Re: NINCOMPOOPERY OF MICROSOFT

[madsaxon <madsaxon () direcway com>]

At 01:32 PM 10/1/03 -0700, Gregory A. Gilliss wrote:

> Reality - the Federal Bureau of Investigation (FBI) likely will not even
> make the effort to prosecute computer crimes that cannot be said to have
> caused significant (like US$500,000) amounts of damage. It's just not
> worth the time and resources for them to assign people to port scanning.

Minor point: the reason the FBI is unlikely to investigate crimes
with smaller dollar amounts is because the US Attorney's Office
will not prosecute them.  Since the FBI is a federal agency, it
investigates federal crimes, and those crimes are prosecuted
by the US Attorney's Office. The FBI can only pursue cases with
the potential for successful prosecution, ergo the monetary
damage limitation (although it's more like $5,000 than $500,000).
Also remember that the DOJ generally only prosecutes felonies,
and these often have lower monetary boundaries.  That's why
it's very important if you want to bring in law enforcement
that you make a credible attempt at quantifying your losses first.

m5x

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html