What exactly makes encryption a weapon? As a followup from Is the right to keep and bear crypto protected by the Second Amendment?, for export control purposes, United States has been classifying crypto as munition. In the old days, maybe late 1990s and very early 2000s, it was not uncommon for there to be two version of Netscape Navigator -- one with and one without "strong crypto". Bernstein v. United States. http://export.cr.yp.to/ On what exact legal basis is crypto considered munition? I mean, has anyone ever been killed with crypto? Is that even possible?
Encryption is not a weapon. Encryption, or rather cryptographic technology and systems, is a munition. What makes it a munition is the International Traffic in Arms Regulations (ITAR) managed by the U.S. Department of State. Weapons are a subset of munitions. Many U.S. laws grant authority to the executive branch to promulgate regulations for enforcement of the law. ITAR is a set of regulations managed by the U.S. Department of State to implement 22 U.S.C 2778 of the Arms Export Control Act (AECA). As part of the implementation, ITAR must define those items that are regulated by the AECA. Part 121 of those regulations defines "The United States Munitions List." There are many items on that list that are not weapons, yet they are regulated under the authority of the Commerce Clause of the United States Constitution granting power to the U.S. government to regulate international commerce. The extent of the definition of cryptography as a munition, for purposes of this discussion, is limited to the meaning created in the AECA and ITAR. There has been a somewhat successful challenge to the ITAR definition as it relates to cryptography mounted by the Electronic Frontier Foundation.
I'm not going to comment on the specifics of this law; rather, I think this question shows a misconception of the way the legal system works in general. Here's the question: do you actually have "legally privileged" material on your phone? If not, what's keeping you from claiming that is that it's not true, and lying to a police officer is a bad idea. And just putting a letter from your lawyer on the phone doesn't mean you've established a legal privilege--attorney-client privilege is not a magic spell, it's a reasonable system of protection that only covers certain communications. The bottom line is: the statute in general, and that clause in particular, were included in the law to protect real, important, and substantial legal right. The courts interpret the law in light of that purpose. If the police officer finds a solution that protects your rights while still carrying out the purpose of the statute, the court will be unlikely to fault him or her. In this case, if you tell the officer that there is a letter from your attorney in a particular folder, the obvious solution is for the officer not to open that folder. Problem solved. In practice, in the United States at least, these cases are dealt with routinely; computers are seized, and attorneys and judges work together to ensure that privilege is protected while still allowing reasonable access to seized materials. I would imagine the same is true in the U.K. The bottom line is: the law is not a game, and technical "gotchas" are rarely effective. Common law systems allow judges enough leeway to avoid this sort of pointless technicality.
Yes and no. [note, the following is all written about US law. In other jurisdictions laws are, of course, different (though usually not drastically so.)] In the US there are (at least) three different bodies of law that might apply to code: copyright, patents, trade secrets. Copyright covers original expression. Anything you write is automatically, immediately protected under copyright. The copyright applies to the code itself, and anything "derived" from that code. It's up to the courts to decide exactly what "derived" means. One case that's long been viewed as a landmark in this area is Gates Rubber v. Bando Chemicals. The Court of Appeals for the tenth Circuit decision includes a section titled: "The Test for Determining Whether the Copyright of a Computer Program Has Been Infringed." Note that you can register a copyright, and that can be worthwhile, such as helping recover some damages you can't otherwise. Patents are quite different from copyrights. Where a copyright covers expression of an idea, a patent covers a specific invention. Rather than being awarded automatically, a patent has to be applied for, and awarded only after the patent office has determined that there's no relevant prior art to prevent it from being awarded. A patent, however, covers things like somebody else independently discovering/inventing what's covered by the patent. A trade secret could (at least theoretically) apply to some process or procedure embodied in the code. A trade secret mostly applies to a situation where (for example) you're trying to form an alliance with some other company, and in the process tell them things you don't tell the general public. If you've identified the fact that what you're telling them is a trade secret, and they then tell a competitor (or the general public, etc.) or more generally use that information in any way other than the originally intended purpose, it could constitute a trade secret violation. As a side-note: patents and copyright fall under federal law, so they're basically uniform nation-wide. Trade secrets mostly fall under state law, so the exact details vary by state. Absent a reason to believe otherwise, I'd guess your interest here is primarily in copyright infringement. The key here would be showing that one piece of code was derived from the other. That is, it specifically would not apply in a case where there were only a limited number of ways of doing something, so anybody who wanted to do that had to use one of those ways. Since this would not indicate actual derivation, it would not indicate copyright violation.
TL;DR: It's controversial, but it looks like it also protects the rights for the individual. A well regulated Militia, being necessary to the security of a free State, the right of the people to keep and bear Arms, shall not be infringed. While the exact explanation is a matter of opinion, it reads like it's a subject, a reason and a right to the subject. Your question is essentially whether or not the subject is a group, an individual or both. The definition of "Militia" can be multiple things though, due to the age of the 2nd Amendment it changed over time and wasn't very exact to begin with. "the Militia ... civilians primarily, soldiers on occasion." "the Militia comprised all males physically capable of acting in concert for the common defense." "And further, that ordinarily when called for service these men were expected to appear bearing arms supplied by themselves and of the kind in common use at the time." In a militia, the character of the laborer, artificer, or tradesman, predominates over that of a soldier." "the militia system ... implied the general obligation of all adult male inhabitants to possess arms." . This site explains it quite well in my opinion. "A well regulated Militia, being necessary to the security of a free state, the right of the people to keep and bear Arms, shall not be infringed." The first two phrases are related to each other. The fact that the third phrase is separated from the verbal phrase by a comma indicates that the verbal phrase has more than the third phrase as its subject. The abbreviated grammatical construction actually renders the meaning of the Second Amendment as: "Neither a well regulated Militia, being necessary to the security of a free state, nor the right of the people to keep and bear Arms shall be infringed." So what does the Supreme Court think about the explanation? Current Supreme Court case law defines the Second Amendment (second part) as protecting from infringement by the federal and state governments, the right of the individual to keep and to bear a weapon which is part of the ordinary military equipment or which use could contribute to the common defense. Three cases are cited: U.S. v. Planned Parenthood v Casey (120 L. Ed. 2d 674 (1992)) U.S. v. Verdugo-Urquidez (108 L. Ed. 2d 222 (1990)) U.S. v. Miller (83 L. Ed. 1207 (1939)) According to the SAF the Justice Department includes individuals to be protected by the 2nd Amendment. The Justice Department’s enlightened interpretation of the Second Amendment as an individual right was hailed today by the firearms civil rights organization that has supported a key Texas case that led to a federal appeals court ruling upholding the individual rights concept. And: “Today’s constitutional scholars, including Prof. Laurence Tribe, confirm that the Second Amendment is an individual right,” LaCourse continued. “For years, our own Justice Department has been deaf and blind to such scholarship, and the Fifth Circuit ruling forced the government to face the facts. Solicitor General Olson and Attorney General John Ashcroft deserve credit for their courageous reversal of four decades of constitutional denial.” While the above is biased, it does state the opinion of non-trivial parties.
In all likelihood, the judge's order related to data collection and reselling is not legally enforceable. They weren't parties to the expungement action, so the judge doesn't have jurisdiction over them. And, the First Amendment protects the right to say truthful things pretty absolutely. Arguably, if the sites provided the information without making clear that it might not be current because records were expunged or corrected, there might be a claim for negligent misrepresentation, false light, or even defamation, but I seriously doubt that even those claims would hold up. The language in the order might cause sites to comply out of not legally justified concern, or just a desire to be accurate, even if it is not enforceable. So, it doesn't hurt to bring that information to the attention of such sites and ask them to take down the information. But, when push comes to shove, I very much doubt that you would prevail in court enforcing that order against them. Certainly, if you do nothing, they will do nothing, because they are not psychic and have no idea that the court order related to those records has been entered. Even a valid and enforceable order directed at a party over whom a court has jurisdiction is not effective until the person ordered to comply with it has notice of the order. And, there is no system that gives sites like that notice without you taking action to inform them of an order.
Your code is considered free speech (Bernstein v. United States) and you have allowed the use of the code via the MIT license. Since the application of your code is very generic and is not specifically targeting anyone. You probably are not criminally liable. This is simply writing a "Proof of Concept" for security testing purposes. That same way Metasploit, Nessus, and Nmap have actual exploit code but are considered tools of the trade. Now if you go around using your spyware on non consenting victims. You might get a visit from some people with guns and badges that have 3 letters on them.
In the United States, the government has, multiple times, destroyed homes while trying to catch a fugitive. And the homeowner sometimes makes a claim in federal court that this is an unconstitutional taking without compensation in violation of the 5th Amendment. In Lech v. Jackson, the 10th Circuit decided that the police and city were not liable for destroying a house while trying to arrest a criminal who had fled there. The Supreme Court declined to hear the case. But in Baker v. City of McKinney, Texas, less than 3 months ago, a district court declined to dismiss a case in which police destroyed a home to catch a fleeing criminal. Allegedly, in this case the police were given a key to the door, a garage door opener, and the code to the back gate by the homeowner - and instead of using those, they used explosives on the garage door and used a BearCat to knock down the fence and the front door. I'm not sure to what extent those facts, perhaps showing that the scale of the destruction was unnecessary, matter. To the best of my knowledge the case is still ongoing.
The 9th Circuit decision actually held that the challenged regulations constitute a prior restraint on speech that offends the First Amendment which is not the same as saying that computer software is speech. A crucial differentiation is that by prohibiting talking about the technology, the regulations imposed a &quot;prepublication licensing scheme that burdens scientific expression&quot;, which distinguishes the TikTok case from talking about cryptography. The regulations burden business transactions, which have for a long time not been protected by strict scrutiny. The first hill one would have to climb would be showing that there is a real First Amendment issue. There is no First Amendment right for the Chinese government to spy on Americans. The second issue is whether narrow tailoring means that if someone can come up with an alternative to an outright ban, then the regulation is not narrowly-enough tailored. We may eventually get a clearer guideline on that, since state governments have imposed very many restrictions on constitutional liberties, in order to prevent the spread of covid, when a less restrictive action would be warning people that this is a dangerous disease. Many restrictions have survived strict scrutiny because they were believed to be necessary to achieve that governmental end. The executive order identifies the compelling government interest: TikTok automatically captures vast swaths of information from its users, including Internet and other network activity information such as location data and browsing and search histories. This data collection threatens to allow the Chinese Communist Party access to Americans’ personal and proprietary information — potentially allowing China to track the locations of Federal employees and contractors, build dossiers of personal information for blackmail, and conduct corporate espionage. In light of that, it is hard to see that a warning notice would be effective in the face of this threat. Seizing the company and its IP and handing it over to Microsoft would be a less restrictive measure that would probably be as effective and would be protective of the First Amendment rights of teenagers, but it would also be somewhat outside the scope of current US law, so it isn't an actual alternative. I conclude that the ban is the least restrictive effective response to the threat. But it is not entirely clear what the constitutional rules are regarding effectiveness of alternatives (does 20% less restrictive compel a 10% less effective solution?).