one-to-many messaging

Clive D. W. Feather ukcrypto at chiark.greenend.org.uk
Tue, 15 Apr 2008 17:57:24 +0100


-----BEGIN PGP SIGNED MESSAGE-----

In article <00a801c89ee5$a75f7710$e57ea8c0@Jinja>, James Firth 
<james2@jfirth.net> writes
>But didn't R v. Stanford establish that whilst the operator had rights to
>control and access the system, this didn't exempt them from criminal
>liability for intercepting communications?

No.

R v Stanford was another case dealing with the meaning of authorisation.

"1(6) The circumstances in which a person makes an interception of a 
communication in the course of its transmission by means of a private 
telecommunication system are such that his conduct is excluded from 
criminal liability under subsection (2) if
(a) he is a person with a right to control the operation or the use of 
the system; or
(b) he has the express or implied consent of such a person to make the 
interception."

Stanford claimed that he arranged for X to carry out interceptions. X 
was an administrator of the system and, he argued, therefore "a person 
with the right to control the operation or the use of the system". The 
court decided that X's permission from the owner of the network to 
manipulate the system was only for the purpose of normal administration 
and *not* for these interceptions, which the owner would not have agreed 
to. Therefore, for the purposes of these interceptions X was not a 
person meeting the test of 1(6). Therefore the interception was 
criminal, therefore Cliff was guilty.

If the owner had asked X to do things that included interception [1], 
then X's authority would have extended to intercepting and so he (and 
thus Cliff) would have been protected by 1(6).

[All this from memory. I thought I had the decision on my laptop, but it 
seems not.]

[1] There's another case whose name I forget (possibly R v Stipendary 
Magistrates ex parte someone-or-other) about consent in relation to the 
Computer Misuse Act. The court found that consent for a particular type 
of operation *still* didn't give permission to carry out that action on 
data that the owner didn't expect. Following this argument, X would 
require authority to intercept the class of email actually intercepted, 
not just interception of email in general.

- -- 
Clive D.W. Feather                       | Home: <clive@davros.org>
Tel: +44 20 8495 6138 (work)             | Web:  <http://www.davros.org>
Fax: +44 870 051 9937                    | Work: <clive@demon.net>
Please reply to the Reply-To address, which is:  <clive@davros.org>

-----BEGIN PGP SIGNATURE-----
Version: PGP SDK 3.0.2

iQEVAwUBSATecyNAHP3TFZrhAQFjiwgAlyQEf6gP5kT0PDBCn9cFGKhknGNlMJ0R
gRmXWFYW6u44jx61E9BcV9M2+ZtMQFne7FtpLmBnLotpghWDNZCvr17baQspVr+w
UPDuFP0a+9DdrJm6LlpDfIpolL9U8zw/yvSwrfYn54hwRolKq2lFiml+TPdMgtTa
Nbl+T4PIIpmzFN+meo830fM7n1nI26ItmY6Xj9xo6/Z+LuHmD9Jl/Ib0EDwtaG66
ZP9+QHDRu5nXv3+915stjgluQROkWi+C4ylf1y181QDxXrPxiFLJl0NTMIrgcZXO
rK8jEhAI44Im0/gnYc2n+b5gzJE3BiCBVsQfYqc/e5XfH/SErd4krQ==
=khma
-----END PGP SIGNATURE-----