Neil Barrett
Neil Barrett

Vague law promises definite benefits

Will a lack of precision in the Computer Misuse Act bring more advantages than drawbacks?

Written by Neil Barrett

Chances are that a lot of people reading this column are competent programmers, able to read code and work out what programs should be doing. The syntax indicates how the various statements are to be understood, and there's not a lot of mystery to how the "if-then-else" and "while-condition-do-statement" constructions actually work.

I've always been fascinated by the combination of syntax and semantics - whether in a program, an essay or a formula. But perhaps the most fascinating types of construction, because of the impact they have on our lives, are found in the legal environment.

Advertisement

These constructions are the laws that govern, criminalise and punish various mischiefs - and the peculiarly precise syntax of well-drafted legal statements can result in wonderfully enlightening analyses of just what was meant. But sometimes there are gloriously entertaining results as to what the drafters didn't mean but have accidentally included.

Let me give you an example. In the US there have been recent moves to criminalise those who undertake research and development to bypass the security mechanisms on music and video files. The idea, of course, is to protect the copyright holders from exploitation - but the result is that entirely non-criminal but private research into security weaknesses is stifled.

Those of us who grew up with the philosophy of open source and full disclosure rather regret the more draconian measures across the Atlantic. And we satisfy ourselves with the observation that "it won't happen here" - us Brits are more sensible than that.

But are we? A close reading of the Computer Misuse Act 1990 might be in order. Look in particular at Section 1: "A person is guilty of an offence if a) he causes a computer to perform any function with intent to secure access to any program or data held in any computer; b) the access he intends to secure is unauthorised; and c) he knows at the time when he causes the computer to perform the function that that is the case."

So, "causes a computer to perform any function with intent to secure access to... any computer." Interesting, isn't it? The function can be performed on any computer, including one to which you have authorised access - such as your own. If you perform any function on your own computer, with the intention to break into another computer, then you have committed a section 1 offence.

In practical terms, this was written to criminalise hackers who run exploits on their own PCs while connected to a target system. But of course, a "function" could well be the writing of that exploit, or running a web browser to find information about it, or even writing a document or email explaining how it is to be done.

We don't need a special law like the Americans; our far-sighted drafters of the law back in 1990 had already thought of it, even though I'm sure they didn't know what exactly it was they were doing.

Tags:

Related articles

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Microsoft

Microsoft plans Silverlight 2.0 announcement

Web application tool revamp promised later today   More...

Stock prices

Security disclosures tip the stock market

Events such as Microsoft's Patch Tuesday could be used for...  More...

Blogs

Analyst predicts Web 2.0 fire sale

Prices for online apps could soon plummet, says Forrester   More...

MoD building

Latest data breach leads MPs to demand culture change

MoD admits to losing a hard drive containing up to...  More...

Primary Navigation