Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!seismo!mimsy!chris
From: chris@mimsy.UUCP (Chris Torek)
Newsgroups: comp.misc
Subject: Re: Computer Security
Message-ID: <7293@mimsy.UUCP>
Date: Thu, 2-Jul-87 12:57:48 EDT
Article-I.D.: mimsy.7293
Posted: Thu Jul  2 12:57:48 1987
Date-Received: Sat, 4-Jul-87 13:39:50 EDT
References: <1167@copper.TEK.COM>
Organization: U of Maryland, Dept. of Computer Science, Coll. Pk., MD 20742
Lines: 42

In article <1167@copper.TEK.COM> stevesu@copper.TEK.COM (Steve Summit) writes:
>... However, there is a subtle but extremely significant
>difference between crime involving property and crime involving
>information: for many kinds of information crime, *you don't even
>know you're being robbed.* ... if files are merely perused, how
>am I to know that information has been taken?

This is indeed the point, and this demonstrates a `bug' in the
description of the crime.  The information has not been *taken*:
It has been *copied*.  The way this affects the value of the
information depends upon the information itself.  Some information
is worthless, some priceless; some becomes worthless once copied,
and some gains value with every copy. [1]

Analogies to thieves breaking into houses are further inappropriate
for another reason, one that will, with time, disappear.  This is,
quite simply, that the proverbial `kid with the modem' who dials
a number he got from a friend, sees `login:' and types `guest' and
gets in, may never have been told what he *should not* do.  The
same kid in front of the house's front door (whether open or closed
or locked) probably has a very good idea what he should not do.
It has been pressed upon him during all the years he has lived in
our society.  Just as `everyone knows' how to dial a telephone
`without being taught', [2] people know what is permitted in other
familiar situations.  Computer access is often a new situation, in
which the familiar limits do not apply.

(This does not mean unauthorised access is right.  I have personal
views that I will not explain here.)

-----
[1] An example of the last kind of information is a recommendation
that reads `Chris Torek is a wonderful Unix programmer.  If you have
any Unix problems, hire this guy, whatever his price.'  At least,
its value to *me* grows with every copy. :-)

[2] This is an utter joke to those who have never seen a telephone
before.  Too, now, in airports, you may have trouble with the new
phones.  I did.
-- 
In-Real-Life: Chris Torek, Univ of MD Comp Sci Dept (+1 301 454 7690)
Domain:	chris@mimsy.umd.edu	Path:	seismo!mimsy!chris