Can a hacker be arrested without investigating his computer? So I would first like to state I'm not asking this because I'm trying to find out how much evidence it would take for law enforcement to arrest me (I'm not a hacker). From what I've gathered, law enforcement can't legally arrest you without having enough evidence to convict you (Even if they have your IP tying you to a hacked website or something). From what I've learnt, they only get the evidence by investigating your computer. Is that right? Or do they really need to investigate the hacker's computer? And if they do have to investigate the hacker's computer what exactly would they need to "Find" to convict him?
Anyone can be arrested, as long as the police (and in some cases, anyone) have probable cause to do so. This generally includes two points: You are in the process of committing a criminal act The police have probable cause, generally through evidence, that you are in the process of, about to, or have committed a criminal act. This usually requires obtaining a warrant for the arrest. However, it's important not to conflate searches with arrest. Arrests are when you are being taken into custody for the reasons mentioned above. Searches are when your personal belongings (i.e. property), are searched to collect evidence. It is not up to police to convict someone. This is the job of the judicial system. There's a bit of terminology here: convictions basically mean being found guilty of an offence. Police don't have the ability to convict someone of an offence. They do have the ability to arrest, and charge with an offence. To charge someone with a crime basically means to accuse them of having done something. Now let's get to the actual crime. Since you haven't mentioned a specific jurisdiction, I'm going to use Canadian cases and law, but in general, it should apply worldwide. If the police have reason to believe that you are engaging in unlawful hacking-related behaviour, then they have the authority to arrest you. They simply need to have a reasonable belief that you are engaged in the crime. Something such as connecting you with an IP address and connecting that you were online at the time is enough. If the police need to find out more information (which they generally do, to investigate further into the matter) - they can obtain a search warrant afterwards. With this, they can legally search into your computer, and investigate. Any evidence that they collect can be used in court. I've recently done some research into cyber crimes. One rather infamous case involved the attack on multiple large scale websites, including Dell, Yahoo, and Amazon, in 2000. This sparked a large scale investigations, between the RCMP (Royal Canadian Mounted Police) and the FBI. The attacks were claimed by some to cause nearly 1.7 billion dollars of damage. The hacker was charged with 58 different offences. You can imply from the linked article that he was arrested before his computer was searched.
Ark. Code 5-60-120 is very clear that the act of intercepting is a crime. Not just &quot;recording and using&quot;, not just &quot;recording&quot;, but intercepting in any way. Specifically: It is unlawful for a person to intercept a wire, landline, oral, telephonic communication, or wireless communication, and to record or possess a recording of the communication unless the person is a party to the communication or one (1) of the parties to the communication has given prior consent to the interception and recording. Intercepting is illegal, therefore it is not &quot;okay&quot;. Perhaps the &quot;sort of a lawyer&quot; was speaking of the probability of getting caught doing it.
It's possibe to cover auto-starting apps and cookies under the definition. I'm not convinced and could argue against that but I don't think it matters. The tiny extract you linked isn't a law. It is a definition. It does not say &quot;these things are illegal&quot;. For that, we have to zoom out a little. Section 43 includes the offense in question (emphasis mine): If any person without permission of the owner or any other person who is incharge of a computer, computer system or computer network... introduces or causes to be introduced any computer contaminant or computer virus... So back to the question. Could Steam be considered a virus? Maybe. Is it illegal? No. On the other hand, if I were to gain access to your computer and download Steam, yes that could be an example of breaking that law.
Yes and no. Using deception to get someone to open the door so that you can execute a warrant is okay (United States v. Contreras-Ceballos, 999 F.2d 432). Leading a criminal to believe that you are a crime-customer (e.g. for purposes of a drug sale) and not a police officer is okay (Lewis v. United States, 385 U.S. 206), but must be limited to the purposes contemplated by the suspect and cannot turn into a general search. Lying about whether you have a warrant is not okay (Bumper v. North Carolina, 391 U.S. 543, Hadley v. Williams, 368 F.3d 747), nor is it okay to lie about the scope of a warrant (United States v. Dichiarinte, 445 F.2d 126). Misrepresenting the true purpose of entry, even when the person is identified as a government agent, negates consent (US v. Bosse, 898 F. 2d 113; United States v. Phillips, 497 F.2d 1131; United States v. Tweel, 550 F.2d 297). However, there is no requirement to be fully forthright (US v. Briley, 726 F.2d 1301) so you can gain entry saying that you "have a matter to discuss with X" even when the intent is to arrest X. In a case similar to what you describe, United States v. Wei Seng Phua, 100 F.Supp.3d 1040, FBI agents disrupted internet access and then posed as repairmen to gain access to the computer. Their efforts were wasted, as fruits of the poisonous tree.
I'm not sure it makes sense to talk about having "jurisdiction" over an IP address, for the purposes you're discussing. If you wanted to sue the IP address itself--something that is possible under limited circumstances--then you might need to locate it for jurisdictional purposes. But I don't think that's what you're talking about. You're talking about taking civil or criminal action against the people who are using the IP address to commit crimes. What matters, in that case, is not a theoretical legal question about the location of an IP address. It's questions like: where do these people live? Where do the people downloading the illegal content live? Where are the physical servers located? ("In the cloud" is not an answer--there are physical servers somewhere making up that cloud). For jurisdictional purposes, the chair they're sitting in when they upload the illegal data, and the location of the AC power outlet the physical server is plugged into, are as important as, if not more important than, the metaphysical "location" of the IP address of the server.
Nothing is typical Investigators have wide discretion on how (and if) they pursue an investigation of an alleged crime. When they make an arrest is part of that discretion. Making an arrest starts all sorts of clocks running on the legal process and investigators may not want to do that for all sorts of legitimate reasons.
There are some problems with this kind of vandalism, one of them clearly that the internet is international and vandalism can be performed from everywhere on servers everywhere in the world. And so it may be (both technically and legally) difficult to get hold of the vandal. Therefore, most wikis primarily focus on blocking offending accounts or their IPs and hope that this helps at least for a while. Only if it doesn't and the vandalism continues for extended time periods, legal measures are considered. Legally speaking though, vandalism is prohibited by many jurisdictions and of course by the terms of use of the wiki operators. For instance, the Swiss criminal code Art 147 explicitly puts &quot;abusing of data processing equipment&quot; under penalty and hence gives website operators a legal backup for setting up rules for the use of their services. Computer fraud Art. 147 1 Any person who with a view to his own or another's unlawful gain, by the incorrect, incomplete or unauthorised use of data, or in a similar way, influences the electronic or similar processing or transmission of data and as a result causes the transfer of financial assets, thus occasioning loss to another, or immediately thereafter conceals such a transfer shall be liable to a custodial sentence not exceeding five years or to a monetary penalty. 2 If the offender acts for commercial gain, he shall be liable to a custodial sentence not exceeding ten years or to a monetary penalty of not less than 90 daily penalty units. Technically, the law even requires prosecution ex officio, even though without a hint from the operator, the police won't start an investigation. I'm sure the US has a similar law. The problem is, as with all internet crimes, it's practical application, particularly because often website operator and offender are not living in the same country. Edit After reading the exact text again (it was unavailable yesterday) Art 147 is mostly about fraud performed by computers (classical &quot;hacking&quot;) but it shouldn't be difficult to argue that fighting and reverting vandalism requires significant (technical and personal) effort and hence the operator looses money. Additionally, there's Art 144bis which matches even better for the scenario here: Damage to data Art. 144bis Any person who without authority alters, deletes or renders unusable data that is stored or transmitted electronically or in some other similar way shall be liable on complaint to a custodial sentence not exceeding three years or to a monetary penalty. If the offender has caused major damage, a custodial sentence of from one to five years may be imposed. The offence is prosecuted ex officio. Any person who manufactures, imports, markets, advertises, offers or otherwise makes accessible programs that he knows or must assume will be used for the purposes described in paragraph 1 above, or provides instructions on the manufacture of such programs shall be liable to a custodial sentence not exceeding three years or to a monetary penalty. If the offender acts for commercial gain, a custodial sentence of from one to five years may be imposed.
Yes a company can be sued (since anyone can sue anyone). But in order to win a lawsuit, you have to have damages as a result of some action, AND you must prove that the action was done with intent to harm or was otherwise negligent. So following your website example, a lot of things would have to happen: The website would have to be hacked. If the passwords are encrypted instead of hashed (which still qualifies as "plain-text" once they email it to you), the hacker would have to figure out how to decrypt the passwords. (Which a good hacker could probably do.) The hacker would have to take those passwords and do something with them that causes damage to their owners. Even if all of those things happened, you would still also have to prove negligence on their part which would be pretty difficult to do because the flaw that was hacked would be the focus of negligence discussions moreso than what was stolen. That being said, if your goal is simply to get them to fix the problem, rather than receive monetary damages, then you could still sue for an action to be taken. You'd have to pay by the hour for the attorney since they wouldn't have a chance of winning monetary damages. But in all likelihood the website owner, upon seeing the lawsuit, would fix the problem before it gets to court, so I could see that having the desired effect. That is if you think it's worth the cost of filing the lawsuit in the first place. Perhaps you could save yourself the cost of an attorney and just threaten to sue if they don't fix the problem.