-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
1/27
These Go To Eleven:
When the Law Goes Too Far
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
2/27
Fifth Amendment
"No person shall...bedeprived of life, liberty,
or property, without due
process of law..."
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
3/27
Michael theprez98 Schearer
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
4/27
Why you should be skeptical
(Y)
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
5/27
LEGAL ASPECTS OF BOTNETTAKEDOWNS
Part One
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
6/27
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
7/27
Knock, knock, Neo.
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
8/27
Video:
http://www.youtube.com/watch?v=BZdLl6yw
pW0
http://www.youtube.com/watch?v=BZdLl6ywpW0http://www.youtube.com/watch?v=BZdLl6ywpW0http://www.youtube.com/watch?v=BZdLl6ywpW0http://www.youtube.com/watch?v=BZdLl6ywpW0 -
7/29/2019 These Go To Eleven: When the Law Goes Too Far
9/27
Botnet Takedowns:
The Players
Project MARS (Microsoft Active Response for
Security)
Microsoft Digital Crimes Unit Microsoft Malware Protection Center
Customer Support Services
Trustworthy Computing
Ex Parte Temporary RestrainingOrder (FRCP Rule 65)extraordinary remedy
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
10/27
Botnet Takedowns:
The Themes
Notice
Opportunity to be Heard
Jurisdiction Effectiveness
Public Relations
Impact/Compromise Investigations
Role of the Private Actor
Microsoft vs. less experienced company
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
11/27
Botnet Takedowns
Mar 2010: Waledac
Mar 2011: Rustock
Sep 2011: Kelihos (.b/.c)Sep 2012: Nitol
Mar 2012: Zeus (partial)
Feb 2013: Bamital
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
12/27
Waledac
via Brian Krebs
Source: Palo Alto Networks
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
13/27
Rustock
How effective are Microsofts tactics?
Source: Composite Blocking List
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
14/27
Kelihos
How effective are
Microsofts tactics?
Waledac 2.0?
Kelihos.a (9/11)
Kelihos.b (3/12)
Kelihos.c
Kelihos.d? Source: Microsoft complaint
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
15/27
Nitol
Started as
investigation of
counterfeit versions of
Windows
Discovered infections
through Chinesesupply chain
Source: Geek.com
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
16/27
Zeus
What is the role of the
private actor?
How does that impact
private research or law
enforcementinvestigations?
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
17/27
Bamital
How far is too far?
What is the legality of using the
botnet own communications
infrastructure to warn customers
that they were infected?
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
18/27
DOMAIN SEIZURES
Part Two
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
19/27
Domain Takedowns:
The Players
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
20/27
Domain Seizures:
The Themes
Notice
Opportunity to be Heard
Jurisdiction (.com/.net/.org) Effectiveness
Public Relations
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
21/27
Megaupload
Criminal summonsnever served
Non-infringing contentseized (KyleGoodwin)
USG recommended
25 PB of data bedeleted
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
22/27
RojaDirecta
Legal activities under
Spanish law
Extra-territorial
application of
copyright law?
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
23/27
JotForm
Seized by Secret
Service with no notice Entire domain seized
for few violations?
Never notified of
reasons for seizure
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
24/27
Dajaz1.com
Seized for contentsubmitted by artists
Court order sealed
Forfeiture extensionpapers sealed
Domain returned afterone year
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
25/27
FUTURE CONSIDERATIONS
Part Three
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
26/27
Future Considerations
Other companies (and other courts) trying
their hand
Novel becomes regular; extraordinary
becomes ordinary
Slippery slope?
Th G T El
-
7/29/2019 These Go To Eleven: When the Law Goes Too Far
27/27
These Go To Eleven:
When the Law Goes Too Far