Are Captcha solver farms illegal? Let say that captcha is a picture that prevents automated programs to do a certain task. Now imagine that we have a service in which some people works to solve some captchas. These captchas are sent by other people and/or by their program for the purpose that we don't know. People who work are get some money and who ask their captcha to be solved pay some funds. So by this way, not only the owner of the farm get some money but the solvers who might not have a real job get money too. So my question is this, are these farms illegal? (in USA, UK and Canada) of so which law they break?
This is a developing area within the law. In the United States, 18 U.S.C. § 1030 (Computer Fraud and Abuse Act) governs. However, the law is broadly written. This means creative prosecutors can and do win federal criminal cases by arguing the law should apply. Whether violating a website's terms of service should be considered a federal crime subject to the Act has been a subject of hot debate. In United States v. Nosal, 676 F.3d 854 (9th Cir. 2012), the 9th Circuit decided violations of use should be considered breaches rather than crimes. However, the district court refused to dismiss some charges against Nosal when the case was returned, and a jury conviction resulted in a prison sentence. At least three different circuits have arrived at other interpretations of the CFAA. Draft legislation (H.R. 2454 and S. 1196) would limit the scope of the CFAA by excluding TOS violations, however, it hasn't been adopted as of this writing. That CAPTCHA breaking violates website terms of service isn't really in question. For example, see U.S. v. Lowson, 10-cr-114, U.S. District Court, District of New Jersey (Newark) in which the judge brought a criminal case to which two defendants plead guilty to wire fraud, one plead guilty to misdemeanor computer crimes, and a fourth went on the lam. But does for-profit CAPTCHA solving violate U.S. law? Given the state of the law, one could make a case either way. Given the industry's reputation, serious questions about intended use, and questionable labor practices, that's a significant risk.
Would any offence be committed for: Having this on your person? Buying or selling this? Leaving it around for people to plug in to a computer? In the abstract, I don't think that this conduct would violate either Section 36 of the U.K. law or U.S. law, although, obviously, purposefully destroying a computer itself (i.e. actually using the device without the consent of the owner of the computer) would violate many U.K. laws and would also violate many U.S. laws at both the state and federal level. I also don't think that possession or buying or selling this product would be a crime absent some intent that it be used illegally, in which case there might be an "attempt" to commit a crime offense, or an offense that would make one part of a conspiracy to commit a crime. In the "leaving it around" example, there is arguably an intent to use it to harm another improperly, although the phrasing is ambivalent. While many statutes in the U.S. criminalize possession of burglary tools, or drug paraphernalia, sometimes with an associated intent element (although even these crimes often have an express or judicially implied intent to use element), I'm not aware of any statute that criminalize possession of tools for malicious destruction of property. So, if the tools aren't possessed or used in a manner intended as a step in the facilitation of a crime, I don't think that any law is violated. So far as I know, the U.S. does not have a counterpart to Section 37 of the British statute cited above (it isn't a terribly easy thing to search for to definitively rule out the existence of such a law because federal law has many uncodified crimes in unexpected statutes and there are many sets of state criminal statutes, not all of which are codified either). The example giving in the comments by @gnasher729 of possession of a hammer which could be used to do the same things that this object could be used to do is instructive. Arguably, this USB-like tool is more specifically targeted at malicious conduct. But, for example, when I used to work as a radio news reporter, we had a machine that was basically a high powered magnet that was specifically designed to destroy all information on magnetic media. This was, in part, so that it could be reused, but it was also so that confidential interviews wouldn't fall into the wrong hands once they were no longer needed, in much the way that one might shred paper documents. It isn't so implausible to think that a device like this one might be necessary for individuals or firms with national defense secrets embedded in their hardware and software to have on hand in order to destroy a sensitive computer in order to prevent a security breach, if necessary. In a case like that, leaving one of these devices around the office unlabeled might be negligent, but wouldn't have the intent necessary to be an intended crime. And, it is hard to imagine that the device itself, which seems pretty simple, would itself involve any technology that is a national security secret, so it probably wouldn't violate export control laws. Of course, possession, purchase or sale of such a specialized device, or leaving it around unlabeled would certainly be powerful evidence of an intent to use the device in a wrongful manner, and hence, of an attempt to commit a crime. Indeed, possession of such a device or purchase of one might very well be sufficient to establish probable cause to seize the device and arrest the person holding it on charges of an attempt to destroy a computer. But, this device would be merely powerful evidence of an intent to commit a crime, rather than something that is a crime to commit in and of itself. There are no international laws that govern this kind of thing. The only international laws applicable to individuals pertain to war crimes and nuclear and chemical weapons. Even then, most international laws direct member nations to adopt domestic laws on the subject rather than being self-executing.
Their code, their rules A copyright holder is free to offer their work under none, one or many licences. They can, at the same time, use their own work however they see fit without regard to the licences they have given/sold to others (except, they can only give one person an exclusive licence). As an analogy, let’s say I own a fleet of cars. I can drive my cars anytime I want. I can let Jim drive my cars anytime he wants for free. I can let Mary drive a specific car on Thursdays and only within 10km of the depot. I can let Joe drive my cars providing he pays me $50 a day. And I’m not going to let Fred drive them at all because Fred’s a jerk. Each of those is a different licence.
No, it is not. Just as it is illegal to steal from a thief, it is illegal to hack a hacker. Criminals are often considered a good target for crimes from a practical standpoint, but crimes against criminals are still prosecuted. As criminals are unlikely to report crimes against them to the authorities (particularly when doing so runs the risk of them being arrested for their crimes), targeting them does tend to result in a lower risk of being caught by the authorities, but if the crime is discovered, it will generally be prosecuted all the same. To that point, two Florida men have recently been arrested and are being prosecuted for stealing millions of dollars in Bitcoins from an illegal, darkweb drug marketplace in 2013, and there is always the more famous case of the two government agents who are in jail for stealing from the Silk Road. In your specific example, if all you did was hand over the information to the FBI, it's less likely that you'd be prosecuted than if you did so for personal gain, but you would be at risk of prosecution for engaging in vigilante computer hacking, yes. Also consider that if your actions happened to interfere with an ongoing investigation or result in the inability to prosecute (say, for the evidence you gathered being tainted and inadmissible by your involvement), you could be charged with crimes such as obstruction of justice or interfering with a police investigation as well.
The section you quote as clearly saying a thing is not clearly saying the thing. However: you cannot pass on or resell any license keys seems to say a thing clearly. However, one could argue that it's the sharer of the account who is in the wrong, and not the person receiving and passing on the account. I'd say that that piece of the agreement, combined with this: must not... let other people get access to anything we've made in a way that is unfair or unreasonable says that, yes, they are out of bounds.
Copyright in the US is usually a civil matter. Meaning that the copyright owner can sue (typically for money damages or injunctive relief) an infringer. The criminal laws that we have are aimed at the reproducer and/or distributor. In other words, chances are that you won't get in any criminal trouble for accessing academic articles of dubious origin. But never say never. RIP Aaron Schwartz.
It seems that you don’t understand what parody is. If you do understand, please explain how it’s even possible to parody computer code. What you can do with “open source” code depends on the licence the copyright holder(s) release it under. For some very permissive licences you can do what you suggest, for most, you can’t.
Is it criminal to find strings whose MD5 hash is known? No, unless the method or purpose involves gaining (or attempting to obtain) unauthorized access to others' computer systems or networks, or causing damage to them. This applies regardless of whether you program some brute-force algorithm rather or query a public [online] database that stores reverse hashes.