US Preparing to Do Digital Battle With Hackers – Will This Violate the Computer Fraud and Abuse Act?

The US could launch pre-emptive cyber strikes against countries it suspects of threatening its interests with a digital attack, under a new set of secret guidelines to safeguard the nation’s computer systems. The rules – the country’s first on how it defends or retaliates against digital attacks – are expected to be approved in coming weeks, …

The Law and the Hacker – Podcast on the Computer Fraud and Abuse Act

Not too long ago I had a nice visit with Rafal Los (@Wh1t3Rabbit) who is otherwise known as the Chief Security Evangelist for HP and blogs at Following the Wh1t3Rabbit – Practical Enterprise Security. Raf is one dude you really need to follow if you’re interested in #infosec.  Anyway, our discussion was centered around the Computer Fraud and Abuse …

Responsiveness and Responsibility Are Considered in Assessing Data Breach Fines

About a year and a half ago I wrote a post titled Data Breach – Who’s Gonna Get it? where I made the point that, much like with Ford’s “bean counting” with the Pinto deaths back in the ’70s, companies that were aware of the risk of data breach but did not act responsibly were …

Can You Be Outraged By The Prosecution of Aaron Swartz Under CFAA But Not Sandra Teague?

With Aaron Swartz’s suicide came the lifting of the floodgates for public criticism of the Computer Fraud and Abuse Act. The amount of venom directed at the law is second only to that directed at the federal prosecutors who were prosecuting Swartz. While I understand the emotional issues that are driving much of the criticism, as I …

Break Into A Home, Violate the Computer Fraud and Abuse Act?

How’s that for a crazy sounding question? Could breaking into a home violate the Computer Fraud and Abuse Act? I know you’re wondering just how I come up with these crazy things, right? From the news, of course! I read a really interesting article by David Goldman on CNNMoney entitled Your Jetsons Home is Almost …

Mind Control, Human Hacking & the Computer Fraud and Abuse Act?

Here is a thought to ponder: Would it violate the Computer Fraud and Abuse Act to hack a person? Based on the broad definition of computer that is used in the Computer Fraud and Abuse Act I believe that the answer could be “yes.” Here is why: The CFAA applies to anything with a microchip …

Data Risk Help For Small Businesses That Need It Most

Small businesses, more than any other identifiable group, need someone to help guide them through assessing their data risks, securing their companies’ data, taking the necessary measures to protect against those risks, and coordinating a proper response in the event of a breach. This is the message that can be taken from a blog by …

Guarding Against Idiocy (2 of 2)

(Part 2 of 2) A few days ago I posted Guarding Against the Inside Job which was the first half of this thought — today’s post is part 2 — the fun one: Idiocy! Many of you already know that this name resembles that of one of my favorite movies. Need a hint? Idiocy Yep, Idiocy …

Hacking a car? Yes, really…and you thought I was kidding!

A few weeks ago I blogged about whether an unauthorized access of a car that has a computer and is connected to the Internet would violate the Computer Fraud and Abuse Act. Did you read it? Or, did you think it sounded too ridiculous? Here it is if you want to take a look: Can …

Computer Fraud and Abuse Act – great tool for taming an employee that’s gone off the deep end!

Today I read a case that has a fascinatingly spiteful set of facts and provides a great example of how an employer can use the Computer Fraud in Abuse Act to get an injunction and put a stop to the mischief caused by an employee that is gone off the deep end. I have read …