Is it legal to use the Tor Network and Tor Software in the United States? Is it legal to use the following provided by the Tor Project: Using the Tor Browser Using the Tor Network Browsing *.onion domains Browsing the "Hidden Wiki" Provided I'm not doing anything illegal with these services/software. I am asking specifically for the United States. Are there any states within the US that prohibit the use of any/all of these services/software?
Using Tor is not illegal. Nor is hiding your IP address, which is - among other things - what Tor does. Going to .onion links is not illegal. What you find and interact with at those .onion sites may be illegal. See Law StackExchange Is it legal to host a directory of .onion urls? Running a Tor Relay is not illegal. That could change. Running an Exit Relay could expose your IP address as the Relay, so that could lead investigators of illegal activity to you. Read https://www.torproject.org/eff/tor-legal-faq.html.en As always, check your state laws http://statelaws.findlaw.com/criminal-laws/computer-crimes.html And do your own research with the links above and at https://en.wikipedia.org/wiki/Tor_(anonymity_network) and at https://www.torproject.org/
In Australia at least I am not sure that the usage you describe has ever been legal. The University of Melbourne Copyright Office sets out when you may copy a television program for personal use and fair dealing for research and study. In short for personal use, you may: use any format you like - if you can find a working VCR; go for it. Not lend or sell the material; it must be for your own private use. This means you must be there when it is displayed and it must be in a private place. For example, you can invite friends to your place or go to a friends place and watch it together. The thing you are copying must be legal - you must have bought the original, have a current pay TV subscription (at time of recording) or it must be a free-to-air broadcast.
The tricky bit from a GDPR standpoint is that the US has a law that says a US-based company must hand over data to US government agencies even if the data is stored outside the US. This is US specific and a case where the US government gives itself jurisdiction outside the US but the EU can't directly do anything against it (outside of international negotiations). As you noticed this means if you store data at a US data processor there is no real difference whether the data is physically stored in the US or the EU. So to avoid transferring EU consumer data to the US several steps are needed. First the servers have to be physically located in the EU and second the company needs to be non-US based, EU based seems the obvious choice. AFAIK constructions of a US-based company creating a fully owned EU-based subsidary are currently used to achieve the second part. Whether this is sufficient may have to be decided in court.
You can license the use of your IP only for certain uses, for example (most commonly) &quot;non-commercial&quot;. The general template of permission is &quot;You have permission to ___ as long as you ___&quot;. What the user is permitted to do, in your scheme, is something along the lines of &quot;only distribute the output in this manner&quot;, or &quot;not distribute code developed with this tool anywhere else&quot;. It's up to you to prove that someone violated that condition, if they did.
Most of the question has nothing to do with the law, it's about technical how-to or how-does, which should be asked in Information Security SE. There are two possible legal questions: is it legal to break into a computer system and take a database of passwords, and it is legal to acquire such a database obtained by someone else. As should be known in the US, per 18 USC 1030, breaking into a computer is illegal in the US. Given that, it is extremely unlikely that Google illegally breaks into other computer systems to obtain passwords. The aforementioned law criminalizes accessing computers without authorization, not (just) &quot;taking&quot; stuff from computers without authorization. The law does not criminalize receipt of illegally obtained material. Passwords are not protected by copyright. If Google were to induce someone to break into a computer system to get passwords, that would be legally actionable, however there is no law penalizing innocent receipt of illegally-obtained passwords (insofar as they are not protected by copyright). It is not illegal to access the dark web, at least in the US (probably it is illegal in Saudi Arabia). Using stuff gotten from the dark web can easily be illegal (e.g. logging in to someone's bank account, or forging a passport). There are many services which monitor the dark web and report breaches, which is totally legal.
Your VPN scenario is why you have to show the banner to everyone. If you somehow knew beyond any doubt that someone was not in the EU, then you would not have to show a banner, but because you can't verify that, you should always show the banner. Doing so also protects against accidentally violating a similar law in another country; the GDPR is the best-known privacy law, but it is far from the only one. It's good practice to ask for people's permission before collecting their information anyway.
First of all derivative works are not exactly "illegal". They are fully legal if the owner of the copyright in the original work has given permission. If no permission has been given, they may be copyright infringements. But they may fall under an exception to copyright. Under US law, the most common exception is "fair use". See this question and answer for more on fair use. But particularly relevant in this case is that a parody is usually a fair use, although as in every fair-use decision, there is pretty much no clear-cut, hard&amp;fast rule on what is and is not fair use. In the UK and much of the EU (or maybe all of it, I am not sure) there is a somewhat similar concept known as "fair dealing". It is also an exception to copyright. So it is possible that such works fall under fair use, fair dealing, or another exception to copyright, or that the rights-holder has given permission. Secondly, copyright infringement is a tort, not a crime, under most circumstances. It is enforced when, and only when, a copyright-holder chooses to take action, sending a take-down notice or copyright complaint, of filing suit for infringement. Some rights-holders choose as a matter of policy not to take such actions, thinking that such derivative works actually benefit them. That is their choice to make. Some rights-holders don't have the time or money to track down and take action against most infringements, and will only act if they think the derivative work will in some way cost them a lot of money or harm their reputation. Some rights-holders may just not have heard, yet, of specific possible infringing derivative works. As for Acta2, it has not yet been approved, the Wikipedia article linked in the questions says: In order for the text of the directive to become law in the EU, it must be approved by the European Council on 9 April 2019 The article also mentions significant continuing opposition. If it is approved, it is not clear, to me at least, how it will affect sites hosting such content, nor how it will interact with the copyright law of individual EU nations. If approved, it will no doubt take some time before enforcement is widespread. And of course it will only apply when EU law applies. If both site and author are outside the EU -- say if both are from the US -- it seems that it could not apply.
This question, along with a number of articles on the Internet, misconstrues what the rule change is about. The rule change does not say that you can get a search warrant, that is to enter premises with/without machineguns etc, solely on the basis that someone is running Tor on that premises. The rule changes actually has nothing to do with search warrants. The rule change is about "remote access" warrants and, specifically, the question of which magistrate you need to get the warrant from. The background is that statute grants the FBI the power to hack into a computer (that is, obtain "remote access") to search for and retrieve evidence in a criminal investigation. One of the preconditions for doing so is that they identify which district the computer is in, and apply to a magistrate in that district. (By way of further background, under the American way of distributing power, it is seen as a bad thing for (for example) a magistrate in California to be able to issue a warrant to an FBI agent to conduct a search in North Carolina.) When the target computer is desired to be hacked because it is running a hidden Tor service, then how does anyone know what district it is in? Where does the poor FBI agent apply for his or her warrant? This rule change resolves this practical problem by saying that, where the use of Tor or a similar system precludes any knowledge of the physical location of the target computer, then the FBI can apply for a warrant with any magistrate. See further http://www.fed-soc.org/blog/detail/amendments-to-federal-criminal-rule-41-address-venue-not-hacking-powers