This situation is one that brings to light many problematic aspects of international computer crime. Although there are no real solid boundaries on the internet, geographic boundaries still exist, and not all nations entertain the same legal processes that we do.

If we cannot legally execute a warrant for physical access to a non-resident's personal property without the consent of their govornment, then we should not legally be allowed to access their data either. Should we do this, then we would open a door to other govornments accessing OUR computers for a potential violation of their laws.

I believe that the grey area here is in where the crime takes place. If the crime takes place at the point of origin, then the criminals are subject only to the laws of Russia, and we have no jurisdiction to enforce the warrant. If, however, the crime takes place at the point of intrusion, our agents are subject to Russian law for the break in. It seems to be a pretty wicked Catch-22.

I guess in summary, we really need to look at some means of cooperation. Just because their govornment is slow to respond, shouldn't give us the right to circumvent it. To do so would, in my humble opinion, allow them the same rights in return, and I for one do not like the idea of anyone (especially another nation) having the right to invade my personal machine without due process.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/105/16253#16253