Security Incidents mailing list archives
Re: Cracked; rootkit - entrapment question?
From: ryan () SECURITYFOCUS COM (Ryan Russell)
Date: Thu, 2 Mar 2000 14:12:25 -0800
On Thu, 2 Mar 2000, 1Lt Rob Lee wrote:
You probably should get the FBI on it before you do any steps to monitor the SUBJECT. There is a very thin line on what you can monitor. The system administrators exception on security monitoring is just to ensure they can protect their systems from hacking. As soon as you knowingly monitor a specific individual it is now a wiretap and you could be brought up on charges for doing so. Sorry, this is true even if on your own network.
Are you certain? Are you aware of any court case precent that has gone that way? I've prosecuted at least two employees at a previous job based on my monitoring their activities. My security policy specifically reserved the right to do data, voice, video, and other monitoring on company owned systems. A judge granted me a restraining order, and later an injunction against a former employee, based on a written deposition from me that included statements that said I monitored the employee. If what you say were true, doesn't that mean that Kevin Mitnick could have Shimomura thrown in jail? ;) Perhaps you personally are held to a higher standard, being a government employee? Ryan
Current thread:
- Cracked; rootkit - entrapment question? Drew Smith (Mar 01)
- Re: Cracked; rootkit - entrapment question? Robert Graham (Mar 02)
- Re: Cracked; rootkit - entrapment question? Ron Gula (Mar 02)
- Re: Cracked; rootkit - entrapment question? Jason Spence (Mar 02)
- Re: Cracked; rootkit - entrapment question? Paul Flores (Mar 02)
- getting to the point with DDoS thomas lakofski (Mar 02)
- Re: getting to the point with DDoS Ryan Russell (Mar 05)
- Re: getting to the point with DDoS thomas lakofski (Mar 07)
- Re: Cracked; rootkit - entrapment question? 1Lt Rob Lee (Mar 02)
- E-mail attatchment xum mux (Mar 02)
- Re: Cracked; rootkit - entrapment question? Ryan Russell (Mar 02)
- Re: Cracked; rootkit - entrapment question? David Brumley (Mar 02)
- Re: Cracked; rootkit - entrapment question? Lance Spitzner (Mar 02)
- Re: Cracked; rootkit - entrapment question? Paul L Schmehl (Mar 02)
- Re: Cracked; rootkit - entrapment question? Mike Fratto (Mar 02)
- Re: Cracked; rootkit - entrapment question? Simple Nomad (Mar 02)
- Re: Cracked; rootkit - entrapment question? Dave Dittrich (Mar 02)
- Re: Cracked; rootkit - entrapment question? Jon Lewis (Mar 02)
- <Possible follow-ups>
- Re: Cracked; rootkit - entrapment question? rain forest puppy (Mar 02)
- Re: Cracked; rootkit - entrapment question? Jordan Ritter (Mar 03)
- Re: Cracked; rootkit - entrapment question? CL: Nelson, Jeff (Mar 02)