The Big Chill: Legal Landmines that Stifle Security Research and How to Disarm Them
summary
Outlines which statutes actually stop researchers: vague CFAA authorization language that can turn routine testing into a felony, the DMCA’s anti‑circumvention traps and $200–$2,500 statutory damages per violation, and ECPA’s wiretap/pen‑register/SCA rules that can produce $100/day or $10k per‑person awards or prison. Cites cases (Aaron Swartz, Weev, Google Wi‑Fi) and real tools (network sniffing, brute forcing, Tor exit monitoring) and sketches fixes: clearer definitions, consent exceptions, and targeted research safe harbors.
AI-written summary · about
chapters (19)
- 0:00Introductions
- 1:24The Plan
- 3:35The CFAA
- 5:27Penalties
- 7:43Civil Statute
- 10:22DMCA
- 12:40DMCA Penalties
- 15:12Electronic Communications Privacy Act
- 16:02Wiretap Act
- 18:07Google v Joffe
- 20:10Key Exceptions
- 21:05Google vs Gmail
- 22:32Pen Register Statute
- 24:20Stored Communications Act
- 26:02Lets Play Again
- 26:47Brute Force
- 31:20Who Hack Back
- 38:21Search Warrant Application
- 44:00Googles Policy
related talks
16mFixing the Internet's Auto-Immune Problem
48mThe Law and Economics of Bug Bounties
25mEverything Old Is New Again: Legal Restrictions on...
27mHacker Rights
44mWhen the Cops Come A-Knocking: Handling Technical Assistance Demands from Law Enforcement
37mVibe Check: IDK About This…. Why Students May Shy Away From Cyber in a Surveillance State
51mBug Bounty: Keeping Hacks Ethical in 2022
01h 00mMaster Class ICT: A Cyber Case Law Review 2021