Computer Law Commons^™

Facebook, Welfare, And Natural Monopoly: A Quantitative Analysis Of Antitrust Remedies, Felix B. Chang, Seth Benzell

Faculty Articles and Other Publications

This Article advances a novel theoretical model for assessing policy interventions against Facebook. As prosecutors barrel forward against digital platforms, soon it will fall upon courts and, eventually, regulators to devise remedies. We argue that any sensible solution must include quantification of the welfare effects on the platform’s various constituents. Our model prioritizes the effects upon total societal welfare—or, in economists’ terms, social welfare. Applied to Facebook, the model calculates social welfare as the sum of four components: (i) consumer welfare; (ii) advertising profits; (iii) tax revenues; and (iv) the value of a large user base.

Drawing on surveys of …

Passcodes, Protection, And Legal Practicality: The Necessity Of A Digital Fifth Amendment, Ethan Swierczewski

Catholic University Journal of Law and Technology

No abstract provided.

Dignity, Intersectional Gendered Harm, And A Flexible Approach: Analysis Of The Right To One’S Image In Quebec, Yuan Stevens

Canadian Journal of Law and Technology

This article draws on critical feminist theory and the framework of intersectionality to examine how courts in Quebec have begun — and are poised — to respond to the phenomenon of the non-consensual sharing of images, particularly if they are of an intimate or sexual nature. Dunn’s work has demonstrated that Quebec’s dignity-focused approach to the protection of identity and privacy ought to guide the development of similar civil recourse provided in common law Canada. This paper fills a gap by identifying the affordances and gaps of Quebec’s legal approach from the vantage point of equality-seeking groups, with a particular …

Book Review: This Is How They Tell Me The World Ends: The Cyberweapons Arms Race (2020) By Nicole Perlroth, Amy Gaudion

Faculty Scholarly Works

In the book, Perlroth traces the development and use of cyber capabilities, focusing on the U.S. government’s unintended role in creating a market for these cyber goods. Her purpose is a straightforward one: to illuminate. Perlroth explains that her goal is to “help shine even a glimmer of light on the highly secretive and largely invisible cyberweapons industry so that we, a society on the cusp of this digital tsunami called the Internet of Things, may have some of the necessary conversations now, before it is too late.”7 She seeks to accomplish this purpose by offering a treatise-like treatment of …

Educating Robot-Proof Attorneys, Tammy Oltz

Faculty Scholarship

Technology, particularly that powered by Artificial Intelligence (AI), is disrupting the legal profession. In the coming years, lawyers who do not understand technology will face both ethical and professional risks. This year, the duty of technological competence marks its tenth anniversary. While lawyers are still learning what the duty means and what it will mean in the future, one thing is certain: those who ignore it could find themselves at risk of being on the wrong side of an ethics violation.

However, even without that regulatory obligation, lawyers who continue to ignore the current technological revolution put themselves at risk …

Defining And Demystifying Automated Decision Systems, Rashida Richardson

Maryland Law Review

No abstract provided.

A 180 On Section 230: State Efforts To Erode Social Media Immunity, Leslie Y. Garfield Tenzer, Hayley Margulis

Elisabeth Haub School of Law Faculty Publications

The turmoil of the 2020 presidential election renewed controversy surrounding 47 U.S.C § 230. The law, adopted as part of the 1996 Communications Decency Act (CDA), shields Interactive Computer Services (ICS) from civil liability for third-party material posted on their Platforms--no matter how heinous and regardless of whether the material enjoys constitutional protection. Consequently, any ICS, which is broadly defined to include Internet service providers (ISPs) and social media platforms (Platforms), can police its own postings but remains free from government intervention or retribution.

In 2022, members of the Texas and Florida legislatures passed laws aiming to limit the scope …

Timestamp Estimation From Outdoor Scenes, Tawfiq Salem, Jisoo Hwang, Rafael Padilha

Annual ADFSL Conference on Digital Forensics, Security and Law

The increasing availability of smartphones allowed people to easily capture and share images on the internet. These images are often associated with metadata, including the image capture time (timestamp) and the location where the image was captured (geolocation). The metadata associated with images provides valuable information to better understand scenes and events presented in these images. The timestamp can be manipulated intentionally to provide false information to convey a twisted version of reality. Images with manipulated timestamps are often used as a cover-up for wrongdoing or broadcasting false claims and competing views on the internet. Estimating the time of capture …

Anatomy Of An Internet Hijack And Interception Attack: A Global And Educational Perspective, Ben A. Scott, Michael N. Johnstone, Patryk Szewczyk

Annual ADFSL Conference on Digital Forensics, Security and Law

The Internet’s underlying vulnerable protocol infrastructure is a rich target for cyber crime, cyber espionage and cyber warfare operations. The stability and security of the Internet infrastructure are important to the function of global matters of state, critical infrastructure, global e-commerce and election systems. There are global approaches to tackle Internet security challenges that include governance, law, educational and technical perspectives. This paper reviews a number of approaches to these challenges, the increasingly surgical attacks that target the underlying vulnerable protocol infrastructure of the Internet, and the extant cyber security education curricula; we find the majority of predominant cyber security …

Griswold For Google: Algorithmic Determinism And Decisional Privacy, Joshua Fairfield, Nathaniel Reynolds

Scholarly Articles

As surveillance capitalism continues to collect data and automate decisions, those on the receiving end of such actions are often rendered speechless. We are less left in awe of the great force of these technologies than we lack the language that could properly define and defend against their onslaught. Often, we feel powerless as our data is extracted then aimed at us to manipulate our own choices, and yet the conversation around these practices seems stultified. Algorithms have shifted the technological landscape by co-opting human decision-making and in the process co-opted the very tool that we use to respond to …

Microsoft Defender Will Be Defended: Memoryranger Prevents Blinding Windows Av, Denis Pogonin, Igor Korkin, Phd

Annual ADFSL Conference on Digital Forensics, Security and Law

Windows OS is facing a huge rise in kernel attacks. An overview of popular techniques that result in loading kernel drivers will be presented. One of the key targets of modern threats is disabling and blinding Microsoft Defender, a default Windows AV. The analysis of recent driver-based attacks will be given, the challenge is to block them. The survey of user- and kernel-level attacks on Microsoft Defender will be given. One of the recently published attackers’ techniques abuses Mandatory Integrity Control (MIC) and Security Reference Monitor (SRM) by modifying Integrity Level and Debug Privileges for the Microsoft Defender via syscalls. …

The Application Of The Right To Be Forgotten In The Machine Learning Context: From The Perspective Of European Laws, Zeyu Zhao

Catholic University Journal of Law and Technology

The right to be forgotten has been evolving for decades along with the progress of different statutes and cases and, finally, independently enacted by the General Data Protection Regulation, making it widely applied across Europe. However, the related provisions in the regulation fail to enable machine learning systems to realistically forget the personal information which is stored and processed therein.

This failure is not only because existing European rules do not stipulate standard codes of conduct and corresponding responsibilities for the parties involved, but they also cannot accommodate themselves to the new environment of machine learning, where specific information can …

Using Zero-Knowledge To Reconcile Law Enforcement Secrecy And Fair Trial Rights In Criminal Cases, Dor Bitan, Ron Canetti, Shafi Goldwasser, Rebecca Wexler

Faculty Scholarship

The use of hidden investigative software to collect evidence of crimes presents courts with a recurring dilemma: On the one hand, there is often clear public interest in keeping the software hidden to preserve its effectiveness in fighting crimes. On the other hand, criminal defendants have rights to inspect and challenge the full evidence against them, including law enforcement's investigative methods. In fact, in the U.S. adversarial legal system, the defendant's rights to scrutinize the government's tools are crucial to the truth-seeking process and to keeping law enforcement conduct lawful and constitutional. Presently, courts balance these conflicting interests on a …

Revolt Against The U.S. Hegemony: Judicial Divergence In Cyberspace, Dongsheng Zang

Articles

This Article contributes to our understanding of the current state of cyber law. The global perspective demonstrates an almost uniform response to the U.S. law in cyberspace from all of America's major trading partners. In the past, comparative studies tended to focus on a single jurisdiction-typically, the European Union-and compared it with the United States. This approach, informative as it was, significantly understated the gravity of the differences between that jurisdiction and the United States. Fundamentally, it was based on an American-centric outlook with primary interests in building convergence models. In cyberspace, however, this is simply not helpful. In recent …

Distributed Governance Of Medical Ai, W. Nicholson Price Ii

SMU Science and Technology Law Review

Artificial intelligence (AI) has the potential to democratize expertise in medicine, bring expertise previously limited to specialists to a variety of health-care settings. But AI can easily falter, and making sure that AI works well across that variety of settings is a challenging task. Centralized governance, such as review by the Food and Drug Administration, can only do so much, since system performance will depend on the particular health-care setting and how the AI system is integrated into setting-specific clinical workflows. This Essay presents the need for distributed governance, where some oversight tasks are undertaken in localized settings. It points …

Book Review: Mike Zajko, Telecom Tension: Internet Service Providers And Public Policy In Canada*, Matt Malone

Canadian Journal of Law and Technology

The world of telecommunications, writes Mike Zajko in this timely analysis of internet service providers (ISPs), “is a world many of us have never wondered about, just as we are rarely curious about where our sewage goes or how the electricity grid is configured.” Yet ISPs are not just conduits of fast-traveling light pulses that deliver the internet; they transmit, channel, form, and express a multitude of public policy issues, and they have an important level of agency in the construction and exercise of those policies, too. These dynamics have implications for a large bandwidth of topics relevant to Canadians, …

Reframing Technology-Facilitated Gender-Based Violence At The Intersections Of Law & Society, Jane Bailey, Carys Craig, Suzie Dunn, Sonia Lawrence

Canadian Journal of Law and Technology

This introductory article proceeds in three parts. First, it discusses the origins of this special issue as part of a multi-event, SSHRC-funded conference that focused on pushing beyond a narrow conception of TFGBV; rather than approaching TFGBV as solely an issue of interpersonal behaviours, the animating objective of the conference was to examine the structural, systemic, and design factors that contribute to TFGBV. Second, it explores the importance and promise of reframing TFGBV in this way through intersectional and structural lenses. Third, it briefly highlights some of the key insights from each of the contributions in this special issue. It …

Platforms, Encryption, And The Cfaa: The Case Of Whatsapp V Nso Group, Jonathon Penney, Bruce Schneier

Articles, Book Chapters, & Popular Press

End-to-end encryption technology has gone mainstream. But this wider use has led hackers, cybercriminals, foreign governments, and other threat actors to employ creative and novel attacks to compromise or workaround these protections, raising important questions as to how the Computer Fraud and Abuse Act (CFAA), the primary federal anti-hacking statute, is best applied to these new encryption implementations. Now, after the Supreme Court recently narrowed the CFAA’s scope in Van Buren and suggested it favors a code-based approach to liability under the statute, understanding how best to theorize sophisticated code-based access barriers like end-to-end encryption, and their circumvention, is now …

Adversarial Scrutiny Of Evidentiary Statistical Software, Rediet Abebe, Moritz Hardt, Angela Jin, John Miller, Ludwig Schmidt, Rebecca Wexler

Faculty Scholarship

The U.S. criminal legal system increasingly relies on software output to convict and incarcerate people. In a large number of cases each year, the government makes these consequential decisions based on evidence from statistical software — such as probabilistic genotyping, environmental audio detection and toolmark analysis tools — that the defense counsel cannot fully cross-examine or scrutinize. This undermines the commitments of the adversarial criminal legal system, which relies on the defense’s ability to probe and test the prosecution’s case to safeguard individual rights.

Responding to this need to adversarially scrutinize output from such software, we propose robust adversarial testing …

Locking Down "Reasonable" Cybersecurity Duty, Charlotte A. Tschider

Faculty Publications & Other Works

Following a data breach or other cyberattack, the concept of “reasonable” duty, broadly construed, is essential to a plaintiff’s potential causes of action, such as negligence, negligence per se, breach of contract, breach of fiduciary duty, and any number of statutory claims. The impact of an organization’s discretionary choices, such as whether to take specific security steps for a system, may result in potential risk to an individual, another organization, or the organization itself. Although organizations regularly engage in cybersecurity risk analysis, they may not understand what practices will be considered reasonable in a court of law and are therefore …