Leonard Bailey's guest appearances

Leonard Bailey

ITSPmagazine

2008 - Winter Quarter - Video

Change Agents

Julie Smith

Alison Levine

Sam Houston

Robert Lee

Andrew Smith

Robin Smith

Kathleen Smith

Omar Khawaja

Adam Levin

David Cross

Stephanie Lucas

Jeffrey Smith

Joel Makower

Caleb Barlow

Brian Kelly

OwlTail

Riana Pfefferkorn

As with most laws, the first question that comes to mind when technology is involved is: are they keeping pace with it? However, there is a fundamental follow-up question: how are these laws interpreted in relation to how new technologies shape business and society?The Computer Fraud and Abuse Act (CFAA), enacted by the United States Congress in 1986, is one such law. A lot has changed since then:the technologies used in every aspect of our livesaccess to these same technologies used by criminals to commit cybercrimeuse of these technologies by ethical hackers to help organizations increase their cybersecurity posturethe boundaries of the act being tested by cybercriminals, hackers, and the lawyers handling their casesIn today's episode, we take a journey into the past, present, and future of the CFAA, discussing a current case — Van Buren v United States — as the backdrop for the scenarios we want to vet out. As we try to understand the impact the CFAA will have on security/safety in society.Are we enabling researchers (ethical hackers) to do what they do best... finding weaknesses in the ecosystem and supply chain? Or, does the act limits such activity from taking place legally — and, therefore, at all?In this podcast, we ask ourselves those fundamental questions that will shape the application of the CFAA and how it can keep adapting to the way society has always been adapted to technology-driven changes. Who and what are we protecting ourselves from?Have we put policies in place that mean well but could cause more harm than good?What do cases related to the CFAA mean for the global researchers and bug bounty communities?The points made by both of our guests will get you thinking about how well things will be protected in the future.We are thinking, we would love for you to join us in this regrettably understated activity.Put your cap on and hit play now. GuestsLeonard Bailey, Head of Cybersecurity Unit, U.S. Department of Justice, Computer Crime &amp; Intellectual Property SectionRiana Pfefferkorn, Research Scholar, Stanford Internet Observatory at Stanford University (@Riana_Crypto on Twitter)This Episode’s Sponsors:BlackCloak: https://itspm.ag/itspbcwebRSA Security: https://itspm.ag/itsprsawebResourcesDOJ Prosecuting Computer Crime Manual: https://www.justice.gov/sites/default/files/criminal-ccips/legacy/2015/01/14/ccmanual.pdfVan Buren v United States Write-Up: https://www.eff.org/cases/van-buren-v-united-statesDisclose.io Voatz Response Letter: https://disclose.io/voatz-response-letter/To see and hear more The Cyber Society content on ITSPmagazine, visit:https://www.itspmagazine.com/the-cyber-societyAre you interested in sponsoring an ITSPmagazine Channel?https://www.itspmagazine.com/podcast-series-sponsorships

As with most laws, the first question that comes to mind when technology is involved is: are they keeping pace with it? However, there is a fundamental follow-up question: how are these laws interpreted in relation to how new technologies shape business and society?The Computer Fraud and Abuse Act (CFAA), enacted by the United States Congress in 1986, is one such law. A lot has changed since then:<ul><li>the technologies used in every aspect of our lives</li><li>access to these same technologies used by criminals to commit cybercrime</li><li>use of these technologies by ethical hackers to help organizations increase their cybersecurity posture</li><li>the boundaries of the act being tested by cybercriminals, hackers, and the lawyers handling their cases</li></ul>In today's episode, we take a journey into the past, present, and future of the CFAA, discussing a current case — Van Buren v United States — as the backdrop for the scenarios we want to vet out. As we try to understand the impact the CFAA will have on security/safety in society.Are we enabling researchers (ethical hackers) to do what they do best... finding weaknesses in the ecosystem and supply chain? Or, does the act limits such activity from taking place legally — and, therefore, at all?In this podcast, we ask ourselves those fundamental questions that will shape the application of the CFAA and how it can keep adapting to the way society has always been adapted to technology-driven changes. Who and what are we protecting ourselves from?Have we put policies in place that mean well but could cause more harm than good?What do cases related to the CFAA mean for the global researchers and bug bounty communities?The points made by both of our guests will get you thinking about how well things will be protected in the future.We are thinking, we would love for you to join us in this regrettably understated activity.Put your cap on and hit play now. Guests <a href="https://www.linkedin.com/in/leonard-b-4a39411/" rel="nofollow" target="_blank">Leonard Bailey</a>, Head of Cybersecurity Unit, U.S. Department of Justice, Computer Crime &amp; Intellectual Property Section<a href="https://www.linkedin.com/in/riana-pfefferkorn-2b93651/" rel="nofollow" target="_blank">Riana Pfefferkorn</a>, Research Scholar, Stanford Internet Observatory at Stanford University (<a href="https://twitter.com/Riana_Crypto" rel="nofollow" target="_blank">@Riana_Crypto</a> on Twitter)This Episode’s Sponsors:BlackCloak: <a href="https://itspm.ag/itspbcweb" rel="nofollow" target="_blank">https://itspm.ag/itspbcweb</a>RSA Security: <a href="https://itspm.ag/itsprsaweb" rel="nofollow" target="_blank">https://itspm.ag/itsprsaweb</a>Resources DOJ Prosecuting Computer Crime Manual: <a href="https://www.justice.gov/sites/default/files/criminal-ccips/legacy/2015/01/14/ccmanual.pdf" rel="nofollow" target="_blank">https://www.justice.gov/sites/default/files/criminal-ccips/legacy/2015/01/14/ccmanual.pdf</a>Van Buren v United States Write-Up: <a href="https://www.eff.org/cases/van-buren-v-united-states" rel="nofollow" target="_blank">https://www.eff.org/cases/van-buren-v-united-states</a><a href="http://Disclose.io" rel="nofollow" target="_blank">Disclose.io</a> Voatz Response Letter: <a href="https://disclose.io/voatz-response-letter/" rel="nofollow" target="_blank">https://disclose.io/voatz-response-letter/</a>To see and hear more The Cyber Society content on ITSPmagazine, visit: <a href="https://www.itspmagazine.com/the-cyber-society" rel="nofollow" target="_blank">https://www.itspmagazine.com/the-cyber-society</a>Are you interested in sponsoring an ITSPmagazine Channel? <a href="https://www.itspmagazine.com/podcast-series-sponsorships" rel="nofollow" target="_blank">https://www.itspmagazine.com/podcast-series-sponsorships</a>

Are Laws Keeping Pace With Cyber Reality? | The History And Impact Of The Computer Fraud and Abuse Act (CFAA) On Society | A Conversation With Riana Pfefferkorn And Leonard Bailey

Amit Elazari

Today’s topic looks at the life of a hacker and the challenges they face from both a liability and legal perspective. We also look at how organizations deal with the research activities they encounter from both cybercriminals and ethical hackers alike.To help me have this conversation, I am delighted to welcome Amit Elazari, Lecturer at UC Berkeley School of Information, and Leonard Bailey, Special Counsel for National Security at the U.S. Department of Justice, Criminal Division where he is Head of Cybersecurity Unit for the DOJ’s Computer Crime &amp; Intellectual Property Section.There are laws to protect companies from cybercriminals. However, those laws— when interpreted as such—also block ethical hackers from researching and looking for exploitable weaknesses. Changes in the acts and laws over the years have made it better, if not easier, for ethical hackers to perform their research and engage in responsible disclosure. The question is: do these changes also make it "better" and/or “easier” for the cybercriminals?“Safe harbor is not a blanket approval of protection from the law." ~ Amit ElazariDuring our chat, we dig into the many yin yang elements of this topic as we explore some of the details behind responsible disclosure and vulnerability disclosure programs, the related language and frameworks available from the DoJ and Disclose.io, and how those interact with—and often counteract—the Computer Fraud and Abuse Act (CFAA) and the Digital Millennium Copyright Act (DMCA).There’s a lot of work being done to help establish a safe environment for vulnerability research and responsible disclosure to take place. Formal rules surrounding responsible vulnerability are critical in both the legal landscape as well as with ethical business operations—these rules need sorting out quickly if we are going to function in a safe cyber society.Listen in and enjoy!Guest(s)Amit Elazari | Leonard BaileyThis Episode’s Sponsors:Devo: https://itspm.ag/itspdvwebSTEALTHbits: https://itspm.ag/sbtsitspdirTo see and hear more The Cyber Society content on ITSPmagazine, visit:https://www.itspmagazine.com/the-cyber-societyAre you interested in sponsoring an ITSPmagazine Channel?https://www.itspmagazine.com/podcast-series-sponsorships

Today’s topic looks at the life of a hacker and the challenges they face from both a liability and legal perspective. We also look at how organizations deal with the research activities they encounter from both cybercriminals and ethical hackers alike.To help me have this conversation, I am delighted to welcome Amit Elazari, Lecturer at UC Berkeley School of Information, and Leonard Bailey, Special Counsel for National Security at the U.S. Department of Justice, Criminal Division where he is Head of Cybersecurity Unit for the DOJ’s Computer Crime &amp; Intellectual Property Section.There are laws to protect companies from cybercriminals. However, those laws— when interpreted as such—also block ethical hackers from researching and looking for exploitable weaknesses. Changes in the acts and laws over the years have made it better, if not easier, for ethical hackers to perform their research and engage in responsible disclosure. The question is: do these changes also make it "better" and/or “easier” for the cybercriminals?“Safe harbor is not a blanket approval of protection from the law." ~ Amit ElazariDuring our chat, we dig into the many yin yang elements of this topic as we explore some of the details behind responsible disclosure and vulnerability disclosure programs, the related language and frameworks available from the DoJ and <a href="http://Disclose.io" rel="nofollow" target="_blank">Disclose.io</a>, and how those interact with—and often counteract—the Computer Fraud and Abuse Act (CFAA) and the Digital Millennium Copyright Act (DMCA).There’s a lot of work being done to help establish a safe environment for vulnerability research and responsible disclosure to take place. Formal rules surrounding responsible vulnerability are critical in both the legal landscape as well as with ethical business operations—these rules need sorting out quickly if we are going to function in a safe cyber society.Listen in and enjoy!Guest(s) Amit Elazari | Leonard BaileyThis Episode’s Sponsors:Devo: <a href="https://itspm.ag/itspdvweb" rel="nofollow" target="_blank">https://itspm.ag/itspdvweb</a>STEALTHbits: <a href="https://itspm.ag/sbtsitspdir" rel="nofollow" target="_blank">https://itspm.ag/sbtsitspdir</a>To see and hear more The Cyber Society content on ITSPmagazine, visit: <a href="https://www.itspmagazine.com/the-cyber-society" rel="nofollow" target="_blank">https://www.itspmagazine.com/the-cyber-society</a>Are you interested in sponsoring an ITSPmagazine Channel? <a href="https://www.itspmagazine.com/podcast-series-sponsorships" rel="nofollow" target="_blank">https://www.itspmagazine.com/podcast-series-sponsorships</a>

Ethical Hackers And The Misinterpretation Of The Law: Chapter One | Amit Elazari and Leonard Bailey

Dr. Leonard Bailey speaks to us about the value of Excellence.

February 27, 2008 - University @ Worship: Dr. Leonard Bailey