I fail to get outraged over the FBI's (very clever) way of getting these bozos off the Net.

1. They aren't American citizens; they don't enjoy the rights of Americans. If these guys were terrorists and the FBI had the opportunity to infiltrate their cells, but dropped the ball, everyone would be in an uproar. Who draws the line on how many rights non-American criminals get? Should we extend our Constitution to accommodate the world?

2. They had absolutely no expectation of privacy whatsoever. And yes this applies to Hotmail from work. If an employee is suspected of stealing trade secrets, and I capture her Hotmail password, I'm going to (with the legal and HR dept's blessing) access her account looking for evidence of the theft. She shouldn't have logged in from company resources. In 8 years in InfoSec I've never seen a security policy that allows Hotmail from company resources.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/105/16247#16247