Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
United States Privacy Your Rights Online

U.S. Considering Ratifying Cybercrime Treaty 535

waytoomuchcoffee writes "SecurityFocus has a new article on the Council of Europe's "Convention on Cybercrime". The U.S. has already signed the treaty, but it has not yet been ratified by the Senate (although President Bush has written a letter urging the treaty's passage). This treaty, among other items, would require the U.S. to "cooperate with foreign authorities" in conducting surveillance on American citizens who have committed no crime under U.S. law, but may have broken another country's law (selling historic Nazi posters on Ebay? Germany might have you wiretapped), prohibiting the "production, sale or distribution of hacking tools", whatever that means (would Nmap be illegal?) and require the U.S. to pass laws to "force users to provide their encryption keys" and the plain text of their encrypted files. Canada is a signatory as well."
This discussion has been archived. No new comments can be posted.

U.S. Considering Ratifying Cybercrime Treaty

Comments Filter:
  • by Jediman1138 ( 680354 ) on Sunday April 25, 2004 @07:02PM (#8968120) Homepage Journal
    Your Dwindiling Rights Online.

    • by persaud ( 304710 ) on Sunday April 25, 2004 @07:23PM (#8968240)
      Your Dwindling Protections Online.

      Your Rights haven't changed.
      • by ConceptJunkie ( 24823 ) on Sunday April 25, 2004 @07:33PM (#8968290) Homepage Journal
        I agree, but tell that to the government that's imprisoned you.

        Last time I checked, it seems the only rights you have in the U.S. are to privacy and to not be offended.

        Neither of these are guaranteed by the U.S. Constitution.

        The former is a good idea, but it's not there, enamations of penumbras to the contrary. The second has become a defacto 0th amendment of the new Bill of Rights, trumping all others, even though it is ludicrous on its face.

        Welcome to the future, where feelings are law and facts are irrelevant.

        • by Darby ( 84953 ) on Sunday April 25, 2004 @08:09PM (#8968509)
          Last time I checked, it seems the only rights you have in the U.S. are to privacy and to not be offended.

          Neither of these are guaranteed by the U.S. Constitution.


          Not true.
          All rights with a very few exceptions are guaranteed by the Constitution. The bill of rights was merely an add on addendum which a lot of people disagreed with the necessity for at the time. It is a sad eulogy to those who forced it through that they were right to do it.

          The constitution is mainly a granting of a few closely restricted powers granted to the government.

          All other rights are yours.

          You can define what it means to be a good American in one sentence from the Declaration of Independence:
          "We hold these truths to be self evident, that all men are created equal."

          The biggest problem we face is (IMHO) the lack of the courage among too many in this country to live up to this creed.

          None of this, of course, goes against your statement, "...tell that to the government that's imprisoned you."

          • by Shakrai ( 717556 ) on Sunday April 25, 2004 @08:57PM (#8968797) Journal

            Not true.
            All rights with a very few exceptions are guaranteed by the Constitution. The bill of rights was merely an add on addendum which a lot of people disagreed with the necessity for at the time. It is a sad eulogy to those who forced it through that they were right to do it.

            The constitution is mainly a granting of a few closely restricted powers granted to the government.

            That's right. Allow me to quote it from the source [findlaw.com] for those that will disagree with you:

            The powers not delegated to the United States by the Constitution, nor prohibited by it to the States, are reserved to the States respectively, or to the people.

            I think we can be thankful that the bill of rights was created though.

            • by ConceptJunkie ( 24823 ) on Sunday April 25, 2004 @10:42PM (#8969225) Homepage Journal
              Absolutely. It is elegant in its conciseness.

              Furthermore, as was stated above, it guarantees preexisting rights. It does not, as many people seem to think, grant those rights. Of course, thanks to an absurdly broad interpretation of the so-called Interstate Commerce clause, the original intent of the Founding Fathers has been subverted to fuel a monstrous centralized government that tries to control all aspects of our lives. (Of course, despite that I think the U.S. is still overall a good place to live, but if we aren't careful it won't stay that way).

              The U.S. Constitution is a beautiful document, written by men whose wisdom has seldom been matched in the history of the world, but is very quickly being eroded into irrelevancy by simple-minded, power-hungry politicians who would argue the meaning of the most simple and obvious words, or carelessly loophole our rights away in the interests of "protecting" us.

              We will all be perfectly safe the same day we all become criminals.

              • by westlake ( 615356 ) on Monday April 26, 2004 @02:09AM (#8970001)
                The Founders were never of one mind about what direction the future should take. Though we have become the commercial society that Hamilton imagined and not the agrarian utopia of Jefferson.

                There is no easy way to read a document two centuries old in a way that gives it meaning in a world profoundly changed.

                It is a mistake to look at the Commerce Clause alone and ignore the significance of the Fourteenth Amendment and the consequences of the Civil War. Since then the federal government, the central government, has always been free to become as big and powerful within constitutional limits as it needed and wanted to be,

              • by ratamacue ( 593855 ) on Monday April 26, 2004 @07:59AM (#8971144)
                We will all be perfectly safe the same day we all become criminals.

                We already are criminals, and we are hardly safer for it. The law is so overly complex and ambiguous that it is literally impossible NOT to be a criminal. Why has the law been designed this way? The answer is simple.

                There's no way to rule innocent men. ...When there aren't enough criminals, one makes them. One declares so many things to be a crime that it becomes impossible for men to live without breaking laws. Who wants a nation of law-abiding citizens? What's there in that for anyone? But just pass the kind of laws that can neither be observed nor enforced nor objectively interpreted - and you create a nation of law-breakers. ...Now that's the system, Mr. Rearden, that's the game, and once you understand it, you'll be much easier to deal with.

                -- Ayn Rand, Atlas Shrugged

            • The Ninth too... (Score:4, Informative)

              by red floyd ( 220712 ) on Monday April 26, 2004 @12:29AM (#8969724)
              The Ninth goes hand in hand with the Tenth:

              The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.

              In other words:

              The Ninth: Even if we didn't mention them, you have your rights.
              The Tenth: If we didn't talk about it, the Feds can't do it.
        • by LuYu ( 519260 ) on Sunday April 25, 2004 @08:20PM (#8968577) Homepage Journal

          Last time I checked, it seems the only rights you have in the U.S. are to privacy and to not be offended.

          Neither of these are guaranteed by the U.S. Constitution.

          U.S. Constitution:

          Amendment [IV] The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

          Check again.

          • by Oriumpor ( 446718 ) on Monday April 26, 2004 @02:21AM (#8970072) Homepage Journal
            the whole problem with this ammendment is in one word... and it's been taken to the supreme court based upon this one word, "Unreasonable." Whether the intent of the founding fathers to allow officers of the law to have the measure of judgement aptly termed "Probable cause." Whether one calls this eroding of privacy laws, or a tool of enforcement included for in the constitution is solely upon the purpose of that one word.

            For all it's merits, the bill of rights is sufficiently vague to allow for such qualifications. The tenth amendment has basically lost all meaning since potentially unconstitutional laws are passed en-masse at the federal level in the back corners of appropriations bills and the like, and are rarely challenged, but oft enacted.

            Also, the privacy of individuals is surely not guaranteed, considering one can purchase camera systems to view via thermal methods, bypassing such trivial bullwarks such as "walls" or "window shades." These devices can be used by citizens or law enforcement officials without need for warrant or even probable cause. The same goes for other "pro-active" law enforcement surveilance techniques (ala: echelon etc.)

        • by Famatra ( 669740 ) on Sunday April 25, 2004 @09:30PM (#8968941) Journal

          "Last time I checked, it seems the only rights you have in the U.S. are to privacy and to not be offended.
          Neither of these are guaranteed by the U.S. Constitution
          ."

          Then it is time to make it apart of the constitution. Enough with this penis-vagina anti gay people amendment no one needs, lets get a useful privacy amendment started.

          This is what I really didn't like from the summary:

          "...pass laws to force users to provide their encryption keys and the plain text of their encrypted files"

          That is insane. If someone has documents in which they would be embarrased to have shared (yes, I'm looking at your direction the pro-animal necrophilia crowd) then what business is it of government's that they have them.

          One interesting solution to having to hand over your pass keys is provided by the Phonebook Encryption Project [freenet.org.nz]. This program encrypts a file to have TWO keys which will decrypt into TWO different files. One key decrypts the file to reveal the beastiality porno, one key decrypts the file for pictures of barney the dinosaur :).

          Also those that say Freenet [sourceforge.net] wouldn't be necessary in North America, I thought the same for the Phonebook project just yesterday. Now I am very glad both Freenet and Phonebook are here.

          • by Anonymous Coward on Sunday April 25, 2004 @09:38PM (#8968973)
            Famatra said:
            One interesting solution to having to hand over your pass keys is provided by the Phonebook Encryption Project [freenet.org.nz]. This program encrypts a file to have TWO keys which will decrypt into TWO different files. One key decrypts the file to reveal the beastiality porno, one key decrypts the file for pictures of barney the dinosaur :).

            But I don't want to have to re-encrypt all of my lesbian snuff films! Oh well...stupid government. <sigh>

      • by u-235-sentinel ( 594077 ) on Sunday April 25, 2004 @10:54PM (#8969307) Homepage Journal
        Man. What ever happened to "We the People"?

        require the U.S. to pass laws to "force users to provide their encryption keys"

        I can't believe we're agreeing to this. What are they thinking?

        "The treaty is already being used as a pretext in some developing nation to pass some pretty draconian laws," he said. "I wouldn't be surprised to see it used in the U.S. that way."

        And we're thinking of ratifying this? We can already see what other countries are doing with it. How bad does it have to get before we force the Government to stop this madness. I'm serious. This is getting bad and has to stop. DeMoCrAt along with Patriot Act and now this? It's frustrating.
    • You'll get my encryption keys, when you pull them out of my cold dead hands.
      • Congratulations. Say hello to Bubba when they throw you in prison for contempt of court and obstruction of justice.

        That said, I agree 100%
      • Well, welcome to jail for the crime of not handing in your keys.

        2 years in Britain according to the RIP act, many other countries have similar provisions. IMO I have nothing against this provision if these were the subject of the standard search and seize court order procedures (which at least in the UK is not the case).

        In btw, if you have any objections to applying search and seize court procedures to crypto keys all you need to think about is the day when all accounts will become fully electronic. And 2
  • Aren't we suppose to cooperate with a foreign investigation under current international laws? I can't imagine the USA standing up to a request from the British investigative branch when they're on a lead.
    • by 0123456 ( 636235 ) on Sunday April 25, 2004 @07:05PM (#8968143)
      Why should they cooperate for something that's not a crime in America? Should they cooperate if, say, the Saudi police were investigating you for putting pictures of your girlfriend in a bikini on your web site, for example?

      The simple fact is this law would be nonsense, but a great way for the US government to harass Americans: you can't legally harass a US citizen? No problem, just ask your mates in Germany to ask you to do so.
      • by LostCluster ( 625375 ) * on Sunday April 25, 2004 @07:13PM (#8968190)
        Why should they cooperate for something that's not a crime in America? Should they cooperate if, say, the Saudi police were investigating you for putting pictures of your girlfriend in a bikini on your web site, for example?

        If you did so from within Saudi Arabia, sure. In order to break the laws of a another land, you have to be there at the time. Otherwise, their laws don't apply to you.
        • by I Be Hatin' ( 718758 ) on Sunday April 25, 2004 @07:43PM (#8968359) Journal
          In order to break the laws of a another land, you have to be there at the time.

          At what time? At the time the crime was committed? I think Dmitry Sklyarov [slashdot.org] would beg to differ with you on that point.

      • Death Penalty (Score:5, Interesting)

        by Mistlefoot ( 636417 ) on Sunday April 25, 2004 @07:20PM (#8968226)
        In Canada, where we don't have the death penalty, we have used this same logic. How can we send a person to the US to possibly suffer a punishment that we don't feel is just?

        The US government is being consistent on this. Their arguement tends to be - you committed (or possibly) a crime in a particular country and you should follow that countries rules.

        I am not sure I totally agree with this. And it is certainly open to abuse. But so are lots of recent US laws.

      • by linuxhansl ( 764171 ) on Sunday April 25, 2004 @10:02PM (#8969065)

        The simple fact is this law would be nonsense, but a great way for the US government to harass Americans: you can't legally harass a US citizen? No problem, just ask your mates in Germany to ask you to do so.

        That's right. These evil Germans. During the last years I lived in several different countries, and I can tell you this: The US is most unfree country of all the western countries I ever lived in.

        Strictes speed limits, strictes drug laws (no alcohol in public, prison for some weed), longest prison times, broadest rights for law-enforcement (though that is changing), no (my god) nudity, censored TV, worst education (creationism vs. darwinism anyone)... The list goes on and on.

        Ironically people here are so brainwashed that they call it "The Land of the Free". What a joke!

        So don't quote German law as harrasment (even in case this was just a joke), because they forbid trade of "historic" Nazi material. And BTW if caught trading illegal Nazi materials in Germany, there no fine or jail time, you are just forced to stop it.

        Maybe foreign law enforcement will bring some sanity to this f*cked up legal system.
  • by JessLeah ( 625838 ) * on Sunday April 25, 2004 @07:03PM (#8968129)
    So they're gonna ban carpenters' tools? You know what they say... when wood screws are outlawed, only criminals will have wood screws...
  • Like Australia (Score:3, Insightful)

    by sweet cunny muffin ( 771671 ) on Sunday April 25, 2004 @07:03PM (#8968131)
    I remember when the US was trying to get a guy out of Australia (can't remember who or find the article - sorry) and people said that the US would never do anything like release someone who had comitted a crime over the internet, breaking a law in another country.

    Proves you wrong.
  • Ha! (Score:5, Funny)

    by Gannoc ( 210256 ) on Sunday April 25, 2004 @07:04PM (#8968134)
    Canada is a signatory as well.

    There! Happy now? Slashdot finally mentioned Canada, but it turns out you're a bunch of facists like the rest of us. W00t!

  • Er... (Score:5, Insightful)

    by Anonymous Coward on Sunday April 25, 2004 @07:04PM (#8968138)
    Why do we have to give them our encryption keys? This makes no sense.

    Do they have to find evidence on you first? I mean, they won't just go around asking for everyone's encryption key, so that they can find the evidence can they?

    Encryption are the walls of my digital home. Anything I encrypt is private property. I feel this might set a very bad precedent if we are required to give the gov't our encryption keys..

    • Re:Er... (Score:5, Insightful)

      by Manip ( 656104 ) on Sunday April 25, 2004 @07:07PM (#8968157)
      If you think about it, giving them our encryption keys is kind of like guilty until proven innocent isn't it, if they assume we are all criminals and ask us to prove we are not (by showing them our cards). I don't really understand how any country can justify this...
    • Re:Er... (Score:5, Insightful)

      by SharpFang ( 651121 ) on Sunday April 25, 2004 @07:21PM (#8968228) Homepage Journal
      ...and then their "microsoft-sponsored" boxes get compromised and some real criminals lay their hands on your keys.
      I don't quite believe the government can keep my keys as safe as I keep them.
    • Re:Er... (Score:3, Interesting)

      Hmm... I they want the keys to get into my digital house, maybe I should give them a copy of my house key, and post office box key. And all my passwords. That should work. I have no reason not to trust some stranger with my house keys..... ?! Hello? What's going on here?

      • by cgenman ( 325138 ) on Sunday April 25, 2004 @11:41PM (#8969565) Homepage
        You should see the equipment to get into a locked house sometime. My personal favorite is a shockwave gun that knocks the pins up and into place. There is also the freezy-heaty gun that freezes the pins in an upward position, then heats the lower pins until they fall into position. Neither of these will allow anyone to know they have been hacked. Then there are traditional lock picking techniques, which take longer. In a pinch, you can always just pound down the door with a piece of concrete, or break a window.

        They don't want a copy of your house key because they don't need your house key to get in your house. That data is not secure. Even picks for those nice, safe-looking round locks can be had for about 400 dollars. But what they can't do is break strong encryption. If you put a good system on your computer with a well-chosen key, and make sure there isn't a keylogger installed on your keyboard, or a trojan, or a camera pointed at your fingers... Well, OK, there are ways around it. But after they catch you the only way to open that data is in your head. This violates their whole "hit it with something large until it opens" strategy, so they need that key from you.

        That's why they're going for your encryption keys, but not your house keys. It's not because encryption keys aren't sacred, but because your house protection is trivial.

  • by Manip ( 656104 ) on Sunday April 25, 2004 @07:05PM (#8968140)
    The net is like the wild-west.. with no laws or very little.. I think we are coming to an end of that time, soon we will need corp authorization to write e-mail and have to pay to put any content only.. sad day. Also, how.. realistically could we even provide them with our encryption keys? Also couldn't they be used for political gain??
  • by Anonymous Coward
    Now not only do you have to keep track of the laws in the country which you live in but also the laws of all countries who've signed this "Cyber treaty".

    I remember reading here before about how you make a lot of laws and reinforce them selectively depending on who you want to take down to earth. Well it just got even easier.
  • Now where? (Score:4, Funny)

    by Realistic_Dragon ( 655151 ) on Sunday April 25, 2004 @07:09PM (#8968161) Homepage
    Can't go to the USA, Europe, Canada, Mexico, Australia or China.

    Well, I guess if Russia doesn't work out for us liberty loving types we can always head for Mars.
  • "production, sale or distribution of hacking tools"

    Assuming that includes DeDRMS [nanocrew.net], it's a good thing that Norway's not part of Europe!

    (Oh no it isn't).
  • by I Be Hatin' ( 718758 ) on Sunday April 25, 2004 @07:10PM (#8968170) Journal
    While the implications of this treaty are truly frightening, the amazing thing about it is that it originated in Europe. Judging by all the anti-American trolls here on Slashdot, you would think that such legislation was only possible in a land corrupted by people like Jack Valenti and John Ashcroft. This treaty really goes a long way toward shattering my illusions of Europe as the land of the free [slashdot.org] and the home of the brave [albinoblacksheep.com].

    • by Ogerman ( 136333 ) on Monday April 26, 2004 @01:53AM (#8969951)
      While the implications of this treaty are truly frightening, the amazing thing about it is that it originated in Europe.

      It's not really so amazing when you consider that the Clinton admin, which also brought us DMCA through the backdoor of a WTO treaty, was largely responsible for drafting / pushing the cybercrime treaty as well.

      http://www.wired.com/news/politics/0,1283,40576, 00 .html

      And here's a fun one:
      http://www.computerworld.com/governmenttopic s/gove rnment/story/0,10801,55949,00.html
      Oh how times have changed, eh?

      Sadly none of this stuff will be discussed in either party's presidential candidate's 2004 campaign. Why? Because they basically have the same brain-dead stance. So you all know what to do: start writing congress immediately!
    • RTFA!!! (Score:3, Informative)

      by alizard ( 107678 )
      While the implications of this treaty are truly frightening, the amazing thing about it is that it originated in Europe.

      From the available information, the bad ideas in it came straight from the DOJ representatives who sat in on the conferences at which the treaty was drafted. Did a published article on this for 8wire back in 2001. Unfortunately, 8wire is out of business. From the SecurityFocus article, it appears that everything that was wrong with it back then still is.

      Judging by all the anti-American

  • by LostCluster ( 625375 ) * on Sunday April 25, 2004 @07:10PM (#8968176)
    This really doesn't sound like that bad of a bad thing...

    - If you're selling Nazi-era items on eBay, you might as well just put "Offer void in Germany and where prohibited by law, bids from such places will be disqualified." in your description. You just can't sell that kind of stuff to Germany, so don't even try.
    - The encryption keys issue sounds fair to me. If you have the keys to an encrypted file and you refuse to decode it and a judge issues a warrant for that data, you have to turn it over or pay the penality for obstructing an investigation.
    - The NMAP issue seems like one of FUD to me. The word "hacking" is nowhere in the actual text of the document. Of course, Slashdot would run a story that debates a treaty with a link to the treaty language itself [privacyinternational.org] because we reject all government actions without even needing to read what they're proposing. :)
    • by realdpk ( 116490 ) on Sunday April 25, 2004 @07:26PM (#8968260) Homepage Journal
      "If you have the keys to an encrypted file and you refuse to decode it and a judge issues a warrant for that data"

      That amounts to being asked to incriminate oneself. They'd only *need* to ask for that if they didn't have enough evidence against you to convict you.

      Besides, keys really do get lost. I have some encrypted files from a machine which I forgot to back up, so I don't have the private key any longer. My bad, sure, but should I really go to jail for it? There's nothing in those files that would work against me, but they don't know that. I don't think it is appropriate for them to be able to jail me until I prove that I'm innocent.

      "The NMAP issue seems like one of FUD to me. The word "hacking" is nowhere in the actual text of the document."

      Er, check out this text, Article 2:

      Each Party shall adopt such legislative and other measures as may be necessary to establish as criminal offences under its domestic law, when committed intentionally, the access to the whole or any part of a computer system without right. A Party may require that the offence be committed by infringing security measures, with the intent of obtaining computer data or other dishonest intent, or in relation to a computer system that is connected to another computer system.

      I've bolded the significant part. They're saying that the laws can be constructed such that you can be punished for "infringing security measures" "in relation to a computer system that is connected to another computer system". Since the latter is basic networking, and is the basic building block of the Internet, and "infringing security measures" could mean trying to connect to a firewalled port (or successfully, accidentally getting through a firewall because of a misconfiguration), nmapping could count.

      This is bad news. There's not enough protections in the treaty to prevent abuse by the government.
  • hacking tools (Score:5, Informative)

    by quelrods ( 521005 ) * <(quel) (at) (quelrod.net)> on Sunday April 25, 2004 @07:10PM (#8968177) Homepage
    If one is arrested under any charge and found to have tone dialers, packet sniffers, port scanners, etc. one can be found to be in posession of "hacking devices." (This has happend in the past to Bernie S and others.) Essentially the government has no real evidence of any crime and uses it as a catch-all or as a way to increase sentence time. The annoying part of this is that sysadmins use sniffers and scanners quite often as part of their job. It would appear this "treaty" is just to strengthen previous laws and help to catch those evil hackers...er um hopefully not sysadmins?
    • Re:hacking tools (Score:3, Informative)

      by LostCluster ( 625375 ) *
      Here's the text of the treaty. [privacyinternational.org]

      Please cite the section that makes it criminal to posess a "hacking device".
      • Found it (Score:4, Insightful)

        by spellraiser ( 764337 ) on Sunday April 25, 2004 @07:35PM (#8968303) Journal

        Please cite the section that makes it criminal to posess a "hacking device".

        This seems to fit the bill:

        [Begin Quote]

        Article 6 - Misuse of devices

        1. Each Party shall adopt such legislative and other measures as may be necessary to establish as criminal offences under its domestic law, when committed intentionally and without right:

        a. the production, sale, procurement for use, import, distribution or otherwise making available of:

        1. a device, including a computer program, designed or adapted primarily for the purpose of committing any of the offences established in accordance with Article 2 - 5;

        2. a computer password, access code, or similar data by which the whole or any part of a computer system is capable of being accessed with intent that it be used for the purpose of committing any of the offences established in Articles 2 - 5; and

        b. the possession of an item referred to in paragraphs (a)(1) or (2) above, with intent that it be used for the purpose of committing any of the offences established in Articles 2 - 5. A Party may require by law that a number of such items be possessed before criminal liability attaches.

        [End Quote]

        Note that this also applies to passwords and other data. Interesting.

        • Re:Found it (Score:3, Insightful)

          by LostCluster ( 625375 ) *
          1. a device, including a computer program, designed or adapted primarily for the purpose of committing any of the offences established in accordance with Article 2 - 5;

          2. a computer password, access code, or similar data by which the whole or any part of a computer system is capable of being accessed with intent that it be used for the purpose of committing any of the offences established in Articles 2 - 5; and


          Hmm... that doesn't say "Hacking"... "the offences established in Articles 2 - 5". What are th
          • Re:Found it (Score:3, Insightful)

            by spellraiser ( 764337 )

            Ah yes, I see what you mean now.

            Your beef is that people are confusing hacking with cracking yet again. I myself have developed an instinctive reaction to this phenomenon, which is simply to unconciously translate their 'hacking' into my 'cracking'

            So, it doesn't bother me so much anymore. But now that you've said it, it's a perfectly valid point, and one that is too often forgotten. Everyone write this 100 times on the board now:

            Hacking != cracking

          • Re:Found it (Score:3, Insightful)

            by Valar ( 167606 )
            Thank you, I was about the post that :) It looks like this is another one of those cases of the /. community getting irrationally exuberant about a document before they have even read it and/or applied basically reading comprehension skills.
  • by mariox19 ( 632969 ) on Sunday April 25, 2004 @07:16PM (#8968210)

    It seems that this whole notion of using treaties for anything other than marking out jurisdiction over the lands and seas, or codifying who gets what at the end of a war is a huge threat to a nation's sovereignty, and, in a democratic country, the ultimate sovereignty of a country's citizenry.

    The Kyoto treaty, NAFTA, and all other economic treaties are ways of sneaking in through the back door (in the United States) laws that would never be passed through legitimate means. The House of Representatives [house.gov] is totally left out of the loop, bypassing our most democratically representative body.

    Now, apart from economic treaties, the U.S. will play handmaiden to the enforcement of foreign criminal statutes (while other countries do likewise).

    This is bullshit!

    Politicians are at a loss to know what to do in the face of a world rapidly being transformed by technology, and international communication and commerce; but, in an effort at being seen as "doing something about the problems of today's world" are rushing to pass laws, the consequences of which can neither be foreseen nor easily undone.

    And we're the ones who are going to have to live with it.

    • First of the, the House has always been out of the loop when it comes to treaties. How it has been since day 1. Number 2, the Sentate was largely an appointed position up until the last 100 years or so. State Houses typically choose the senator, not the people.

      While the House was meant to be a represenative body of the people, the Senate was supposed to be made up of elder statesmen and professional politions. Good, bad, indifferent, that was the way things were set up.

  • "hacking tools"? (Score:4, Insightful)

    by panxerox ( 575545 ) * on Sunday April 25, 2004 @07:27PM (#8968266)
    um since most "hacking" is done via phone (social attack). do we have to get rid of phones?
  • bad standards (Score:5, Insightful)

    by spiritraveller ( 641174 ) on Sunday April 25, 2004 @07:31PM (#8968284)
    Bush refused to sign the treaty for the International Criminal Court, because he can't stand the hypothetical possibility of our soldiers being prosecuted for war crimes.

    But when it comes to the privacy and free speech rights of American civilians, he could give a shit. Say, why do we have soldiers again?

    Funny me, I always thought it was to protect our Freedoms(tm).

    • Re:bad standards (Score:5, Insightful)

      by mrBoB ( 63135 ) on Sunday April 25, 2004 @07:54PM (#8968419)
      First of all, mod this guy up. Second of all, the problem with Bush on "cybercrime" is basically the same as every other politician... he doesn't have any competant advisors advising him on the subject. (I'd further argue that none of his advisors on any topic are competant, but that belongs in another forum ;-) )

      You're quite right regarding the ICC. Basically he cannot see that his issue with the ICC is exactly the same as his issue _should_ be with this cybercrime treaty. If an American is not breaking the laws of the United States, why should he be held to another country's, perhaps, lower standards?

      I'm not saying that the U.S. Gov't shouldn't help arrest a an American bank fraud for the French... But I am saying that a Chinese defector seeking political asylum and citizenship in America shouldn't have to worry about China asking for the U.S.'s help in bringing him back.

      This arguement basically gets down to the "dual criminality" provision the DoJ says is missing. If it were me drafting/revising the treaty, I'd put that in there. As an American, I would not want an _INTERNATIONAL_ treaty relegating my Constitutional protections to a _clause_!

      At the same time, we geeks still need to deal with our individual congressmen and senators to remove the Big Brother provisions strewn about in our U.S. Code. Why should decent, law-abiding Americans even have the worry of foreign, or our own government, sticking their proverbial noses in our affairs? Must every means of criminal investigation be codified? The FBI should _not_ have blanket access to any ISP's infrastructure where they can (for lack of a better term) etherape an entire ISP's clientele... There _must_ be a technical way, as well as legal restrictions, on how law enforcement may collect information for investigations.

      As usual... my 0.02
      -Robert
    • Re:bad standards (Score:3, Informative)

      by BCoates ( 512464 )
      Bush refused to sign the treaty for the International Criminal Court

      Clinton signed the ICC treaty. There is no chance in hell that it will pass the Senate, and he didn't even try. Bush wasn't interested in getting it passed either, and withdrew from the unratified treaty.
  • Comment removed (Score:5, Informative)

    by account_deleted ( 4530225 ) on Sunday April 25, 2004 @07:41PM (#8968344)
    Comment removed based on user account deletion
    • by westlake ( 615356 ) on Sunday April 25, 2004 @09:06PM (#8968836)
      From a practical standpoint, "I can't recall" is a very effective three words sentence in such a case.

      You will be expected to release the keys after a judge issues a warrant for a search of your computer. Saying "I can't recall" will earn you an interminate stay in the county jug until your memory improves dramatically.

      The privelege against self-incrimination can be invoked only during interrogation and at trial. It is the first line of defense against the use of torture or intimidation to achieve a conviction. But it does not protect you from bring compelled to provide fingerprint and DNA samples, surrender your private correspondence, account books and ledgers, etc.

      • Saying "I can't recall" will earn you an interminate stay in the county jug until your memory improves dramatically.

        It worked for Reagan, though, and it is possible that he wasn't lying then.

        In fact, it is absolutely feasible to forget a long passphrase, especially if you claim that the data is an old archive of obsolete financial records or projections, for example.

        I can't see anyone being thrown in jail for inability to remember something that they were never required to remember:

        "Yes, the passwor

      • Comment removed (Score:4, Interesting)

        by account_deleted ( 4530225 ) on Monday April 26, 2004 @01:05AM (#8969842)
        Comment removed based on user account deletion
  • Ok, first, READ it. (Score:5, Informative)

    by Valar ( 167606 ) on Sunday April 25, 2004 @07:51PM (#8968400)
    I've looked through this treaty, and it appears that the only explicit mention of encryption is that each participating country must ensure that if they have encryption keys needed to help another participating country, they should hand them over (i.e. Country A got Mr. Baddy's RSA key during an investigation and he is being tried in Country B for another offense. Country A should give the key to Country B to help them). Presumably, the key must be obtained by legal means in country A before it can be given to country B. They also mention that encryption should be used, if necessary, to ensure secure communications between the governments... I would hope this is the case anyway.

    This treaty doesn't expand the definition of computer crime really. All it is is a promise between countries that if someone commits a crime in another participating country, the other countries will turn over the criminal. To me, this makes perfect sense-- think about it. If someone from a european nation stole your credit card information, for example, you would want them to be accountable for their damages, even if you were an american, right?
  • by Rick.C ( 626083 ) on Sunday April 25, 2004 @07:51PM (#8968404)
    What if there were a way to combine your critical plaintext with some other unimportant plaintext in a way that you could have two keys. One key would decrypt the cyphertext to yield the real plaintext. The other key would decrypt the same cyphertext to yield the decoy plaintext.

    When big brother denies your fifth amendment rights against self-incrimination and demands the key or you rot in prison, hand over the key that decrypts the decoy text and say, "See. It was just some stupid email about my car."

    Of course you'd have to encrypt everything to be consistent, but that's not really a bad idea anyway.
  • by Maljin Jolt ( 746064 ) on Sunday April 25, 2004 @07:52PM (#8968412) Journal
    prohibiting the "production, sale or distribution of hacking tools"

    So they are about to ban all computers, eh?

    Due to lack of math education, lawyers and authorities simply cannot understand what an universal computation machine is, a math abstraction. So they really want to outlaw a class of abstract algorithms. I would call that idiocy, but I wan't be moderated down troll so I call it ignorancy.

    So at the 2024 we who keep around all open source packages ever touched, will be all using Quake 13's "scanning mod" feature instead of illegal nmap...

    If it goes really, really wrong with the law, we can always implement a Turing machine with cells represented by file names of silly word documents in a single directory. Written in shell or cmd, it could still be faster than mainframes were 30 years ago.
    With that, say HOW one can distinguish DATA from CODE, if one cannot grasp the semantics?

    Or example for an underground network: today's sending a tcp packet would be equivalent of emailing little stego message perfectly fitted with up-to-day security content check standards. TCP over email on broadband will be faster then modems we had 10 years ago.

    There is only way out: Force authorities to make world a better place for living, not for doing bussinesses only.

  • by c0dedude ( 587568 ) on Sunday April 25, 2004 @07:56PM (#8968435)
    If one had a safe, and said safe was completely uncrackable, and there was a good likelyhood that the critical piece of evidence to a crime was inside it, could the owner of the safe be forced to divulge the combination? This is how I envision encryption keys. Honestly, under the fifth amendment, I'm not sure.

    If this were passed, would countries that don't have annoying 4th and 5th amendments be able to force Americans to divulge their keys or risk extradition?
  • Encryption Keys? (Score:4, Interesting)

    by Esion Modnar ( 632431 ) on Sunday April 25, 2004 @07:58PM (#8968444)
    The poster seems to imply that somebody will be making the rounds (probably around 3am, in jack-boots) demanding all our encryption keys, whether we're under indictment or not, for breach of an American law, or not. Just to have them. Just in case they need them.

    Well, they might as well round up all our guns at the same time, give us identity chips for our own "security," officially revoke the Bill of Rights, and set up a UN shrine with mandatory attendance, so there will be no more doubt to anyone what they're all about.

    Then all the crazies can retreat to the hills with their shotguns and claymores, and finally have that Armageddon they've been waiting for.

    I'm not saying that this WILL happen this way, since I think that the powers-that-be are way too subtle for that. They know all too well that a frog will jump out of boiling water, but will allow itself to be cooked if done so gradually.

  • by freejung ( 624389 ) <webmaster@freenaturepictures.com> on Sunday April 25, 2004 @08:00PM (#8968454) Homepage Journal
    of this is not so much what it allows other governments to do to US citizens, which will probably not end up amounting to much in a any case (can you imagine, for instance, the US cooperating with the Chinese govt on prosecution, if the Chinese were to sign this treaty? No way). The interesting aspect of this is that it will strengthen the powers of the US to conduct surveillance on non-US citizens in other countries which have signed the treaty. This, of course, is the reason Dubya wants it ratified.
  • conditions (Score:4, Interesting)

    by Fuzzums ( 250400 ) on Sunday April 25, 2004 @08:48PM (#8968747) Homepage
    example :: under certain conditions, you could consider a hammer a burglary tool.

    the problem, most of the time, is the ignorance of the ones making the law and also the ones upholding (and interpreting) it.

    now think about nmap, nessus and so on and so on...

    hell, even a computer can be seen as a tool for comitting cybercring.
  • Oh, you want the... Well, sorry sir, but I accidently dropped the magnetic medium my one-time pad was on on top of this here supermagnet. Sorry; Hope you got a few centuries spare on a Cray. Don't scare me like that next time!


    Sorry officer, I always keep my floppies together with magnets. Oh... You mean magnets erase floppies? Oops...
  • Fifth Amendment (Score:5, Insightful)

    by Karl-Friedrich Lenz ( 755101 ) on Sunday April 25, 2004 @09:29PM (#8968932) Homepage
    of the American Constitution requires that no person "shall be compelled in any criminal case to be a witness against himself."

    In a 1996 paper Greg S. Sergienko explains [rubberhose.org] that in America, the Fifth Amendment would give a suspect the right to refuse handing over encryption keys.

    I agree with that analysis.

    Therefore, I think that any legislation based on Article 19 of the Cybercrime Treaty would only enable law enforcement authorities to request encryption keys from third parties who run no risk to be prosecuted themselves. Article 19 should not be constructed as requiring self-incrimination.

  • by bettlebrox ( 264668 ) on Sunday April 25, 2004 @10:19PM (#8969133) Homepage Journal
    Funny how they'll sigh this thing, but won't agree to stop using landmines ...
    Yeah, I know they're not related but somehow cybercrime just made me think of landmines ...
    http://www.icbl.org/country/usa/ [icbl.org]
  • by Dozix007 ( 690662 ) on Sunday April 25, 2004 @10:24PM (#8969151)
    I run Uberhacker.Com [uberhacker.com], a site primarily focused on PHP security. We also run a section in our Forums [uberhacker.com] dedicated to Fighting the CyberCrime Treaty [uberhacker.com]. Please visit the forums if you are interested in the topic, check out the forums and sign up.
  • What thuh? (Score:4, Informative)

    by bezuwork's friend ( 589226 ) on Sunday April 25, 2004 @11:35PM (#8969532)
    This treaty, among other items, would require the U.S. to "cooperate with foreign authorities" in conducting surveillance on American citizens who have committed no crime under U.S. law, but may have broken another country's law (selling historic Nazi posters on Ebay? Germany might have you wiretapped)

    No time to read the article (I'm becomming a good /.er) or most of the comments - finals and such - so I apologize if another has said this. One of the cases I read today is the one Yahoo! filed in response to the French ruling [Yahoo!, Inc. v. La Ligue Contre le Racisme et l'Antisémitisme, et al. (CA, 2001)]. It was only a Cal. case, but the court said something very basic which the feds will have trouble with: even if a person in the US does something on the internet which violates laws in another country, so long as that action is protected in the US (such as under the first amendment), US courts cannot enforce any foreign judgement.

    Since treaties are subservient to the Constitution, I think selling Nazi posters is gonna remain a US right.

  • by cc_pirate ( 82470 ) on Monday April 26, 2004 @12:17AM (#8969691)
    When they pry them from my cold dead fingers....


    Which, given Ashcroft's history will probably be fine by them....

"If it ain't broke, don't fix it." - Bert Lantz

Working...