News for hackers. Stuff that matters.
Re:Lawyers threaten researcher over key-cloning bug in high-... by jonathanmayer on Tuesday May 05, 2015 @09:42PM (#9496123)
(Background: I'm a computer security researcher and lawyer at Stanford.)

When a security researcher gets threatened, there's a tendency to lambast the lawyers. I think that's unfortunate.

It is, very often, the client that demands an aggressive response. A lawyer should counsel against, since nastygrams to researchers tend to summon negative attention. Not being a jerk is also a plus.

That said, if a client insists--and they often do--the lawyers have little choice. Professional ethics generally require following the client's direction, and there isn't sufficient time to withdraw as counsel.

So, for the most part: Don't blame the lawyers, blame the DMCA. It's the law that's broken.

Re:Lawyers threaten researcher over key-cloning bug in high-... by click170 on Tuesday May 05, 2015 @09:46PM (#9496135)
That's a fair argument for not blaming the lawyers. But I don't think that line of reasoning deflects blame away from the company demanding they pursue legal action.
Re:Lawyers threaten researcher over key-cloning bug in high-... by higherpurpose on Wednesday May 06, 2015 @01:14AM (#9496704)
What about when EFF tries to kill bogus patents and trial lawyers lobby against it because they make too much money from bogus patents? Can we blame then lawyers then?

What I'm trying to say is that perhaps the sometimes it's not just the law's fault - but the lawyers also like having said law and abusing it.

Also, this is going to get even worse if Obama has his way with the new "enhanced" CFAA law that can jail people even for breaking a company's ToS.

Re:Lawyers threaten researcher over key-cloning bug in high-... by shaunol on Tuesday May 05, 2015 @09:51PM (#9496151)
Is it generally a lawyer's job to advise a client when a case may attract negative publicity? Do they even care?
Re:Lawyers threaten researcher over key-cloning bug in high-... by socceroos on Wednesday May 06, 2015 @01:31AM (#9496740)
I'm pretty sure that 'cha-ching' is mostly what matters. Hate to be cynical but..
Re:Lawyers threaten researcher over key-cloning bug in high-... by imglorp on Wednesday May 06, 2015 @10:13AM (#9498733)
It's a motivator. Counsel gets paid much more to bring a suit than to smack sense into in its client.
Re:Lawyers threaten researcher over key-cloning bug in high-... by 0xdeadbeefbabe on Wednesday May 06, 2015 @12:58PM (#9500058)
At some point, does counsel have enough money to choose smacking instead of more pay?
Re:Lawyers threaten researcher over key-cloning bug in high-... by eli on Wednesday May 06, 2015 @05:23AM (#9497416)
Yes, of course. Advising clients to take actions that make them look bad doesn't sound like a way to expand your practice.
Re:Lawyers threaten researcher over key-cloning bug in high-... by thaumasiotes on Wednesday May 06, 2015 @02:51AM (#9496948)
Hmmm... compare http://www.loweringthebar.net/2015/03/obligation-to-make-sen... .

According to that one, it is not acceptable for a lawyer to file the petition his client wants him to file, if that petition doesn't meet the court's standards. If judges can censure lawyers for acceding to their clients' demands, so can the rest of us.

How much time does it take to withdraw as counsel?

Re:Lawyers threaten researcher over key-cloning bug in high-... by mkopinsky on Wednesday May 06, 2015 @03:44AM (#9497110)
There's a big difference between a court filing and lawyerly nastygram. By sending inappropriate nastygrams you're not wasting the court's time.
Re:Lawyers threaten researcher over key-cloning bug in high-... by thaumasiotes on Wednesday May 06, 2015 @05:10AM (#9497369)
I can see why the judge would see this as an important difference, but I don't see that it actually is one. Why do I care which option wastes the court's time?
Re:Lawyers threaten researcher over key-cloning bug in high-... by madez on Tuesday May 05, 2015 @10:08PM (#9496214)
You have responsability for your actions even if you're legaly forced to them. This sane principle was officialized in the Nuremberg trials [1].

Edit0: In fact, the principles were more specific to international law vs national law and orders. However, the idea behind is still sane even if you don't violate international law.

Edit1: It's about recognizing personal responsibility.

Edit2: Those who disagree, why?

[1] http://en.m.wikipedia.org/wiki/Nuremberg_principles

Re:Lawyers threaten researcher over key-cloning bug in high-... by kemitchell on Wednesday May 06, 2015 @12:14AM (#9496559)
Nuremberg? Wasn't the story about computer nerds or something?

http://www.americanbar.org/groups/professional_responsibilit...

Many state bar associations have rules like that one. Lawyers can make good-faith arguments that their client's behavior isn't illegal. They can't break the law for their clients or help their clients break the law.

No one should be stuck, unable to get a lawyer and put up a fair legal fight, just because some part of the population condemns them as amoral, but can't pass a law expressing that condemnation that stands up to civil liberties challenge. Lawyers should serve hated people, too, and ideally do for them just as they would do for themselves if they understood the law and the system.

Lawyers who can do that for truly loathsome clients are superheroes. They often set aside deep feelings and strongly held personal convictions in the service of the greater value of a fairer legal system. It's a real-life Gom Jabbar test, and repeat sittings have driven many good lawyers to self-destruction, one way or another.

So: If you don't want lawyers helping assholes, try and pass a law against being an asshole. It would be vague. Prejudiced assholes would wield it against legitimate non-assholes. Good lawyers defending actual assholes would kill it in court.

More succinctly: https://youtu.be/WMqReTJkjjg?t=2m10s

Re:Lawyers threaten researcher over key-cloning bug in high-... by brownbat on Tuesday May 05, 2015 @11:31PM (#9496460)
> Those who disagree, why?

They probably feel that the Nuremberg trials are a hyperbolic example here, and worry that line of argument brushes a little too close to Godwin's Law.

Upshot, we probably all agree with you that everyone has personal responsibility for their actions. There are still situations where we want attorneys to listen to their clients though.

Re:Lawyers threaten researcher over key-cloning bug in high-... by Lawtonfogle on Wednesday May 06, 2015 @10:44AM (#9498974)
Godwin's law is a overused to shut down legitimate topics. And while the point may be the most extreme, it is still a very valid point. If one wants to say it is different, one needs to articulate why.
Re:Lawyers threaten researcher over key-cloning bug in high-... by madez on Wednesday May 06, 2015 @11:00AM (#9499115)
Thank you for bringing sense into this discussion.

I wouldn't say extreme, but fundamental. I referenced the Nuremberg Principles because they are so fundamental and I genuinely don't know a better example.

Several people in the community misuse down-votes. They down-vote on-topic, constructive and serious discussions which disagree with their opinion instead of simply articulating their criticism.

Re:Lawyers threaten researcher over key-cloning bug in high-... by 0xdeadbeefbabe on Wednesday May 06, 2015 @12:49PM (#9499980)
Godwin said, "I wanted folks who glibly compared someone else to Hitler or to Nazis to think a bit harder about the Holocaust"[0]

I suppose because "Godwin's law" is in the dictionary now you are free to add meaning as you like, but I wouldn't be happy about this stackoverlow like meta trivial pursuit at the expense of logic if I were Godwin.

[0] http://en.wikipedia.org/wiki/Godwin%27s_law

Re:Lawyers threaten researcher over key-cloning bug in high-... by qbrass on Wednesday May 06, 2015 @02:15PM (#9500666)
He understood memes and introduced species enough to introduce a meme as a predator to a different meme, but ignored that introduced species with no predators quickly become invasive themselves.

So if he's not happy, he's only got himself to blame.

Re:Lawyers threaten researcher over key-cloning bug in high-... by madez on Wednesday May 06, 2015 @02:22PM (#9500717)
But it has a predator: critical thought.
Re:Lawyers threaten researcher over key-cloning bug in high-... by madez on Wednesday May 06, 2015 @07:39AM (#9497862)
Do you have a better example where personal responsibility was officialy upheld?
Re:Lawyers threaten researcher over key-cloning bug in high-... by lotsofmangos on Wednesday May 06, 2015 @08:43AM (#9498166)
A story about a two year old learning about agency would be a better example, there are millions of better examples for this context.

The most extreme example of a thing you can find is not usually the ideal example to use for most contexts. Rather than clarifying things, if it dwarfs the context, it then appears automatically ridiculous even if the basic argument is sound.

Re:Lawyers threaten researcher over key-cloning bug in high-... by madez on Wednesday May 06, 2015 @09:41AM (#9498474)
> A story about a two year old learning about agency would be a better example,

This is not an example for official upholding of personal responsibility.

> there are millions of better examples for this context.

This is hand-waving. I used the Nuremberg trials specifically to not hand-wave.

Re:Lawyers threaten researcher over key-cloning bug in high-... by lotsofmangos on Wednesday May 06, 2015 @09:47AM (#9498517)
"This is hand-waving. I used the Nuremberg trials specifically to not hand-wave."

Now that is funny, though I suspect unintentionally, and in horrifically bad taste either way.

Re:Lawyers threaten researcher over key-cloning bug in high-... by madez on Wednesday May 06, 2015 @10:25AM (#9498825)
I think here is some kind of misunderstanding.

I did not intend to be funny nor do I see why it was bad taste.

My question for a better example was genuine.

Re:Lawyers threaten researcher over key-cloning bug in high-... by mryan on Wednesday May 06, 2015 @11:31AM (#9499403)
Presumably lotsofmangos is making a reference to the Nazi salute.
Re:Lawyers threaten researcher over key-cloning bug in high-... by madez on Wednesday May 06, 2015 @12:27PM (#9499812)
Ah, I see. Well, it wasn't meant like this.

It was meant as a pejorative label for him stating

    there are millions of better examples for this context
without providing one valid example.
Re:Lawyers threaten researcher over key-cloning bug in high-... by lotsofmangos on Wednesday May 06, 2015 @12:53PM (#9500016)
I provided a valid example. It was admittedly a bit of a rubbish example, but then it was intended to be. But nevertheless, a story about a two year old learning about agency, as in, concepts of personal choice and consequence of action, is an example much better suited to the context of whether lawyers should send out strongly worded cease and desist letters when their clients tell them to, than relying on the court response to the Nuremburg defense in the face of genocide.
Re:Lawyers threaten researcher over key-cloning bug in high-... by madez on Wednesday May 06, 2015 @01:53PM (#9500497)

    I provided a valid example.
No, you did not.

I asked for "a better example where personal responsibility was officially upheld". Your example was explaining a child agency, which _does not_ include officially upholding personal responsibility.

Furthermore, I did not draw any comparison between the Nuremberg Trials and the case in question, but used them only to substantiate my argument for personal responsibility. Reread what I wrote if you are doubting.

Don't assume everybody does cheap puns and invalidly makes up connections between what was said. If I mean it, I say so.

Re:Lawyers threaten researcher over key-cloning bug in high-... by lotsofmangos on Wednesday May 06, 2015 @02:18PM (#9500688)
I asked for "a better example where personal responsibility was officially upheld".

Add an adult to the story then. Hell, add a teacher, knock yourself out. For making the point of not merely doing as instructed though and having personal responsibility, this need for official confirmation in the metaphor seems awfully weird.

Don't assume everybody does cheap puns and invalidly makes up connections

I didn't, I said I thought you were probably being unintentionally funny.

Re:Lawyers threaten researcher over key-cloning bug in high-... by madez on Wednesday May 06, 2015 @03:17PM (#9501126)

    Add an adult to the story then. Hell, add a teacher, knock yourself out.
I don't know a better example. If I had one, I wouldn't have asked. In my experience people defend themselves by saying they were told to do it or that there are laws forcing them.

    For making the point of not merely doing as instructed though
    and having personal responsibility, this need for official
    confirmation in the metaphor seems awfully weird.
There are lot of things we might think that should be, but many are not officially recognized. Having my point officially recognized is essential for its substance.

It is not a metaphor.

However, I think we were just misunderstanding each other. My question was serious and genuine.

Re:Lawyers threaten researcher over key-cloning bug in high-... by lotsofmangos on Wednesday May 06, 2015 @12:09PM (#9499688)
It was admittedly the first thing that came to mind from a sentence about Nuremberg and handwaving.
Re:Lawyers threaten researcher over key-cloning bug in high-... by lotsofmangos on Wednesday May 06, 2015 @04:39AM (#9497270)
If all that Hitler had done was get Goebbels to send out threatening letters to people who remarked that he had left his door unlocked, then referencing Nuremberg over lawyers sending cease and desist letters on behalf of a padlock manufacturer might not seem quite so ridiculous.
Re:Lawyers threaten researcher over key-cloning bug in high-... by Rangi42 on Tuesday May 05, 2015 @10:43PM (#9496316)
There is value in doing your legal duty, even if some people think your duty is to do a bad thing. "I was just doing my job" is not considered a sufficient defense of Nazi actions because their actions were so terrible that being legally required to do them does not mitigate that. Threatening legal action, on the other hand, is an ordinary event that can be easily excused as "just what lawyers have to do for their clients."
Re:Lawyers threaten researcher over key-cloning bug in high-... by karlmdavis on Tuesday May 05, 2015 @10:49PM (#9496338)
I don't know this for sure, but I seem to recall that lawyer's professional rules of conduct require them to not leave clients in the lurch, without providing them ample warning to find new counsel.

I believe this is what the GP poster is mentioning when he says that there often isn't "sufficient time to withdraw."

Re:Lawyers threaten researcher over key-cloning bug in high-... by MichaelCrawford on Tuesday May 05, 2015 @11:06PM (#9496390)
There are plenty of times that one has a duty to violate the law. Consider that the US Supreme Court does not render advisory opinions; to overturn an unconstitutional law, one must violate it first, then defend oneself all the way to the Supremes.

This is a very risky proposition as it happens all the time that the Supreme Court will deny certiori over some petty issue.

If you wonder why I use my real name here and elsewhere online, it's because I regard it as my duty to - someday - defend myself before the Supreme Court.

Re:Lawyers threaten researcher over key-cloning bug in high-... by kemitchell on Tuesday May 05, 2015 @11:33PM (#9496468)
> Consider that the US Supreme Court does not render advisory opinions; to overturn an unconstitutional law, one must violate it first, then defend oneself all the way to the Supremes.

Please don't take this the wrong way: Research this topic further!

Re:Lawyers threaten researcher over key-cloning bug in high-... by MichaelCrawford on Wednesday May 06, 2015 @04:22PM (#9501543)
I've been working on that for a while.