Isn't shooting a gun at someone a matter of depressing a lever? It's about applying pressure on a lever with your finger.
>Still, I am deeply uncomfortable with a government having the authority to say, "You may not run that program."
Are you also deeply uncomfortable with a government having the authority to say "You may not press that lever".
Isn't the US firing nukes a matter of the US president entering numbers and pressing some buttons?
Isn't running into and maiming a pedestrian while driving a car at a traffic crossing a matter of actually doing nothing instead of braking?
Are you deeply uncomfortable with the thought of govt jailing you for literally doing nothing?
>many govts' attempts to ban encryption are stupid because you cannot outlaw math
Huh? You can outlaw math. It'd be a stupid idea and quite hard to successfully enforce, but you can outlaw it.
>Which is why the legality of both having and breaking encryption needs to be detached from intent.
This does not make sense at all. Otherwise there would be no legal difference between using a battering ram to break into someone's house and then claiming it was research for materials testing. It also comes down to privacy and property rights.
Case law is well settled in the physical door locks space which also applies pretty well to the digital space with a good balance between research and not breaking into others property. It's perfectly legal to crack your own NTLM hashes, and those of which you have permission to. Imagine someone going around with a saw sawing up doors and then claiming it was their right because the doors weren't properly secured and made of 12 inches of reinforced steel.
This has zero implications on crypto-research because it's always legal to try your cracking on your own encrypted data, or on others' data with their permission, like public challenges. What good will it do to extend it to everyone encrypted data?
There are also privacy and property rights issues at hand. Should you be able to crack someone's private key and impersonate them without legal issues?
Reducing something to its basics and then claiming it should be legal by ignoring the real world consequences like the GP was doing is disingenuous.
>privacy and property rights
This is precisely the issue with DMCA. It is illegal in the US to decrypt a DVD/blu-ray etc (for reference, see why fedora cannot play dvds). So what should have been a reactive law against piracy is now a proactive prohibition codified in law. That's why, laws around encryption should decide on the actions after the fact. You can then use existing law on the actions and encryption is out of the picture. In this case, the actions would be protected by free speech and other protections afforded to journalists.
Indeed, actual journalists have ethics departments that help ensure they don’t step over the line from accepting information gained illegally into encouraging people to commit illegal acts to get them information, and if they commit illegal acts to get information that is always a crime. It’s not even a grey area here.
Yes? I’d be concerned for anyone who isn’t. And to be clear... he didn’t crack it. I’ve run password hashes through rainbow tables for shits and giggles. Should I be dragged out of an embassy next?
>Isn't running into and maiming a pedestrian while driving a car at a traffic crossing a matter of actually doing nothing instead of braking? Are you deeply uncomfortable with the thought of govt jailing you for literally doing nothing?
>And to be clear... he didn’t crack it.
Attempting to commit a crime is a crime even if you failed at it.
>I’ve run password hashes through rainbow tables for shits and giggles. Should I be dragged out of an embassy next?
People shoot at the range all the time but are not prosecuted. But gun murderers are. Dont you see the difference?
Were you cracking an Administrator password of the United States Military protecting classified war logs with an intent to distribute them to the public?
What did you (intend to) do with the resulting passwords.
Luckily, intent still counts for something legally.
The state would have to argue your intent to log into their computers and you'd have the chance to respond. The jury would decide whether you meant to gain unauthorized access to a computer system or just geeked out over password cracking.
Practically, I could see things going poorly for the over-enthusiastic cracker, but theoretically they'd be within their rights.
As for the more general “expression”, running a program is a function: it transforms one thing into another thing in a deterministic way. That is applying a tool: you would have to argue that the thing you were doing with it, in this case “breaking a password”, was expression, which, well, good luck with that one: you are back to trying to argue that an explicit crime is actually performance art.
All of this is just facts and tools: there is no creativity involved at any stage.
Is doing math a form of expression? Breaking a password amounts to thinking for a very long time about all the ways you could rearrange some bits, and choosing one. I'd call it an expression of preference for certain possible results over others, by way of saving one and letting the rest go.
I know, I'm laughing at the thought of framing a cracked password because you're so proud of your expressive art. Still, I am deeply uncomfortable with a government having the authority to say, "You may not run that program."