Re: Honeypot legal ramifications....

[Lance Spitzner <lance () honeynet org>]

> Regarding the privacy of hackers...IMO they waive their rights if they 
> are
> confronted with a banner stating ...authorized users only, all events 
> are
> monitored... This seems to be fair warning to anyone, although I am 
> unaware of
> any legal precedents.

Legal issues can be complex when dealing with honeypots.  Not only is 
there no precedence, but the rules and regulations differ for every 
country.  To make the situation even more confusing, it often depends 
on what type of honeypots you have deployed, where they are deployed, 
how they are capturing information and what types, and what that data 
will be used for.  So in many ways there is no single answer as there 
are simply too many variables involved.

One recommendation would be to get a better understanding of those 
issues from a legal authority.  Recently Richard Salgado of the US 
Department of Justice (CCIPS) wrote a new chapter dedicated to the 
legal issues of honeynets.  While the book (KYE 2nd edition) will not 
be announced for another week or two, you can find his chp online now 
at http://www.honeynet.orb/book/Chp8.pdf.

lance