    Otherwise, we'd have every-day, all-day long lawsuits of individuals against governments around the world - further clogging up our courts - with people expecting the U.S. to uphold their private agendas against other countries.