Legal hacking
Saturday, April 7th, 2007In 2004, Jerome Heckenkamp gained unauthorized access (colloquially, he hacked) to servers of corporations such as Qualcomm, Cygnus Solutions and eBay. Evidences of his actions were gathered also by a campus network administrator where Jerome’s computer was connected. He got them by hacking into the Heckenkamp’s Linux box. Judge Sidney R. Thomas ruled in the case United States v. Heckenkamp, 2007 U.S. App. LEXIS 7806 (9th Cir. 2007), PDF file format, that such actions were justified and did not violate the Fourth Amendment provisions.
The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.
Jeffrey Savoy’s “hacking searches” were acknowledged as “special needs” exception and therefore the FBI was not required to obtain a search warrant. Jerome Heckenkamp was convinced based on regulations included in 18 U.S.C.S. § 1030(a)(5)(B) - Computer Fraud and Abuse Act (CFAA) of 1986, Pub. L. No. 99-474, 100 Stat. 1213 (Oct. 16, 1986) amending Counterfeit Access Device and Computer Fraud and Abuse Act of 1984, Pub. L. No. 98-473, 98 Stat. 1837 (Oct. 12, 1984). In Polish law so-called “hacking” crimes are penalised by regulations included in the Act on June 6, 1997, Penal Code (Dziennik Ustaw No 88, pos. 553 on August 2, 1997, with later changes):
Article 267.
§ 1. Whoever, without being authorised to do so, acquires information not destined for him, by opening a sealed letter, or connecting to a wire that transmits information or by breaching electronic, magnetic or other special protection for that information shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.
§ 2. The same punishment shall be imposed on anyone, who, in order to acquire information to which he is not authorised to access, installs or uses tapping, visual detection or other special equipment.
§ 3. The same punishment shall be imposed on anyone, who imparts to another person the information obtained in the manner specified in § 1 or 2 discloses to another person.
§ 4. The prosecution of the offence specified in § 1 – 3 shall occur on a motion of the injured person.
In the international legal context such crimes were first covered by the Council of Europe Convention on Cybercrime signed in Budapest on November 23, 2001, CETS No. 185. The United States was one of 30 countries that signed the Convention on November 23, 2001. On August 2, 2006, the US Sentat ratified it.
You may find more information about the Fourth Amendment at www.findlaw.com website.
