Feeds

Home Office pushes tough anti-hacker law

'Hacker tool' ban proposal provokes derision

Top three mobile application threats

The UK Government plans to toughen up computer crime laws under proposals outlined in the Police and Justice Bill on Wednesday. The bill would double the maximum jail sentence for hacking into computer systems from five years to ten years, a provision that will classify hacking as a more serious offense and make it easier to extradite computer crime suspects from overseas. Denial of service attacks, something of a grey area under current regulations, would be clearly classified as a criminal offense under amendments to the 1990 Computer Misuse Act (CMA) proposed in the bill.

Industry pressed for changes along these lines even prior to the 2004 inquiry by MPs that recommended changes to the CMA to modernise UK computer crime law. Other provisions in the bill are likely to prove far more controversial. Clause 35 of the bill contains provisions to ban the development, ownership and distribution of so-called "hacker tools".

But the clause fails to draw adequate distinction between tools which might be used for legal as well as unlawful purposes. Reg readers have been quick to point out that the distinctions between, for example, a password cracker and a password recovery tool, or a utility designed to run DOS attacks and one designed to stress-test a network, are not properly covered in the proposed legislation. Taken as read, the law might even even make use of data recovery software to bypass file access permissions and gain access to deleted data, potentially illegal.

"As far as I can see, this looks a complete dog's breakfast of a clause as it fails to consider that many so-called 'hacker tools' have perfectly legitimate uses," writes Reg reader Dave Lambert, who runs the Talk Politics blog.

Spy Blog describes the bill as a "pathetic hodge podge" that's being prepared without proper consultation. It describes Home Office attempts to modify the CMA as "ineffectual and pathetic". "This bill extends the powers of the police, mucks around with existing policing structures, creating extra bureaucracy, and contains a portmanteau of ill-thought out miscellaneous measure," Spy Blog rants.

Modifications in computer crime law make up a small, but important, section of the wide-ranging Police and Justice Bill. The bill is largely concerned with attempting to drive up standards across the police service via modifications to existing police structures and empowering communities to take an active role in tackling anti-social behavior.

Police will also get more powers, including the ability to demand passenger and crew data on journeys within the UK. Airlines and ferry companies would have to provide police with advance details of the name, date of birth and nationality of passengers in advance, The Guardian reports, adding that the measures could lead to delays at ports.

The Police and Justice Bill can be found here. ®

The Essential Guide to IT Transformation

More from The Register

next story
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
iPad? More like iFAD: We reveal why Apple ran off to IBM
But never fear fanbois, you're still lapping up iPhones, Macs
Nadella: Apps must run on ALL WINDOWS – PCs, slabs and mobes
Phone egg, meet desktop chicken - your mother
HP, Microsoft prove it again: Big Business doesn't create jobs
SMEs get lip service - what they need is dinner at the Club
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
Samsung threatens to cut ties with supplier over child labour allegations
Vows to uphold 'zero tolerance' policy on underage workers
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
You! Pirate! Stop pirating, or we shall admonish you politely. Repeatedly, if necessary
And we shall go about telling people you smell. No, not really
prev story

Whitepapers

Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.