6

I am interested in computers and want to pursue this interest further by getting my education in programming and security. I've only just started so I'm scared that I might break some law that was not obvious to me and get into some trouble. It is not my intention to break the law like so many juvenile computer hackers intend on doing for kicks, or what have you.

The question is, where can I find the laws on computer/internet use for the U.S.A.?

4

You won't find any such single comprehensive document that compiles all potentially relevant rules and regulations.

I'd suggest familiarizing yourself with the provisions of the Computer Fraud and Abuse Act as a starting point. Researching the Aaron Swartz case will get you some fairly recent journalistic accounts of the law, how it's applied, and calls for reform.

  • As an aside, if your concern is how to learn pen testing without the potential of blundering into a technical CFAA violation by escalating your privileges on a VPS or something like that, the most obvious way would be to create your own small lab network of VMs to attack. – daffy Jul 19 '15 at 17:17
  • Also, to research case law on any matter, you can use Google Scholar: scholar.google.com. – moonman239 Nov 18 '15 at 3:53
7

Ensuring that you are compliant with all laws is a notorious problem. For example, nobody has successfully enumerated even the number of criminal laws under the U.S. (federal) code!

There's a book that delves into this problem called 3 Felonies a Day. The title alludes to the (unverifiable) suggestion that a typical person unwittingly commits three felonies a day. (There is some discussion of that at: https://skeptics.stackexchange.com/q/22530/26652)

In practice, you can look for safe harbors. For example, if you are part of an institution you can vet your planned activities with its ethics and/or legal counsel. If those activities are later found to have violated a law that approval could conceivably (but not certainly) transfer liability to the institution.

  • One reason why you can't count laws (or regulations) is that "a law" isn't a discrete unit. For example if the code says "if you do X or Y, you are a violator", is that one law or two? Often, these things are structures as "if you do any of [some scope] then something else", which eventually leads to punishment. – user6726 Mar 26 '17 at 16:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.