****************************************************************************
>C O M P U T E R U N D E R G R O U N D<
>D I G E S T<
*** Volume 2, Issue #2.18 (December 28, 1990) **
****************************************************************************
MODERATORS: Jim Thomas / Gordon Meyer (TK0JUT2@NIU.bitnet)
ARCHIVISTS: Bob Krause / Alex Smith
PERIPATETIC GADFLY: Brendan Kehoe
USENET readers can currently receive CuD as alt.society.cu-digest.
COMPUTER UNDERGROUND DIGEST is an open forum dedicated to sharing
information among computerists and to the presentation and debate of
diverse views. CuD material may be reprinted as long as the source is
cited. Some authors, however, do copyright their material, and those
authors should be contacted for reprint permission.
It is assumed that non-personal mail to the moderators may be reprinted
unless otherwise specified. Readers are encouraged to submit reasoned
articles relating to the Computer Underground.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
DISCLAIMER: The views represented herein do not necessarily represent the
views of the moderators. Contributors assume all responsibility
for assuring that articles submitted do not violate copyright
protections.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
CONTENTS:
File 1: Moderators' Corner
File 2: From the Mailbag
File 3: Computers Under Attack
File 4: CU Resources in Germany
File 5: Trade Secrets; When are they Bad?
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
----------------------------------------------------------------------
********************************************************************
*** CuD #2.18: File 1 of 5: Moderator's corner ***
********************************************************************
From: Moderators
Subject: Moderators' Corner
Date: December 28, 1990
++++++++++
In this file:
1. FTP FILES
2. RESOURCES OF CU INTEREST
++++++++++
+++++++++++++++++++++
FTP Files
+++++++++++++++++++++
The FTP archives are steadily growing. They include Network Information
Access (NIA), a few new CU magazines, and a variety of computer crime
statutes (state, federal, foreign), and a few new papers written by law
students and attorneys. Thanks to all those who send material along. If you
submit a long paper (20 pages or more), please be sure the format is
complete (biblio and footnotes not excluded if cited in the text) and line
length is not over 80 characters per line. Papers should be of publishable
quality and not simply stream-of-consciousness opinion. If you're not sure
if your paper is appropriate, send it along anyway. Papers should be timely
or of historical/archival value, and not something you happened across on a
BBS somewhere that is dated.
--------------------
Resources Worth Looking At
--------------------
There are a number of first-rate resources available on the nets for
computerists of all stripes. Among those of particular value include:
1. TAP MAGAZINE: TAP contains a variety of information and can be obtained
for only a postage stamp for each issue from:
TAP
PO Box 20264
Louisville, KY 40250
2. 2600 Magazine: 2600 covers a broad range of topics, ranging from
technical material to political analysis. It is published quarterly in
hardcopy format. It also holds periodic meetings and is an excellent
resource for information of relevance to a variety of interests. 2600
Magazine can be reached at:
2600@well.sf.ca.us OR
2600 EDITORIAL DEPARTMENT
P.O. BOX 99,
MIDDLE ISLAND, NY 11953
3. EFF DIGEST: The Electronic Frontier Foundation's first issue of EFF
Digest is out, and it is essential reading for those keeping up with the
the specifics of EFF activity as well as for following legal cases and
other issues affecting the computer world. The first issue provides a
detailed summary of the EFF goals and activities to date.
E-mail subscription requests: effnews-request@eff.org
Editorial submissions: effnews@eff.org
Or:
Electronic Frontier Foundation
155 Second St.
Cambridge, MA 02141
(617) 864-0665
(617) 864-0866 (fax)
4. BMUG (Berkeley Macintosh Users' Group) Magazine: Don't be deceived by
the name. BMUG contains a variety of articles relevant to all computerists
and is well worth reading. The Fall/Winter 1990 issue of the BMUG
newsletter will be available as of February, 1991. Cost is $25 (comes with
6 month BMUG membership). To subscribe, call BMUG at (415) 549-BMUG.
5. PHRACK CLASSIC: What can we say? Contact them at pc@well.sf.ca.us
6. TELECOM DIGEST: TCD, edited by Pat Townson, focuses primarily on telecom
issues of all kinds (technical, legal, rumor, facts, news articles). During
a period of hot topics, several issues can come out in a day. Pat chases
down rumors, keeps posts relevant, and has established TCD as the premier
e-mail source for telecom information. There is also an ftp site for back
issues. To subscribe, contact:
telecom@eecs.nwu.edu
7. NIA: Network Information Access, although fairly new, has published 68
issues to date. The first issues were relative short, but, beginning with
#68, the issues will be longer and provide a variety of detailed technical
and other information. For more information, drop a note to:
elisem@nuchcat.sccsi.com
8. NEWSBYTES: The Newsbytes News Network is an electronic news service
dealing solely with technology issues. It is published daily on GEnie and
is available in a semi-weekly format on Dialog, America On-Line, NewsNet
and a Japanese newsnetwork. Excerpts are also downloaded for publication
by Newspapers throughout the country (such as Computer Currents). The
service is international and has bureaus from Moscow to Sydney, Australia.
For more information, contact: mcmullen@well.sf.ca.us; CompuServe -
70210,172; GEnie - nb.nyc; AppleLink -- x1888 and MCI - 316-9687 with any
comments or additions.
There are other good resources out there, and we will include them in
future issues. There are also a number of good BBSs with extensive
collections of text files or discussion sections (Ripco, The Well, The
Works, Face-to-Face), and we will list a few of them next month. If you
know of exceptional boards worth mentioning, pass the names and numbers
along.
********************************************************************
>> END OF THIS FILE <<
***************************************************************************
------------------------------
From: Various
Subject: From the Mailbag
Date: December 28, 1990
********************************************************************
*** CuD #2.18: File 2 of 5: From the Mailbag ***
********************************************************************
From: Carrier Wave <MERCURY@LCC.EDU>
Subject: Operation Sun Devil and Ayn Rand
To: TK0JUT1%NIU.BITNET@UICVM.UIC.EDU
Date: Fri, 21 Dec 90 09:15 EST
Operation Sun Devil and
Ayn Rand's Theory of "The Sanction of the Victim"
by Michael E. Marotta, mercury@well.sf.ca.us
Arthur Koestler's novel, Darkness at Noon, tells of the downfall of a
Bolshevik. He is purged by the party, charged with conspiring to
assassinate Stalin. Of course, he did no such thing, but he soon comes
to understand the needs of his captors. As a Bolshevik, he knows the
theory of the centralized democracy and he comes to understand that
merely questioning authority is no different than a physical assault on
the Leader. The operant theory in this true-to-life example was later
enunciated by Ayn Rand in her novel, Atlas Shrugged. She called it
"The Sanction of the Victim."
In Atlas Shrugged, the heroes are engineers and investors who learn to
reject mysticism, altruism and collectivism. They learn to be proud of
their own achievements. They identify and reconcile the contradictions
that tore them apart and allowed them to be regulated, ruled, taxed and
vilified. One of the highlights of this novel is the trial of Hank
Rearden, a steel industrialist who violated an equalization of opportunity
law. He tells the court that it can sentence him to anything and he is
powerless to prevent that but he will not help them by participating. He
does not recognize their right to try him and he will not help them pretend
that the trial is just. He is acquitted.
If this seems too unreal, consider the case of Craig Neidorf in Chicago and
compare it to the trials of the Legion of Doom in Atlanta. Neidorf stood
his ground, prepared a First Amendment defense and asked for help from the
pioneers on the electronic frontier. The government dropped its charges.
In Atlanta, the hackers co-operated with the government, informed on each
other and even testified against Craig Neidorf and they were sentenced to
prison. Neidorf incurred legal expenses near $250,000. This is also about
the size of the fines to be paid by each of the LoD hackers in Atlanta.
The difference, of course, is that Neidorf is free and they are in jail.
The decision to go to trial rested on the premise that Right makes Might.
Niedorf prepared a First Amendment argument. In point of fact, victory
hinged on the demolition of the government's evidence. A suitable defense
could have been created from any perspective. The First Amendment is a
broad shield that protects religion, speech and assembly in addition to
writing. The Tenth Amendment guarantees all those necessary and proper
rights enjoyed by the people that are not specifically enumerated in the
Bill of Rights. Niedorf could have claimed that he was performing a
challenge commanded of him by the Gods of Olympus. What counted most is
that he felt that his accusers were morally wrong.
The Legion of Doom went down the drain in Atlanta because they granted the
moral high ground to the government. They were wrong in their own eyes and
they deserved punishment by their own standards. Their viewpoint and their
standards were the same as the government's.
The question then becomes: Is hacking right? Unless you want to go to
jail, you better find a lot of reasons to believe that it is.
+++++++++++++++++++++++++
From: gnu@TOAD.COM
Subject: Re: "strangers probing for security flaws" -- another view
Date: Fri, 21 Dec 90 13:11:14 -0800
Given the existing state of computer security (i.e. it requires excessive
care by a system administrator to make a system more than nominally
secure), I think that whatever automation we can bring to bear on security
testing is welcome.
Suppose there was a free program, available in source code and scrutinized
by wizards all over the net, that you could run to test your security. If
you had the time, you might run it and fix up the things it found. If you
didn't have the time, those things would probably go unfixed.
If someone at a remote site (Italy?) volunteers to run such a program and
mail you the results as they pertain to your site, are they performing you
a service or a disservice? I don't know about you, but when a stranger
knocks at my door to tell me that I left my garage door gaping wide open
and the neighborhood hoods are eyeing my bicycles, I usually thank her
rather than knocking her down and calling the police. Then I go and fix
the garage door.
If the stranger had taken a few bicycles before coming and telling me about
the problem, that would be different. But even that is preferable to their
stealing the bicycles and not even telling me I had a problem.
Sites all over the Internet *are* being probed by people who want to do
them harm. We know this as a fact. I would prefer if we had some
volunteer "cop on the beat"s who would walk by periodically and rattle the
door to make sure it's locked.
John
++++++++++++++++++++++++++
From: snowgoose!@UUNET.UU.NET
Date: Mon, 17 Dec 90 16:16:00 -0500
Subject: Is Technology Beyond the Law?
Is Technology Beyond the Law?
There are many factors which shape events like Operation Sun Devil.
Certainly mission, political mandate, public perception, and human frailty
are forces which shaped the behavior of the Secret Service. But, the
juxtaposition of technology and the law may well be the most significant
factor.
Law is (or at least, is supposed to be) a reflection of the needs of
society for definition of and protection of its interests. Technology
presents rapidly changing circumstances with which the law, because the
people, cannot keep abreast. Technology is, and will always be, beyond the
law?
Now, I'm not a lawyer, and I haven't got a clue of how to conceptualize
this under the law, but consider the following:
One day, the Secret Service shows up at my door with a search warrant to
seize and search my computer for incriminating evidence. They get my
computer back to their lab and discover that the entire hard disk is
encrypted, (probably block by block). Upon further examination, they find
either an encryption card or a software encryption routine in the disk
driver. I'm not going to give them the key. I have used a sufficiently
difficult encryption technique as to frustrate even the NSA. Where does
that leave their investigation? Where does that leave my computer?
Is there a concept in the law which requires that a law must be
enforceable? If so, isn't investigation an enforcement procedure? If so,
and if the law isn't enforceable, what happens to my computer with its
encrypted disk?
I have intentionally exaggerated the technical circumstances to raise the
question, but it seems to me that the same situation exists today. The
Secret Service has had 40+ computers and 23,000? disks since their seizure
on May 8th, 1990. If we assume that the Secret Service has procedures
(methods and techniques) for using the seized property in their
investigation, then is there a time limit on how long the investigation
can continue? If it could be demonstrated that there were *no* procedures
for using the seized property in furtherance of the investigation, would
they have a right to have seized it?
********************************************************************
>> END OF THIS FILE <<
***************************************************************************
------------------------------
Date: Thu, 6 Dec 90 15:00:32 PST
From: Peter Denning <pjd@riacs.edu>
Subject: Computers Under Attack
********************************************************************
*** CuD #2.18: File 3 of 5: Computers Under Attack ***
********************************************************************
COMPUTERS UNDER ATTACK
Intruders, Worms, and Viruses
Edited by Peter J. Denning
ACM Press and Addison-Wesley, 1990, 554pp
$18.50 ACM members, $20.50 others
On behalf of ACM Press and the authors of the 38 articles brought together
in this edition, I am proud to announce that our book on the subject of
attacks on computers is now available.
This subject continues to receive ongoing attention in the national press
--for example, the recent discovery of $12M of toll fraud at the NASA
Johnson Space Center, Operation Sun Devil, an Esquire article about
computer pirates breaking in to the Bell System, and the recent splashy
appearance of the NRC report, "Computers at Risk".
The purpose of this book is to tell the story of attacks on computers in
the words of those who are making the story and who see the broad
perspective in which it is taking place. We have painstakingly selected
the articles and have provided connective material to bring out the global
context and show that the problem is not purely technology, not purely
people, but a product of the interaction between people and computers in a
growing worldwide network.
After and introduction and preface by me, the articles are arranged in six
parts. Most of these have been previously published, but there are a few
new pieces specifically commissioned for this volume.
PART I: THE WORLDWIDE NETWORK OF COMPUTERS
Worldnet and ARPANET by Denning, overview of networks by Quarterman,
reflections by Thompson, survey of computer insecurities by Witten.
PART II: INTRUDERS
Reflections by Reid, Wily hacker story by Stoll, a followup commentary by
Mandel, and a business perspective by Wilkes.
PART III: WORMS
Internet worm overview by Denning, perspectives on the Morris worm by MIT's
Rochlis et al, Purdue's Spafford, and Utah's Seeley, executive summary of
Cornell Report, Morris indictment and trial summary by Montz, original worm
paper by Shoch and Hupp.
PART IV: VIRUSES
Virus overview by Denning, BRAIN and other virus operation by Highland,
virus primer by Spafford et al, viral protection in MS/DOS by Brothers, and
a perspective on viruses by Cohen.
PART V: COUNTERCULTURES
Computer property rights by Stallman, cyberspace literature by Paul Saffo,
a dialog on hacking and security by Dorothy Denning and Frank Drake.
PART VI: SOCIAL, LEGAL, AND ETHICAL IMPLICATIONS
A spectrum of commentaries: moral clarity and sending a signal by Denning,
global city by Morris, virus bills in congress by Crawford, GAO report
summary, legal issues by Samuelson and by Gemingani, computer emergency
response by Scherlis et al, ethics statements by various organizations, ACM
President's letters by Kocher, ACM forum letters, law and order for the PC
by Director, RISKS perspectives by Neumann, crimoids by Parker.
To order the book, run to your local bookstore or call ACM Press Order
Department. For credit card orders only call 800-342-6626 or in
Maryland and outside the continental US call 301-528-4261 and for mail
orders ACM Order Department, P. O. Box 64145, Baltimore, MD 21264. The
price for ACM members is $18.50 and for nonmembers $20.50. Shipping is
extra unless you send a check to the order department. BE SURE TO INCLUDE
YOUR ACM MEMBER NUMBER AND THE BOOK ORDER NUMBER (706900).
********************************************************************
>> END OF THIS FILE <<
***************************************************************************
------------------------------
From: "Martin Huber" <martin@EE.UNI-SB.DE>
Subject: CU Resources in Germany
Date: Fri, 14 Dec 90 04:29:59 +0100
********************************************************************
*** CuD #2.18: File 4 of 5: CU Resources in Germany ***
********************************************************************
%Moderators' note: We in the U.S. tend to be rather insular and often think
of the CU world as limited to the 48 contiguous states. We are constantly
reminded by cybernauts elsewhere that we should be more aggressive in
recognizing that cyberspace is non-territorial. There are numerous articles
and newsbits out there that we don't often see because of language
barriers. We *STRONGLY ENCOURAGE* readers fluent in other languages to
either send over translations or send summaries of various news stories.
In addition to their general interest, we are finding that scholars, law
students, and others find this information quite helpful. Thanks to Martin
for sending the following over. When we spoke with him, he indicated that
there is considerable activity in Europe that we neglect here in the U.S.,
and he uses a comment in Pat Townson's Telecom Digest to segue into the
discussion%.
*******************
In article <15334@accuvax.nwu.edu> (of Telecom Digest the
moderator writes):
>
>Len Rose is beginning to prepare for his defense in Baltimore in
>February. He is looking for Unix experts/gurus who would be willing to
>provide general technical testimony about Unix. If anybody is willing
>to consider it, or can provide the names of others who might be
>willing, call Len at: (708) 527-xxxx.
>
>
>Jim Thomas
>Computer Underground Digest
>
>
>[Moderator's Note: Poor Len. He's a great subject-candidate for the
>old negro spiritual song, "Nobody Knows the Trouble I've Seen". PAT]
I'll side with PAT and Len (although i didn't notice what he did, but today
a seemingly funny hack can become a ghostly nightmare real fast). Please
understand that i do not side my criminal activities, but IMHO mostly the
wrong people get caught. The real criminals nearly get away with it.
Me, i can't give him help (other than moral one). But there are some guys
here in Germany who should be able to help with real expertise on any kinds
of hacks (phone, modem, nets, UNIX boxes, other). They are called CCC
(Chaos Computer Club). Their head has been charged with breaking into some
kind of NATO network (can't remember details, ask them how it went out). I
think they won or got a vote of confidence and a slight punishment because
of having alerted security people about the possibility of the hack. Again,
to state my opinion: They don't inquire into secrets in order to steal
something/rob some bank/whatever, but merely want to enwiden their
knowledge and try to pass information to others. (See below). Oh sh..... .
Can't find any of their documents in my bureau. Let me try to squeeze my
brain:
Organization: "Chaos Computer Club"
Contact: ??????? - they all have lots of nicknames
City: "DW-2000 Hamburg"
Country: "Germany"
Check like 1-3 year old infos on the famous NATO hack. Names should appear
there. I'll be searching back home and try to come up with more info ASAP.
Maybe a secondary contact in Hannover will help: This is a german computer
magazine called "c't". It is a full-fledged computer magazine for mostly
small computers and UNIX systems. The spectrum of articles ranges from
problems in information theory over product reviews, hard- und software
tests, source code listings in different languages to science-fiction
stories. They regularly feature editorials on hacking, law problems and
such and are at the approximate level of expertise as BYTE is in the US (in
fact, the magazines cooperate). [Of course, professional level in germany
is in general not as high as in the US (the states are much larger and thus
have more experts), but in science Germany is competitive.] In their
January 1991 issue (no kidding, it appears in the mid of December!) they
published a report on a sociological study on computer freaks which was
carried out by a german university (Univ. of Trier). In the following,
i'll give some quotations (transliterated to English):
[Note that this is done with no regard to copyright issues, i don't know
what position c't has regarding such matters, but i think it is perfectly
o.k. to translate something while crediting it to the original author. As
for publishing, you have my allowance to publish the english summary as
long as c't or the author is not affected by this move]
ARTICLE: "c't, Jan. 1990, p.44-46"
AUTHOR: "Claudia Schmidt" [Can't find her listed on the
publisher staff, seems to be an invited article, i bet she is
from the research group]
TITLE: Viele Vorurteile - Computerfreaks im Licht der Soziologie
[ premonitions abound - computer freaks seen from a sociologist's
point of view ]
The article starts:
"In a study sponsored by the Department of the Interior of the FRG
a group of scientists from the University of Trier tried to find
access to the world of computer freaks. The sociologists wanted
to gain a fundamental platform for the assessment of computer
technology und to unemotionalize the discussion on it.
Wherever computing centers are, young alert people with rugged
hair and deep-set eyes can be seen in front of computer consoles;
their arms are bent und their hands seem to be waiting for hitting
the buttons of their keyboards which they watch with the same inten-
sity a gambler watches the rooling dices. Seemingly more relaxed
they sit at desks loaded with computer listings and meditate like
scientists over cabalistic treats ....
This statement dating back to 1977 clearly demonstrates the
premonitions which usually are ascribed to computer freaks[1].
'Pseudo-empirical criticism on culture, mythos-conserving hearsay!'
it is termed by the authors of a 300-page report of the University
of Trier[2]. People are adopting fancy images [of freaks] all too
eagerly: most of the statements suffer from a pseudo-scientific
method of 'associative reasoning', the scientists claim ...
The sociologists visited the Chaos Communication Congress 1989
in Hamburg, ..., 'in order to get a lasting impression of the
productivity aspects of computer social life' and tested personal
attitudes of [computer] freaks in meetings with several [computer]
clubs. After field work, 62 interviews of 1 - 2 hours duration
complimented by 15 interviews gained from interviews on a BBS
were to be evaluated.
[A description of a typical freak's school and college time follows
(boring classrooms for under-rated geniuses), including the treat-
ment of the early attraction of a typical freak towards technology.
An interesting bynote states that women tend to exclude the computer
of their private live and they are said to 'be afraid to destroy
something'.
The next paragraph follows the growth of a juvenile freak to
a competent and professional specialist: ]
Evolution:
... [freaks], according to the scientists can be separated into
the classes of 'hackers', 'players', 'programmers', 'crackers' and
'crashers'.
Freaks want to use all capabilities of their machines. A high
degree of professionalism and competence, in general specialist's
knowledge, gives the benefits of good standing, being recognized
and admired among fellow professionals.
The research group noticed that the rapid evolution of technology
posed a problem. Social sciences always lag behind in assessment
of new technologies and hust helplessly see a new wave of technology
coming just as they finished evaluating it's predecessors.
Lots of questions:
The only solution to this problem is to tend towards dampening
critical opinions: Of course the freak is working all alone ...
in front of his computer, but - does he not communicate with
fellow freaks over [computer] nets?
A computer demands clear and concise commands, it cannot handle
ambiguous statements found in everyday's speech. Under the assumption
that a broad knowledge of speech is correlated with intellectual
capabilities, a person who has to adopt his syntactical capability
to abbreviations fitting a machine is in danger! ... the programming
paradigm could influence life style towards thinking in rational
terms only.
Lone guys:
On the other hand, there is a thesis that computerization is
not the reason but the effect of a culture adoring reasoning, and
that the computer is only fulfilling the wishes of men leaning
towards a technical zivilisation. ...
With the impact of lots of new media at home and at work, can
we see an 'impersonalization of learning', will the real world
be substituted by a made-up world, which is a secure place to flee
to? ... Or is this world of synthetic images the expression of a
desire to create new and singular scenarios, stimulating creativity
and emotionality in the freaks? Is not today's world by a much
higher degree plagued by rationalism and lack of emotions compared
to the computerist's world?
Summa summarum:
For public discussion, the scientists drew the following
conclusions: Since the computer is a well-known part of today's
work, it is useful for several different specialisations. To the
freak, it has become a natural part of his live and he spends a
substantial amount of time and money on it.
Only people with adequate knowledge can use a computer. A
broad knowledge of information science is indispensable for a
freak. His main method of learning is autodidactic. ... The
'process of auto-professionalisation' is found across all
social and professional levels.
Those activities do not tend to neglect leisure-time acti-
vities. Electronic media are very important, whereas books
are not so important (with the exception of cs books). Data
nets created a renaissance of the art of writing letters.
Computer freaks are not biased towards technology. From
their intimate knowledge of systems and their limitations,
their [the freaks] opinions are well balanced and often two-
sided. Dangers are seen mainly in big uncontrollable systems.
Contours of the information age of tomorrow are seen as changing
and not subject to forecast or planning in a deterministic way.
Methods of learning und practical work show a high degree
of personal autonomy. New forms of self-controlled and self-
confident use of communication medias are evolving hand in hand
with a culture which does not need federal regulations
(e.g. in form of laws). [because they are self-regulating, i
can't resist to make my point here]
The authors close with a proposal to the ministry of the
interior to inquire into the usefulness of computerclubs and
groups of hackers as critics of media, similar to the
function of ecologist's associations in environment.
[ The article closes with the perfectly natural observation
that the degree of weirdness and fanaticism does not vary
between philanthropists, hobby astrologicians and computer
freaks ]
[1] J. Weizenbaum, Die Macht der Computer und die Ohnmacht der Vernunft,
Frankfurt/a.M., 1977, p.160
[The power of computers and the impotence of common sense]
[2] R. Eckert et al., Im Schatten der Computer-Mythen. Zur kulturellen
Praxis und den Spezialkulturen von Hackern, Programmierern,
Crackern und Spielern. Eine ethnografische Untersuchung, Trier,
[In the twilight of computer myths. On the cultural praxis and the
specialized cultures of hackers, programmers, crackers and players.
An ethnografical study]
In the following some more citations from "c't", quoted from the
indices:
- c't,October 1990,Rechtliche Rahmenbedingungen fuer die Mailbox
[ Juristical Framework for BBS ]
- c't,February 1990,Es geht um Milliarden - Niederlage der Post in einem
Modem-Prozess
[ billions on stake - telco looses lawsuit concerning modems ]
- c't,May 1989,Hackordnung - Wann wird das Strafrecht fuer Datenreisende
zur Falle?
[ hacker's laws - when do hackers get trapped in penal law? ]
* This is written by a lawyer and treates the relationship *
* between german penal law and hacker's activities. - excellent. *
- c't,July 1988,Latente Bedrohung - Ueber die Verletzlichkeit der
Informationsgesellschaft
[ sleeping danger - about the vulnerability of information culture ]
* This is an interview with Prof. Dr. Klaus Brunnstein, Univ. of
* Hamburg, Inst. for applied computer science. He is specialising
* in the field of computer crimes and the security of computer systems
* Maybe a candidate for expert opinion?
The publishing company is:
"Verlag Heinz Heise GmbH"
"Postfach 610407"
"DW-3000 Hannover 61"
Tel. ++49/511/54747-10 (PBX with direct)
Fax ++49/511/54747-33 (call extensions)
The editor is:
"Christian Persson" extension -10
The vice editors are:
"Andreas Burgwitz" extension -12
"Detlef Grell", MSEE extension -13
They are reachable on "CosmoNet":
T. ++49/511/555398 300 Baud [ In fact, i think it is *their* BBS
T. ++49/511/555392 300 Baud ask PAT or other netlanders for
T. ++49/511/555686 1200 Baud more info. CosmoNet is well used in
T. ++49/511/555630 1200 Baud Germany, maybe even Europe ]
T. ++49/511/555302 2400 Baud
Datex-P NUA: 45511090835 [ This is the german packet switching
network. I have no idea of how to
access it from overseas, but a friend of mine working in CA, USA
should know it. If you need an european mail feed for this, i have
access (in principle) to internet, bitnet, uucp and thus should be
able to reach every german host. However, the transition from
%internet,bitnet,uucp% to e.g. CosmoNet is newland for me. ]
I'll stop here. I have all of the cited articles in my bookshelf.
I have a FAX and a copier around. So if Len wants to have some, he
should phone / FAX / mail me. Of course, translations are better to
be done by somebody which is a native english speaker. I can help
with nasty german sentences, no problem (with lightspeed communication?
- never!). Anyway, i'll help what i can, sticking to the old prin-
ciple: in dubio pro reo.
--
/---------------------------------
Martin / Martin Huber %
%----------------------------/ Univ. of Saarland %
%email: mahu@ee.uni-sb.de Dept. of Electr. Eng. %
%Tel: ++49/681/302-3574 D-66 Saarbruecken 11 %
%FAX: ++49/681/302-2678 Germany %
********************************************************************
>> END OF THIS FILE <<
***************************************************************************
------------------------------
From: Dark Adept (Ripco-312-528-5020)
Subject: Trade Secrets; When are they Bad?
Date: Sat, 1 Dec 90 1:38:06 CST
********************************************************************
*** CuD #2.18: File 5 of 5: Trade Secrets: When are they Bad? ***
********************************************************************
Trade Secrets: When are they bad?
by
The Dark Adept
A trade secret is a method or procedure or information used by a company to
obtain profit. The law protects trade secrets through copyrighting and
patenting and various other laws. The main reason a company protects this
type of information is to stop competitors from producing the same product
thereby taking away from its profits. The main reason the government
protects the rights of the company to protect this information is to
promote innovation and progress (at least according to the U.S.
Constitution). But, there are times when copyrighting and patenting reduce
profits and restrict progress and innovation.
The User Interface
==================
One of the most important aspects of a computer program is the user
interface (the way in which the user is allowed to interact with the
computer). Ideally, a program should be able to perform complex tasks and
remain user-friendly. However, the user interface does not affect the way
in which the program completes its task. Two different programs with the
same user interface can perform the same task in two different ways. One
might be better or faster at the task than the other. Conversely, two
programs that perform different tasks may have the same user interface.
The point is that the user interface is generic. It can be applied to many
different programs without changing the value of the program. It merely
enhances or detracts from the program.
In the same way, the user interface of any product does not change the
integral operation of the product. Take the automobile, for example.
In all automobiles the user interface is the same. There is a wheel you
turn for direction. There are pedals on the floor to control speed, etc.
The quality of the automobiles are not judged for value by the user
interface, but by how the automobile responds to input from the user.
How fast it goes, how durable it is, etc., these are the qualities by how
an automobile is selected for purchase, and not by the fact that it has
a steering wheel. One may take this analogy further by comparing automatic
transmissions against stick-shifts. Neither changes the performance of the
car in a radical way. A purchaser selects automatic or manual as a matter
of either aesthetic preference or familiarity. If the buyer prefers stick
over automatic, but the car with the stick is way behind the automatic
in terms of performance, he would generally choose the automatic since he
is buying the car to perform a task. The way the car performs the task
is more important than how he tells the car to perform the task as long as
both are equally intelligible to the car.
Can you see the point I am trying to make? A program can work either through
a command line interface, a key-stroke interface, or a GUI (Graphic User
Interface). None of these change the performance of the program to any
great extent. They merely change the aesthetics and the ease of use. The
interface should not be allowed to be protected under law. To do so would
interfere with innovation and progress without conclusively affecting the
profits of a company. If company A holds the rights to the best interface,
but their program is worthless, then company B will still make more profit.
If it is truly the best interface possible, then progress would be slowed
since people would have to learn many different types of interfaces to go
from one program to another. Clearly, it would be in the interest of all
concerned to leave the interface open for public usage and only protect
the code behind the interface.
Algorithms
==========
To protect an algorithm is to, in effect, copyright a mathematical equation.
Since all algorithms reduce down to a mathematical model, that model would
not be able to be implemented except by whoever holds the rights. This
would greatly reduce the productivity of mathematicians. Imagine if
someone patented Integral Calculus. Don't laugh. IC is an algorithm
like any other. It is a solution to a problem. Or what if someone
patented the internal combustion engine? Most of us would be walking.
But like the engine, it is not the algorithm of the engine that is important,
but how it is implemented. All engines work on the same basic principle, but
they do so differently. This is why one engine works better than the other.
This is why a buyer would choose one engine over another.
Source Code
===========
While source code should generally be protected, there are times when it
may be more profitable to a company to release either the source code or
important information pertaining to it. A prime example is IBM and Apple.
Apple chose to keep their operating system under close wraps. IBM, in their
usual wisdom, chose to let some of it fly. This caused the market to be
flooded with "clone" PC's. Given a choice, most people bought PC's or
PC-compatibles. This generated more third-party support and even higher
sales. What is the best selling computer today? You got it. Who
practically sets the standard for every computer that comes out today? Good
guess. While some may say that IBM could have made more money if they
had not released the information, I grant you that. But, IBM has something
that Apple does not: insured existance. There is no way that IBM could
be jettisoned from the marketplace. IBM has insured that they will exist
long after Apple closes its doors. All they have to do is keep putting
out downward compatible products and people will continue to buy PC's.
The Hacker Ethic Vs. The Business Ethic
=======================================
Hackers (including programmers) view computer programs different than
businessmen do. Bits and pieces of programs are meant to be shared in order
to further innovation and increase productivity. Programmers have always
shared algorithms, traded libraries, and swapped subroutines. They do this
so that they do not have to "reinvent the wheel" every time they write a
program. If something is very basic and can be used over and over in
many programs, then programmers share it with others.
Businessmen, on the other hand, are not motivated by sharing but by making
a dollar. There is nothing wrong with this at all. The problem is that
sometimes making a dollar in the short run can be detrimental to the overall
market in the long run. Being misers with algorithms will force everyone
to spend a lot of time and MONEY to develop new products. If something
is so basic and so useful, then it should be allowed the freedom to be
developed to its fullest. Only then will the real bucks come rolling in.
The solution to this paradox is that hackers have to learn that companies
need money to keep going, and businessmen have to learn that computers
cannot be treated like most products. A compromise needs to be reached so
that both profits and innovation are protected without destroying each. Not
everything should be given away, and not everything should be kept secret.
Both should collaborate on deciding what to release and what to keep.
Lately, it has been more of a business decision than a programmer's, and
the imbalance is not good.
Conclusion
==========
There are more things to consider when protecting something in a computer
program than next quarter's profits. In the long run, it may be more
profitable to let the competition use some of your ideas. The more people
who are able to easily access computers, the bigger the market, and the
more profit. If only one company has a good interface and the price is
high, the market will be small. Obviously, not everything should be
allowed to be used freely, but the decision-making process should include
more than looking at the bottom line.
A fond farewell.....
====================
This is the last in my series of articles for CuD. I have tried to show
another side of the Underground than the one that is commonplace. There
is much more to the Underground than hacking and phreaking. It is composed
of many intelligent people who can make a valuable contribution to the
computer industry. They should not be thrown to the wayside as they have
been. While I am not a spokesman for anyone down here, and I am certainly
long-winded and less intelligent than many, I sincerely hope that these
articles have made an impact on someone somewhere.
I would also hope that I have inspired other members of the Underground
to show that they are more than people who break into systems. This
is your chance: start showing people what you really are, and then they
will take you seriously. You can do a better job than I did; I know you
can! Go out there and do it!!!
I would especially like to thank CuD and Jim Thomas for allowing me to
espouse my drivel in their fine digest. A finer and fairer publication
could not be found anywhere. I would also like to thank Dr. Ripco since
it was his BBS that first connected me to Underground when I was a mere
pup of 15, 6 years ago. I have yet to see a BBS that compares in quality
in all my years down here.
As for my future plans, I will be taking a sabbatical from being active in
the Underground for a while. I have many things to reflect over and much
to plan for my life. I have a few projects that may or may not include
programming, writing, and editing a tech journal that will contain
articles from members of the Underground of a technical nature. This
journal would be sent throughout the computer industry as a means of
communication.
I know these articles probably sucked, but I gave it my best shot.
In the words of the Darkest Adept the world has ever known:
Do what thou Wilt shall be the whole of the Law;
Love is the Law, Love under Will.
Thanks for the memories....
As always, I remain...
The Dark Adept
Email: Ripco BBS (312)-528-5020
********************************************************************
------------------------------
**END OF CuD #2.18**