SoylentNews

janrinok writes:

From https://www.eff.org/press/releases/eff-asks-court-block-us-prosecuting-security-researcher-detecting-and-publishing [eff.org] we learn that the EFF is helping fight the case of a Security Researcher:

Washington, D.C.—The Electronic Frontier Foundation (EFF) asked [eff.org] a court Thursday for an order that would prevent the government from prosecuting its client, security researcher Matthew Green [jhu.edu], for publishing a book about making computer systems more secure.

Green is writing a book about methods of security research to recognize vulnerabilities in computer systems. This important work helps keep everyone safer by finding weaknesses in computer code running devices critical to our lives—electronic devices, cars, medical record systems, credit card processing, and ATM transactions. Green's aim is to publish research that can be used to build more secure software.

But publishing the book [cryptographyengineering.com], tentatively entitled Practical Cryptographic Engineering, could land Green in jail under an onerous and unconstitutional provision of copyright law. To identify security vulnerabilities in a device he has purchased, Green must work directly with copyrighted computer code, bypassing control measures meant to prevent the code from being accessed. Even though this kind of research is traditionally a "fair use" [eff.org] permitted by copyright law, Digital Millennium Copyright Act [eff.org]  (DMCA) Section 1201 threatens criminal and civil penalties— including jail time—for performing it or publishing information about the methods of security research. The exemptions [eff.org] Congress included in the 1998 DMCA to protect security researchers from prosecution are vague, limited, and provide inadequate assurance against the serious legal ramifications of Section 1201 lawsuits—something the government itself has acknowledged.

"Under Section 1201, computer researchers can face serious penalties just for selling a book that would help people build better, more secure computer systems," said EFF Legal Director Corynne McSherry. "As we explained when we filed a legal challenge [eff.org] to the law in July, such penalties violate the First Amendment and threaten ordinary people for publishing research or even talking about circumventing computer code that's embedded in nearly everything we own. With the lawsuit [eff.org] underway, we're asking the court to bar the government from prosecuting Dr. Green so he can publish a book that's clearly in the public interest."

[...] For more about this case: https://www.eff.org/cases/green-v-us-department-justice [eff.org]

---

Original Submission