|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
From: Everhart, Glenn (FUSA) (GlennEverhart_at_firstusa.com)
Date: Mon Sep 16 2002 - 10:05:30 CDT
A minor point:
It is a good idea to make certain that LE people and possibly other
legal folks realize that a "honeypot" does not do anything to
attract attention. Unlike a physical honey-pot, there is no odor
to attract bugs; the attackers have to search for the machine.
I've heard a number of such folks who were under the impression a
honeypot does something to actively bring people to it.
This can affect willingness to prosecute, going to issues of whether
any implied consent to break in might have existed.
-----Original Message-----
From: Fred Cohen [mailto:fc
all.net]
Sent: Monday, September 16, 2002 1:07 AM
To: honeypots
securityfocus.com
Subject: More misconceptions about tainted evidence
> Note that it's actually pretty easy for a private individual or
corporation
> to be considered "acting under color of law" - any evidence that you
collect
> with the intent of turning over to law enforcement is probably tainted.
Actually, as far as I can tell, this is completely wrong. Just because
you providfe LE with evidence does not mean you are working for them.
If it did, then any corporation who called LE on a criminal matter would
be tainting evidence. The law on admissability of evidence is, in
essence, that any information collected in the regular course of
business is a 'normal business record' and is admissable under the
business records exception to heresay (it must be accompanied by expert
witness testimony as all such evidence must be).
**********************************************************************
This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you
**********************************************************************
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]