Computer viruses and chilling speech January 24, 2005, 5:32 PM PST http://news.com.com/Computer+viruses+and+chilling+speech/2061-1009_3-5548686 .html?part=rss&tag=5548686&subj=news.1009.20
In some countries, posting the source code to a virus is illegal; in the U.S., it's not. That may change in the near future, if certain security companies and some lawmakers have the wherewithal. Their voices have created a brouhaha over a Brazilian virus writer's temerity to post the source code of a Symbian OS virus (used most notably by high-end Nokia phones and known as Lasco.A) to his Web site. The critics of such tactics have a valid point. While cyberterrorism currently exists as a threat only in fiction and in the funding proposals submitted to Congress by researchers and bureaucrats, someday it could be a problem: Information, and the abuse of it, could cause instantaneous damage to infrastructure and people. In that sort of world, a more reasonable version of the virus debate should be held among legal experts and technologists. At present, the Lasco virus is hardly threatening--it requires the explicit permission of the phone user to spread. However, the current debate is steeped in self-interest and could be the first step on a slippery slope towards restrictions on any disclosure of security holes. Indeed, the current calls for action resemble the past history of criticisms leveled by other security industries against those that point out flaws in protective measures. For example, Matt Blaze, a computer-science professor at the University of Pennsylvania, is facing the ire of many in the locksmithing community for revealing secrets--and weaknesses--in their trade. That debate has raised blood pressures of those concerned for over 150 years. While the Brazilian virus writer may be held to account in his country (it seems that virus writing is illegal there), other countries should carefully weigh the dangers of software code against the dangers of censorship before following suit. --Robert Lemos You are a subscribed member of the infowarrior list. Visit www.infowarrior.org for list information or to unsubscribe. This message may be redistributed freely in its entirety. Any and all copyrights appearing in list messages are maintained by their respective owners.
