Legal issues in computer security research
This Thursday, I gave a talk at AtlSecCon 2014. The weather threw a wrench in the organizers' plans, but they managed to pull off a solid conference. Unfortunately, the talks weren’t recorded this year. The slides are posted on SpeakerDeck, and are embedded below the fold.
I also reprised this talk at NSLUG, and recorded audio, now posted on SoundCloud, and also embedded below the fold.
Finally: late last year, I wrote 3 posts exploring Canada’s computer crime laws (1, 2, 3) which were initial versions of work that eventually became two papers I submitted this semester for a directed studies course. If you were interested in those posts, I’ve embedded the final PDFs below. The talk is a condensed version of that work.
Posted: Apr 19, 2014
Tags: atlseccon canada cfaa crime hacking infosec nslug talks techpolicy
Exploring Canada's computer crime laws: Part 3
Since the exceptions in copyright law for encryption and security research don’t apply if you’re doing anything criminal, I next looked at the Criminal Code [PDF].
Posted: Nov 6, 2013
Tags: canada cfaa crime hacking infosec techpolicy
Exploring Canada's computer crime laws: Part 2
Since the exceptions in copyright law for encryption and security research don’t apply if you’re doing anything criminal, I next looked at the Criminal Code [PDF].
Posted: Nov 5, 2013
Tags: canada cfaa crime hacking infosec techpolicy
Exploring Canada's computer crime laws: Part 1
As someone with an interest in technology, security, and the legal issues surrounding them, I often watch relevant legal cases with interest. Typically, those cases come from the United States. The CFAA has been in the news frequently of late, and not always in a good light. I was pleased to see Zoe Lofgren’s proposed changes, which try to make the law less draconian.
This is typical for Canada – we often see more about American news on topics like this than Canadian. I realized that I really didn’t know what the law in Canada said about so-called computer crimes, although I’ve often wondered. A while back, I took an afternoon to do some reading. I was not happy when that afternoon ended. This is part one of a three-part series on what I found.
Posted: Nov 4, 2013
Tags: canada cfaa crime hacking infosec techpolicy