{"id":237290,"date":"2021-04-28T09:53:34","date_gmt":"2021-04-28T06:53:34","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/are-we-safer-with-the-fbi-accessing-our-computers-without-consent\/"},"modified":"2021-04-28T09:53:34","modified_gmt":"2021-04-28T06:53:34","slug":"are-we-safer-with-the-fbi-accessing-our-computers-without-consent","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/are-we-safer-with-the-fbi-accessing-our-computers-without-consent\/","title":{"rendered":"#Are we safer with the FBI accessing our computers without consent?"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6af75ade7b057\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6af75ade7b057\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/are-we-safer-with-the-fbi-accessing-our-computers-without-consent\/#Exchange_server_hack\" >Exchange server hack<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/are-we-safer-with-the-fbi-accessing-our-computers-without-consent\/#Active_defense\" >Active defense<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/buradabiliyorum.com\/en\/are-we-safer-with-the-fbi-accessing-our-computers-without-consent\/#The_law_and_the_courts\" >The law and the courts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/buradabiliyorum.com\/en\/are-we-safer-with-the-fbi-accessing-our-computers-without-consent\/#National_security_and_the_private_sector\" >National security and the private sector<\/a><\/li><\/ul><\/nav><\/div>\n<p>&#8220;<strong>#Are we safer with the FBI accessing our computers without consent?<\/strong>&#8221;<\/p>\n<div>The FBI has the authority right now to access privately owned computers without their owners\u2019 knowledge or consent, and to delete software. It\u2019s part of a government effort to contain the continuing attacks on corporate networks running Microsoft Exchange software, and it\u2019s an unprecedented intrusion that\u2019s raising legal questions about just how far the government can go.<\/p>\n<p>On April 9, the United States District Court for the Southern District of Texas <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>roved a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.justice.gov\/opa\/press-release\/file\/1386631\/download\">search warrant<\/a> allowing the U.S. Department of Justice <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.justice.gov\/opa\/pr\/justice-department-announces-court-authorized-effort-disrupt-exploitation-microsoft-exchange\">to carry out the operation<\/a>.<\/p>\n<p>The software the FBI is deleting is malicious code installed by hackers to take control of a victim\u2019s computer. Hackers have used the code to access vast amounts of private email messages and to launch ransomware attacks. The authority the Justice Department relied on and the way the FBI carried out the operation set important precedents. They also raise questions about the power of courts to regulate cybersecurity without the consent of the owners of the targeted computers.<\/p>\n<p>As a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/ssrn.com\/author=1195469\">cybersecurity scholar<\/a>, I have studied this type of cybersecurity, dubbed <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/scholarship.law.upenn.edu\/jil\/vol41\/iss2\/3\/\">active defense<\/a>, and how the public and private sectors have relied on each other for cybersecurity for years. Public-private cooperation is critical for managing the wide range of cyber threats facing the U.S. But it poses challenges, including determining how far the government can go in the name of national security. It\u2019s also important for Congress and the courts to oversee this balancing act.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Exchange_server_hack\"><\/span>Exchange server hack<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Since at least January 2021, hacking groups have been using zero-day exploits \u2013 meaning previously unknown vulnerabilities \u2013 in Microsoft Exchange to access email accounts. The hackers used this access to insert <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/us-cert.cisa.gov\/ncas\/alerts\/TA15-314A\">web shells<\/a>, software that allows them to remotely control the compromised systems and networks. Tens of thousands of email users and organizations have been <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/2021\/03\/at-least-30000-u-s-organizations-newly-hacked-via-holes-in-microsofts-email-software\/\">affected<\/a>. One result has been a <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/watch-movies-tv-seriess\/\" data-internallinksmanager029f6b8e52c=\"8\" title=\"Watch Movies &amp; TV Series\" target=\"_blank\" rel=\"noopener\">series<\/a> of <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/arstechnica.com\/gadgets\/2021\/03\/ransomware-operators-are-piling-on-already-hacked-exchange-servers\/\">ransomware attacks<\/a>, which encrypt victims\u2019 files and hold the keys to decrypt them for ransom.<\/p>\n<p>On March 2, 2021, Microsoft announced that a hacking group code named <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.microsoft.com\/security\/blog\/2021\/03\/02\/hafnium-targeting-exchange-servers\/\">Hafnium<\/a> had been <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.microsoft.com\/security\/blog\/2021\/03\/02\/hafnium-targeting-exchange-servers\/\">using multiple zero-day exploits<\/a> to install web shells with unique file names and paths. This makes it challenging for administrators to remove the malicious code, even with the tools and patches Microsoft and cybersecurity firms have released to assist the victims.<\/p>\n<p>The FBI is accessing <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.zdnet.com\/article\/the-fbi-removed-hacker-backdoors-from-vulnerable-microsoft-exchange-servers-not-everyone-likes-the-idea\/\">hundreds of these mail servers<\/a> in corporate networks. The search warrant allows the FBI to access the web shells, enter the previously discovered password for a web shell, make a copy for evidence, and then delete the web shell. The FBI, though, was not authorized to remove any other malware that hackers might have installed during the breach or otherwise access the contents of the servers.<\/p>\n<p>What makes this case unique is both the scope of the FBI\u2019s actions to remove the web shells and the unprecedented intrusion into privately owned computers without the owners\u2019 consent. The FBI undertook the operation without consent because of the large number of unprotected systems throughout U.S. networks and the urgency of the threat.<\/p>\n<p>The action demonstrates the Justice Department\u2019s commitment to using \u201call of our legal tools,\u201d Assistant Attorney <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/general\/\" data-internallinksmanager029f6b8e52c=\"3\" title=\"General\" target=\"_blank\" rel=\"noopener\">General<\/a> John Demers said in a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.justice.gov\/opa\/pr\/justice-department-announces-court-authorized-effort-disrupt-exploitation-microsoft-exchange\">statement<\/a>.<\/p>\n<p>The total number of compromised firms remains murky given that the figure is redacted in the court documents, but it could be as many as 68,000 Exchange servers, which would potentially affect millions of email users. New malware attacks on Microsoft Exchange servers continue to <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/us-cert.cisa.gov\/ncas\/current-activity\/2021\/04\/12\/updates-microsoft-exchange-server-vulnerabilities\">surface<\/a>, and the FBI is continuing to undertake court-authorized action to remove the malicious code.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Active_defense\"><\/span>Active defense<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The shift toward a more active U.S. cybersecurity strategy began under the Obama administration with the <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.cybercom.mil\/About\/History\/\">establishment of U.S. Cyber Command<\/a> in 2010. The emphasis at the time remained on deterrence by denial, meaning making computers harder to hack. This includes using a layered defense, also known as <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.cisecurity.org\/spotlight\/cybersecurity-spotlight-defense-in-depth-did\/#:%7E:text=Defense%20in%20Depth%20(DiD)%20refers,network%20and%20the%20data%20within.\">defense in depth<\/a>, to make it more difficult, expensive and time-consuming to break into networks.<\/p>\n<p>The alternative is to go after hackers, a strategy dubbed <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.lawfareblog.com\/operationalizing-defend-forward-how-concept-works-change-adversary-behavior\">defend forward<\/a>. Since 2018, the U.S. government has ramped up defend forward, as seen in U.S. <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.nytimes.com\/2020\/11\/02\/us\/politics\/cyber-command-hackers-russia.html\">actions against Russian groups<\/a> in the 2018 and 2020 election cycles in which U.S. Cyber Command personnel identified and disrupted Russian online propaganda campaigns.<\/p>\n<p>The Biden administration has continued this trend, coupled with <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.whitehouse.gov\/briefing-room\/statements-releases\/2021\/04\/15\/fact-sheet-imposing-costs-for-harmful-foreign-activities-by-the-russian-government\/\">new sanctions<\/a> on Russia in response to the <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.npr.org\/2021\/04\/16\/985439655\/a-worst-nightmare-cyberattack-the-untold-story-of-the-solarwinds-hack\">SolarWinds espionage campaign<\/a>. That attack, which the U.S. government attributes to hackers connected to Russian intelligence services, used vulnerabilities in commercial software to break into U.S. government agencies. This new FBI action similarly pushes the envelope of active defense, in this case to clean up the aftermath of domestic breaches, though without the awareness \u2013 or consent \u2013 of the affected organizations.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_law_and_the_courts\"><\/span>The law and the courts<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/fas.org\/sgp\/crs\/misc\/R46536.pdf\">Computer Fraud and Abuse Act<\/a> generally makes it illegal to access a computer without authorization. This law, though, does not apply to the government.<\/p>\n<p>The FBI has the power to remove malicious code from private computers without permission thanks to <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.bankinfosecurity.com\/fbi-removing-web-shells-from-infected-exchange-servers-a-16399\">a change<\/a> in 2016 to Rule 41 of the Federal Rules of Criminal Procedure. This revision was designed in part to enable the U.S. government to more easily battle botnets and aid other cybercrime investigations in situations where the perpetrators\u2019 locations remained unknown. It permits the FBI to access computers outside the jurisdiction of a search warrant.<\/p>\n<p>This action highlights the precedent, and power, of courts becoming de facto cybersecurity regulators that can empower the Department of Justice to clean up large-scale deployments of malicious code of the kind seen in the Exchange hack. In 2017, for example, the FBI made use of the expanded Rule 41 to <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.techdirt.com\/articles\/20170411\/09411837126\/fbi-tries-new-rule-41-changes-size-fight-against-long-running-botnet.shtml\">take down<\/a> a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.wired.com\/2017\/04\/fbi-took-russias-spam-king-massive-botnet\/\">global botnet<\/a> that harvested victims information and used their computers to send spam emails.<\/p>\n<p>Important legal issues remain unresolved with the FBI\u2019s current operation. One is the question of liability. What if, for example, the privately owned computers were damaged in the FBI\u2019s process of removing the malicious code? Another issue is how to balance private property rights against national security needs in cases like this. What is clear, though, is that under this authority the FBI could hack into computers at will, and without the need for a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.techdirt.com\/articles\/20170411\/09411837126\/fbi-tries-new-rule-41-changes-size-fight-against-long-running-botnet.shtml\">specific search warrant<\/a>.<\/p>\n<p>[<em>Get our best <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/sciencee\/\" data-internallinksmanager029f6b8e52c=\"5\" title=\"Science\" target=\"_blank\" rel=\"noopener\">science<\/a>, health and <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/technology\/\" data-internallinksmanager029f6b8e52c=\"4\" title=\"Technology\" target=\"_blank\" rel=\"noopener\">technology<\/a> stories.<\/em><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/theconversation.com\/us\/newsletters\/science-editors-picks-71\/?utm_source=TCUS&amp;utm_medium=inline-link&amp;utm_campaign=newsletter-text&amp;utm_content=science-best\">Sign up for The Conversation\u2019s science newsletter<\/a>.]<\/p>\n<h2><span class=\"ez-toc-section\" id=\"National_security_and_the_private_sector\"><\/span>National security and the private sector<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Rob Joyce, NSA\u2019s cybersecurity director, said that <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.cbsnews.com\/news\/nsa-microsoft-vulnerabilities-microsoft-exchange-email-app\/\">cybersecurity is national security<\/a>. This statement may seem uncontroversial. But it does portend a sea change in the government\u2019s responsibility for cybersecurity, which has largely been left up to the private sector.<\/p>\n<p>Much of U.S. critical infrastructure, which includes computer networks, is in <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.fema.gov\/pdf\/about\/programs\/oppa\/critical_infrastructure_paper.pdf\">private hands<\/a>. Yet companies have not always made the necessary investments to protect their customers. This raises the question of whether there has been a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.mercatus.org\/publications\/technology-and-innovation\/there-market-failure-cybersecurity\">market failure<\/a> in cybersecurity where economic incentives haven\u2019t been sufficient to result in adequate cyber defenses. With the FBI\u2019s actions, the Biden administration may be implicitly acknowledging such a market failure.<!-- Below is The Conversation's page counter tag. Please DO NOT REMOVE. --><img loading=\"lazy\" decoding=\"async\" style=\"border: none !important; box-shadow: none !important; margin: 0 !important; max-height: 1px !important; max-width: 1px !important; min-height: 1px !important; min-width: 1px !important; opacity: 0 !important; outline: none !important; padding: 0 !important; text-shadow: none !important;\" src=\"https:\/\/counter.theconversation.com\/content\/159185\/count.gif?distributor=republish-lightbox-basic\" alt=\"The Conversation\" width=\"1\" height=\"1\" class=\"lazyreplaced\" srcset=\"\"\/><!-- End of code. If you don't see any code above, please get new code from the Advanced tab after you click the republish button. The page counter does not collect any personal data. More info: https:\/\/theconversation.com\/republishing-guidelines --><\/p>\n<p><em>This article by\u00a0<a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/theconversation.com\/profiles\/scott-shackelford-335009\">Scott Shackelford<\/a>, Associate Professor of Business Law and Ethics; Executive Director, Ostrom Workshop; Cybersecurity Program Chair, IU-Bloomington, <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/theconversation.com\/institutions\/indiana-university-1368\">Indiana University<\/a>,\u00a0is republished from <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/theconversation.com\">The Conversation<\/a> under a Creative Commons license. Read the <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/theconversation.com\/the-fbi-is-breaking-into-corporate-computers-to-remove-malicious-code-smart-cyber-defense-or-government-overreach-159185\">original article<\/a>.<\/em><\/p>\n<\/div>\n<p><script data-src=\"https:\/\/connect.facebook.net\/en_US\/sdk.js#xfbml=1&amp;appId=378011798897423&amp;version=v2.6\" id=\"socialSrcFacebook\" type=\"text\/template\"><\/script><\/p>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong>\n<\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/technology\/\" target=\"_blank\" rel=\"noopener\">Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/thenextweb.com\/news\/are-we-safer-with-the-fbi-accessing-our-computers-without-consent-syndication\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;#Are we safer with the FBI accessing our computers without consent?&#8221; The FBI has the authority right now to access privately owned computers without their owners\u2019 knowledge or consent, and to delete software. It\u2019s part of a government effort to contain the continuing attacks on corporate networks running Microsoft Exchange software, and it\u2019s an unprecedented&#8230;<\/p>\n","protected":false},"author":1,"featured_media":237291,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/img-cdn.tnwcdn.com\/image\/tnw?filter_last=1&fit=1280,640&url=https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2021\/04\/Dark-computer-keyboard-quinton-coetzee-u-n1AFjUclo-unsplash.jpg&signature=56671e50489b53798e396f825976358f","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-237290","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/237290","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=237290"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/237290\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/237291"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=237290"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=237290"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=237290"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}