Hacking Law is for Hackers: CFAA, DMCA, & Global Vulnerability Disclosure
Legal experts Harley Geiger and DOJ's Leonard Bailey review landmark changes in hacker law, including Department of Justice CFAA policy revisions and DMCA reforms.
Summary
A Landmark Year for Computer Crime Law
The 2021–2022 period brought historic legal developments reshaping the landscape for security researchers in the United States and internationally.
Analyzing the DOJ's New CFAA Charging Policy
Leonard Bailey details the US Department of Justice's policy shift explicitly declining to prosecute good-faith security researchers under the Computer Fraud and Abuse Act (CFAA).
DMCA Section 1201 Exemptions and Emerging Foreign Laws
Harley Geiger analyzes the latest triennial DMCA exemptions for security research and reviews new foreign vulnerability disclosure regulations (e.g., China's provisions).
Best Practices for Good-Faith Vulnerability Research
The speakers outline essential legal hygiene practices for researchers conducting audits, coordinated disclosures, and bug bounty engagements.
Related talks
Voting Village·55 min
Tori Noble
Breaks down the Digital Millennium Copyright Act (DMCA) Section 1201 security research exemptions that protect independent voting system audits at the Voting Village.
Main Stage·44 min
Cory Doctorow · Christian Dameff · Jeff Tully
Cory Doctorow, Dr. Christian Dameff, and Dr. Jeff Tully argue why patients and researchers must have the legal right to inspect and modify medical devices.
Main Stage·1 hr
The DEF CON Policy Department outlines its mission to represent the hacker community in Washington D.C., protecting good-faith security research and privacy rights.