Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Now at Black Hat: a lawyer to vet your hacking

By Robert McMillan , IDG News Service , 08/07/2008
  • Share/Email
  • Comment
  • Print

There's a new service for conference speakers at the Black Hat security conference in Las Vegas this year: lawyers on call.

For the first time, the Electronic Frontier Foundation is staffing a booth at the show with lawyers, ready to take any skittish security researchers and give them a free legal consultation. The idea is to make it easier for hackers to talk about cutting-edge research, even when they're subject to what the EFF sees as bogus legal threats.

Staffing a quiet booth at the very end of the long line of vendor booths here at Caesar's Palace, EFF lawyers are ready to consult and sometimes give legal referrals to researchers who fear that their work may lead to trouble.

A lawyer who knows about hacking isn't exactly something you can look up in a phone book, said Kurt Opsahl, an EFF staff attorney.

As of Thursday afternoon, the EFF had about a half-dozen takers, Opsahl said. He wouldn't talk about details, but he said the point of the effort is to help researchers feel secure in presenting their research. "The fact that we are around and there is a place that people can go will give them some confidence," he said. "Unfortunately, there are some companies that take a dim view of some people's freedom to tinker," he said.

The EFF has been providing this kind of legal assistance on an ad hoc basis for years, but at Black Hat this week it launched a formal program, called the Coders' Rights project.

With Coders' Rights, the EFF wants to support legitimate reverse-engineering and vulnerability research.

EFF lawyers say a company's decision to threaten a researcher depends a lot on its corporate culture and whether it has any experience with the security research community. Size matters, too, according to Jennifer Granick, the group's civil liberties director and a well-known expert in this field. "In my experience, the smaller the company, the worse they are."

Last year, researchers from security vendor IOActive had to pull a Black Hat talk after a small company called HID Global threatened to sue them for patent infringement.

Researchers who want to talk to the EFFs lawyers can drop by the booth and set up a consultation at the group's private room at the hotel.

That private space makes things a bit easier, Opsahl said. He remembers a 2006 meeting where he had to talk with a Defcon attendee. The only way to ensure that they weren't overheard was to have their meeting while walking around the hotel parking lot. "It was well worth the walk," he said. "Despite the hot weather."

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed