OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Everhart, Glenn (FUSA) (GlennEverhart_at_firstusa.com)
Date: Mon Sep 16 2002 - 10:05:30 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    A minor point:
    It is a good idea to make certain that LE people and possibly other
    legal folks realize that a "honeypot" does not do anything to
    attract attention. Unlike a physical honey-pot, there is no odor
    to attract bugs; the attackers have to search for the machine.

    I've heard a number of such folks who were under the impression a
    honeypot does something to actively bring people to it.

    This can affect willingness to prosecute, going to issues of whether
    any implied consent to break in might have existed.

    -----Original Message-----
    From: Fred Cohen [mailto:fcall.net]
    Sent: Monday, September 16, 2002 1:07 AM
    To: honeypotssecurityfocus.com
    Subject: More misconceptions about tainted evidence

    > Note that it's actually pretty easy for a private individual or
    corporation
    > to be considered "acting under color of law" - any evidence that you
    collect
    > with the intent of turning over to law enforcement is probably tainted.

    Actually, as far as I can tell, this is completely wrong. Just because
    you providfe LE with evidence does not mean you are working for them.
    If it did, then any corporation who called LE on a criminal matter would
    be tainting evidence. The law on admissability of evidence is, in
    essence, that any information collected in the regular course of
    business is a 'normal business record' and is admissable under the
    business records exception to heresay (it must be accompanied by expert
    witness testimony as all such evidence must be).

    **********************************************************************
    This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you
    **********************************************************************