The Labyrinth (of th3 Malfunction3d Droi3d)

Introduction Today, we are going to discuss a list of U.S federal laws, that you should probably be familiar with if you want to become a Information Security "pro" or a Security Administrator here in the U.S. I am going to reference the SANS document below [1] as your primary resource, but I am briefly going to summarize and bullet-list each U.S federal law. You may also need to know any of these laws, if you have to work with local law enforcement or other federal investigators such as the F.B.I and D.H.S CISA, if your company has suffered some sort of major data breach. Even if you ARE NOT a lawyer it does help to have a firm grasp of these laws in context and an understanding of what they mean. Let's begin: U.S Federal Computer Laws: Computer Fraud and Abuse Act - This law is used for charging Black Hat Hackers with crimes, which include DDoS attacks, data breaches, and using malicious code to damage computer networks. If the damage is more then $5,000 dollars t...

Introduction  In this weeks entry, I will be re-exploring a very important topic! the question that a lot of people often bring up in different scenarios is whether or not law enforcement or the F.B.I needs consent in order to search a computer that you or somebody you know who has given the computer to a repair person in order to do maintenance on and the computer has "questionable" material on it. Is it considered an "illegal search and seizure" under the fourth amendment or can you be implicated? The short answer is yes, you can in fact can be implicated in "most" scenarios and under a varying degree of circumstances. Here is why the F.B.I can seize the computer without a warrant and go back and obtain one, in order to perform a computer forensics investigation on you. What the CCIPS Manual by the F.B.I states under constitutional law  "As discussed above in Section B.4, computer searches by repairman prior to contact with law enforcement a...