Security Incidents mailing list archives

Re: Cracked; rootkit - entrapment question?


From: root () RGFSPARC CR USGS GOV (Robert G. Ferrell)
Date: Wed, 15 Mar 2000 12:24:38 -0600


I keep reading various news articles that indicate that federal law
currently states that the FBI is not allowed to investigate if they believe
that the damage is under 5,000 dollars per computer

It really isn't a matter of not being "allowed" to investigate; it's more that
they have great difficulty getting the US Attorney's Office to prosecute cases
where significant monetary damage isn't demonstrated.  You see, once a year they
have to justify their budget requests to Congress.  Congress likes to see hard
figures.  They don't appropriate money for investigating "loss of trust" in a
company due to an intrusion.

I've seen signs that this attitude may be changing, but it's a very slooooow
process.

RGF

Robert G. Ferrell, CISSP
Information Security Officer
National Business Center, US DoI
Robert_G_Ferrell () nbc gov
------------------------------------------------------------
Nothing I have ever said should be construed as even vaguely
representing an official statement by the NBC or DoI.
------------------------------------------------------------


Current thread: