Re: Honeypots - All dried up by Super-DMCA

["David L. Wasley" <david.wasley () UCOP EDU>]

I'm not a lawyer :-) but the way I read Tim Liston's article, I think it's not clear that the law prohibits 
distribution or use of LaBrea (although it might provoke legal action and that is really the issue for Tim).

What Tim quotes says honeypots would be illegal "without the express consent or express authorization of the 
communication service provider".  If the campus (the communications service provider) specifically approved the use of 
a honeypot on its network, then it should not be a problem.

As for "to conceal or to assist another to conceal from any communication service provider or from any lawful authority 
the existence or place of origin or destination of any communication" - simply make sure the logs are available to the 
campus network NOC.

What am I missing?

        David
-----
At 10:53 PM -0400 on 5/1/03, Pete Hoffswell wrote:

> honeypots are very very cool.  I would be weary implementing them at this time, however.
>
> Unfortunately, because of the DMCA laws, they may be illegal.
>
> Reference -
>
> Tom Liston, maker of Labrea, has stopped distributing his great software due to Illinois Super-DMCA laws:
> http://www.hackbusters.net/
>
>
> Slashdot, etc, reports that new Michigan laws has made the development of honeyd illegal:
> http://slashdot.org/articles/03/04/15/1454218.shtml?tid=153
>
> If anyone gets council clearing them to use labrea or honeyd, I would be very interested.
>
> - Pete
>
>
>
> > > > morrow.long () YALE EDU 05/01/03 21:25 PM >>>
> Lance Spitzner article on how 'honeypots' can be effective tools
> in the information security kit for protecting production nets
> (as opposed to just research experiments for collecting data):
>
>        http://www.securityfocus.com/infocus/1690
>
> Morrow
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
> http://www.educause.edu/memdir/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.