Comment by kurikuri

Comment by kurikuri 16 hours ago

17 replies

View on Hacker News

> I do know, however, that if you take private data from your employer and leak it (or sell it) you’re not going to be on the right side of the law. I have a hard time buying this article’s point that it was just “violating company policy”

If I were to copy the files on my work device and distribute them, I would be in violation of NDAs which could be pursued as civil offenses. If I didn’t have those NDAs, my employer could try and pursue something in court, along with firing me, but it wouldn’t be a straightforward suit.

None of these are (or at least, should be) criminal situations.

ofjcihen 15 hours ago

As a DLP professional: please don’t tell people this. You can absolutely be arrested and prosecuted for this.

Reply View 9 replies
  • opello 15 hours ago

    What's the charge for the arrest? I thought legally intellectual property wasn't "real property." If it actually was a trade secret, it might make more sense.

    Reply View 8 replies
    • tuckerman 15 hours ago

      Just because a user has privileges to access files doesn’t mean doing so is permitted for any purpose. Accessing them for this unauthorized purpose is likely computer fraud, at least under California law as I understand it.

      Reply View 0 replies
    • fsckboy 15 hours ago

      >I thought legally intellectual property wasn't "real property."

      if you break into your boss's house and copy his latest recordings (your boss is Stevie Wonder) you are not simply guilty of violating his copyrights.

      "computer fraud and abuse act", or who knows how many other laws, are focused on various aspects of "you know you are sneaking about", or even if you don't, tuff noogies.

      Reply View 1 reply
      • opello 15 hours ago

        Sure but the difference in value is also obvious. Stevie Wonder has a business interest in controlling the release of his music, as do other parties like a production company and a publisher. And an early release may do harm to the value of such a recording. But I don't expect most organizations that put up security cameras have a business interest in monetizing the footage.

        Reply View 0 replies
    • anileated 10 hours ago

      There are intangible kinds of property and assets that are more valuable than “real property”. Trade secrets is an obvious one, being a special case of intellectual property. It would be absolutely irrational for legal system to classify theft of iPhone as criminal and theft of IP as civil, when the former cost $700 and monetizing the latter could finance creator’s entire life.

      Reply View 0 replies
    • ofjcihen 15 hours ago

      Depending on jurisdiction it might be theft, could be something more recently ratified that’s basically made for exactly this purpose. Could also just be a plain old federal CFAA related charge since those are pretty “malleable”.

      Again, take these laws seriously and don’t do this.

      Reply View 3 replies
      • opello 15 hours ago

        Interesting. Do you have an example of where copying data like this (something with almost no commercial value, but done without authorization, whose harm is basically the disclosure of the facts of the camera's location/positioning) was charged as theft? Because it seems like in a legal sense, copying isn't theft, but the consequences of the copy becoming generally available (say a commercial interest in the data, in the Stevie Wonder example from the sibling thread) may make the damage of the copy and subsequent release obvious. I'm also curious what has recently been enacted to cover this scenario if you have a ready example?

        I believe you and heed your warning. I think it's good to understand these things too though.

        Reply View 2 replies
noitpmeder 16 hours ago

I mean in the first case you're literally stealing from your employer. If that doesn't make you a criminal for theft I don't know what does

Reply View 6 replies
  • opello 15 hours ago

    But the footage isn't "real property" as I understand it. The only thing the theft does is deprive the company from the opportunity to sell the footage themselves, and it's not exactly like selling security camera footage is the business model of many/any(?) company.

    If the harm is that the company couldn't sell the footage itself, the remedy should be giving the company the money from the sale.

    Reply View 4 replies
    • otterley 14 hours ago

      It’s a common misconception that “property” relates to physical objects (chattel) or land (real property). But that’s an incorrect and limited understanding. More generally, it’s about the right to control something and exclude others from using it.

      Copyright, for example, is what’s known as “intellectual property.” Its rights protect intangible things, namely, artistic expressions.

      Reply View 3 replies
      • opello 14 hours ago

        I think I did understand that, specifically contrasting real property and intellectual property, but maybe wrongfully implied that theft could only apply to real property.

        However, is there any argument for security camera footage like this instance to be considered a trade secret? Isn't that the only type of intellectual property it might be? It seems like if the business wasn't planning to derive economic value from the sale of the security camera footage (which seems like a generally safe assumption) it would fail to acquire trade secret protections.

        Reply View 2 replies