About InfoWorld : Advertise : Subscribe : Contact Us : Awards : Events : Store
InfoWorld HomeNewsTest CenterOpinionsProduct GuideTechIndex
 COLUMN ARCHIVE  FORUMS
 

COLUMN

 
Security Adviser
P.J. Connolly

Copywrong

ONE OF THE SMARTER things the founding fathers wrote into the Constitution was the clause giving the federal government the power to issue patents and, ultimately, what we now know as copyrights. I certainly don't have any quarrels with the idea of intellectual property. Not surprisingly, I think copyright is a great thing, given that I write for a living.

   ADVERTISEMENT
  

Free IT resource

Virtualization Insights from Top Experts - Learn how virtualization gets real!

Sponsored by Dell

Free IT resource

TechNet: More ways to know it, share it, and keep it running.

Sponsored by Microsoft

RELATED LINKS
»  IE 7 bug reopens debate over patch responsibilities
»  Woman ordered to pay for file-sharing will appeal
»  McAfee to buy SafeBoot for $350M
»  Security RSS feed 

IDG ENTERPRISE NETWORK
Research Reports  (CIO)
Ask the Expert  (CIO)

TOP NEWS 


IT SOLUTION SEARCH
But as a consumer, I also believe passionately in the concept of fair use. In theory, this should give me the right to copy a work to a more convenient media for my personal, noncommercial use. I should also be able to discuss the merits, or lack thereof, without fear of prosecution. That's called free speech, my friends, and without that right, I'd rather be dead.

Unfortunately, the laudable notion of protecting the rights of creators is ensnared in a mass of incredibly wrongheaded law known as the Digital Millennium Copyright Act of 1996, the infamous DMCA. Why am I so cranked up over DMCA? Because some of my most paranoid fears are coming to pass. DMCA is being used to stifle open discussion of bad design and security flaws, and I'm afraid things are only going to get worse.

It was bad enough last year, when a music industry trade group threatened legal action and kept academic Edward Felton from presenting a paper on flaws in a copy-protection technique supported by the recording industry. But when some idiot vice president at HP (it's not Hewlett-Packard anymore, right Carly?) starts threatening Snosoft security researchers with the full weight of DMCA because Snosoft did what everyone in the security community should do when they have knowledge of a flaw, I have a problem.

The incident was widely reported, but for those of you who were too busy swatting mosquitoes in East Troy, Wisconsin, or waiting for Barry Bonds to hit number 600, the super-condensed version goes like this:

Researchers at Snosoft find hole in Tru64 Unix, the ex-Digital, ex-Compaq Unix that HP is starting to strip of goodies and will tart up in future versions of HP-UX. Researchers inform HP of vulnerability and supply exploit code. HP -- which must be a really distracting place to work this summer -- puts bug into its normal pipeline. Vulnerability becomes publicized, HP veep throws tantrum and threatens a DMCA prosecution. Press finds out, mocks HP. HP flacks restate situation in less-threatening tones, so in the end no one's going to jail for anything. This time.

The pitiful thing is that copyright law is only going to become more absurd if some interests get their way; just punch "Fritz chip" into Google and you'll see exactly what I mean. We live in a world where "fair use" is taking a back seat to the deep pockets of industry.

We know that we can't depend on hardware and software vendors to deliver secure products or be upfront about risks and responsibility. But if a neighbor knocked on your door and pointed out that your barn was on fire, you'd thank him -- not threaten him with a trespassing charge.


P.J. Connolly is section leader of the InfoWorld Test Center, covering security and collaboration. Contact him at pj_connolly@infoworld.com.




RELATED SUBJECTS

Security
Business News

Click here for all of P.J. Connolly's past columns.


SPONSORED WHITE PAPERS
EMC - Lower costs and improve reliability-Get the EMC CLARiiON white paper!
Ciphertrust - Are you ready for Sobig.G? Learn how to protect your email systems.
CDW - Personal attention. CDW. The Right Technology. Right Away.
EMC - Explore key performance features and capabilities of EMC ControlCenter 5.1.1.
Intel - Free Intel white paper shows you how to deploy a secure wireless LAN
Cisco - FREE WHITE PAPER: BLUEPRINT to design and implement secure VPNs
Verity, Inc. - "Mass Consolidation Hits the Web-Search Market"
McDATA - Download a FREE storage consolidation white paper from McDATA(R).
Lucent Technologies - Overcoming Common Firewall Limitations
Lucent Technologies - Leverage Your Mobile High Speed Data Access. Download Free White Paper!
Nokia - Get the scoop! Mobilizing business white papers & case studies.
BMC Software - Maximize the Potential of Enterprise Data: Free white paper!
Network Associates - Free white paper - Strategies for Optimizing Network Costs and Benefits
Entrust - Manage identities across applications. Improve productivity.
Stalker Software - CommuniGate Pro - Transform your Email and Calendaring
Remedy - A NEW Gartner Research Note:Producing Quality IT Services

Search the IDG White Paper Library:


SPONSORED LINKS

INFOWORLD MARKETPLACE


» IT Compliance Conference: Nov. 5-7 in San Diego
Best Practices, Peer Experiences, & Expert Advice for Building a Defensible IT Compliance Program
» FREE Sophos Threat Detection Test
Is your AV catching everything it should? Free virus, spyware and adware scan.
» IT Audit Checklists
Prepare for your next internal IT audit. Checklists cover security, risk management, PCI, and more.
» FREE White Paper: Mitigating Rock Phish Attacks
Standard anti-phishing methods cannot defeat complex Rock Phish attacks. Learn how to fight back...
» Apply BPM and ITIL at your IT Help Desk
ServiceWise brings BPM to complete IT service while eliminating integration cost. Learn more here.




 HOME  NEWS  TEST CENTER  OPINIONS  PRODUCT GUIDE  TECHINDEX   About : Advertise : Subscribe : Contact Us : Awards : Events 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy

All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses, phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

Computerworld :: Network World :: CIO :: PC World :: Darwin :: CMO :: CSO
IT Careers :: JavaWorld :: Macworld :: Mac Central :: Playlist :: GamePro :: GameStar :: Gamerhelp
ITWorld Canada :: Computerwoche :: Techworld UK :: tecChannel :: IDG.se :: IDG.no