http://www.lukasfeiler.com News from Lukas Feiler http://www.lukasfeiler.com/articles.html In this article, I discuss the legal risks merchans are facing if they fail to properly secure electronic gift certificates. http://futurezone.at/netzpolitik/6909-warnstreik-fuer-das-freie-internet-beginnt.php I argue that the weak social concensus on whether to enforce copyright law online is indicative of a more general discontent with copyright law itself. http://www.lukasfeiler.com/articles.html In this article, I describe why employers would be well advised to include contractual language in all employement contracts to address the issue of who owns an employee-operated twitter account after the employee leaves the company. http://www.lukasfeiler.com/articles.html In this article, I discuss the legal risks for companies that use faked Facebook accounts for marketing purposes. http://www.lukasfeiler.com/articles.html In this article, I describe why hastey video game sellers face sanctions under copyright law, irrespective of the first sale doctrine. http://www.lukasfeiler.com/lectures.html In this presentation, I discussed the basics of Austrian computer crime law, liability for security breaches, and mandatory data breach notification. http://www.lukasfeiler.com/articles.html In this book which is based on my Ph.D thesis, I present an analysis and risk-based assessment of the current state of information security law (aka cyber security law) in the EU and the U.S. http://www.lukasfeiler.com/articles.html In this article, I discuss why non-EU web service providers might have to comply with the data protection laws of all 27 Member States when employing new web technologies. http://tvthek.orf.at/programs/1203-Zeit-im-Bild/episodes/2970545-Zeit-im-Bild/2970653-TGKK-sucht-Datenleck In particular, I point out that Austrian computer crime law does not per se criminalize hacking which is a significant deficiency of the current legal situation. http://www.lukasfeiler.com/articles.html The article discusses the legal situation as well as the policy arguments advanced in the EU and the U.S. in the ongoing debate about whether outages of Critical Information Infrastructure should be kept secret or should be subject to mandatory public disclosure. http://www.nytimes.com/2011/08/21/business/in-personal-data-a-fight-for-the-right-to-be-forgotten.html The so-called "right to be forgotten" is currently the subject of intense discussions in EU data protection policy circles. http://futurezone.at/meinung/4343-facebook-eltern-tappen-in-die-kinderfoto-falle.php The article provides a discussion of some of the legal issues parents face when they want to share photos of their kids online. http://futurezone.at/netzpolitik/4131-bis-zu-fuenf-jahre-haft-fuer-webattacken.php The article provides an overview of the most relevant provisions of Austrian computer crime law. http://www.lukasfeiler.com/articles.html The article discusses potential intellectual property rights violations of 3D printing. http://www.lukasfeiler.com/articles.html The article discusses the transposition of the Data Retention Directive in Austria. http://www.lukasfeiler.com/articles.html The thesis identifies, analyses, and comparatively assesses regulatory policies in EU and U.S. law which address information security. http://pear.php.net/package/XML_Query2XML This release allows you define your own prefixes. http://www.lukasfeiler.com/articles.html In this paper, I discuss how EU and US law increasingly separate the concepts of ownership and authorization as regards personal computers; I argue that this separation is detrimental to computer security. http://www.lukasfeiler.com/lectures.html In my talk I discussed how malware compromises computers and how it behaves once it has obtained control over a computer. http://www.lukasfeiler.com/articles.html In this book chapter, I discuss the technical aspects of Internet consorship and the limits set by international human rights law as well as WTO law. http://www.lukasfeiler.com/articles.html This article discusses the EU Data Retention Directive's interference with the fundamental rights to privacy and data protection as protected under the Charter of Fundamental Rights of the EU. http://www.lukasfeiler.com/articles.html This article discusses to what extent Austrian copyright law empowers copyright holders to force Internet access providers to block access to infringing web sites. http://www.lukasfeiler.com/articles.html This article discusses the possibility of suing Facebook in an Austrian court which may, to a significant extent, apply Austrian law http://www.lukasfeiler.com/KURIER-Facebook-Interview.pdf In this interview, I discuss the leagal issues of defamatory postings as well as the issue of jurisdiction for potential lawsuits against Facebook. http://www.lukasfeiler.com/articles.html This article discusses the copyright and anti-trust-related legal issues of jailbreaking an iPhone or iPad. http://www.lukasfeiler.com/articles.html This article discusses the fundamental differences in data privacy law in the EU and the U.S. http://www.lukasfeiler.com/articles.html This article discusses the legal framework in which impersonation fraud (aka "identity theft") occurs in the EU and the U.S. http://www.lukasfeiler.com/articles.html This article discusses the new notification regimes for Data Security Breaches and Network Security Breaches. http://www.lukasfeiler.com/lectures_brg9/ On December 4th, I was given the opportunity to hold a guest lecture at the my old high school (Bundesrealgymnasium Wien 9) on cryptography. http://pressetext.com/news/091106030/oesterreich-speichert-telefondaten-ab-2010/ In the interview, I talk about the legality of the EU Data Retention Directive with regard to fundamental rights and the possible ramifications of a case still pending before the German Constitutional Court (BVerfG). http://derstandard.at/fs/1254312039805/Mythos-Das-Netz-ist-kein-Freibrief-fuers-Poebeln This article discusses identity theft, data protection online and the myth of the Internet as a legal vacuum. http://www.lukasfeiler.com/articles.html This article discusses Data Breach Notification with a special focus on the Austrian law. http://www.lukasfeiler.com/articles.html This article discusses the protection of anonymous free speech online. http://www.lukasfeiler.com/articles.html Discusses Security Breach Notification with a special focus on the EU telecoms package. http://www.lukasfeiler.com/articles.html This article discusses the proportionality and suitability of data mining as a tool for fighting terrorism. http://pear.php.net/package/XML_Query2XML This release brings performance enhancements due to refactoring of internal classes and an improved caching implementation. http://diepresse.com/home/recht/rechtallgemein/453118/index.do The ECJ found the Data Retention Directive to be within the competences of the European Community. http://www.lukasfeiler.com/articles.html This article discusses the state of Freedom of Information in the EU and Austria. http://www.lukasfeiler.com/articles.html I co-authored this book :-) http://www.lukasfeiler.com/articles.html This article discusses the purpose of Data Breach Notification Laws. http://www.lukasfeiler.com/articles.html This paper discusses the legality of the Data Retention Directive (2006/24/EC) with regard to European fundamental rights and the competences of the EC. http://www.lukasfeiler.com/articles.html This article (written in German) describes circumstances under which European antitrust law might require the support for standardized document formats. http://www.lukasfeiler.com/lectures_linuxwochen2008/index.html After having given a talk on computer crime law at the Linuxwochen in 2006 and on the EU Data Retention Directive in 2007, it was finally Copyright Law's turn in 2008 :-) http://www.lukasfeiler.com/articles.html This article (written in German) provides a tutorial for how to most effectively use my PEAR package XML_Query2XML. http://www.lukasfeiler.com/articles.html This article discusses a legislative proposal by the Austrian Parliament that if implemented, would not only fail to achieve its objective but would also pose serious limits on today's e-commerce. http://pear.php.net/package/XML_Query2XML this release adds support for PEAR Net_LDAP2, implements 'limit' and 'offset' options for the MDB2 and DB drivers, improves the logging functionality and consolidates the unit tests http://diepresse.com/home/recht/rechtallgemein/378531/index.do The Austrian Parliament discussed mandatory confirmation mails for e-contract formation. http://pear.php.net/package/XML_Query2XML The PEAR package XML_Query2XML has now more than 10.000 downloads :-) http://www.daniela-list.at/index.php/2008/03/14/radio-netwatcher-heute-wieder-mit-renommierten-studiogasten/ live on Radio ORANGE/Netwatcher together with Dr. Lennart Binder (the defense attorney in Austria's first government hacking case) and Dr. Kurt Einzinger, Secretary General of Internet Service Providers Austria (ISPA). http://www.daniela-list.at/index.php/2008/02/29/150-jubilaum-radio-netwatcher-studiogaste-alexander-zachlif-und-lukas-feilerinternetexperte/ live on Radio ORANGE/Netwatcher together with Alexander Zach, member of the Austrian Parliament: discussing secret surveillance without judicial oversight and the new German Federal Constitutional Court's ruling on the constitutional right to confidentiality and integrity of one's computer system http://rocketscience.lukasfeiler.com/bigqmail.patch the combined patch now contains the outgoingips patch and a dns patch to better handle DNS responses larger than 512 bytes http://pear.php.net/package/XML_Query2XML this stable release introduces no changes since 1.6.0RC1 http://pear.php.net/package/XML_Query2XML This release candidate adds LDAP support and implements an open driver architecture http://pear.php.net/package/XML_Query2XML no changes since 1.5.0RC1 http://pear.php.net/package/XML_Query2XML This release candidate improves performance by at least 30% http://pear.php.net/package/XML_Query2XML This release adds support for PDO - thereby supporting SQLite 3 http://pear.php.net/package/XML_Query2XML This release provides enhanced support for CDATA sections, binary data (via base64 encoding) and dynamic XML element names. http://www.lukasfeiler.com/articles.html This article describes the first-sale doctrine as it applies to Austrian copyright law. http://www.ibm.com/developerworks/library/x-query2xml/ The article was written by Vikram Vaswani. http://www.lukasfeiler.com/articles.html#cyberlaw The article describes the EU Data Retention Directive and its implementation in Austria http://www.youtube.com/watch?v=YMaOiZtGMSo Recorded May 31 2007; German only http://sendungsarchiv.o94.at/get.php?id=094pr1454 Recorded May 31 2007; German only http://www.lukasfeiler.com/lectures_linuxwochen2007/index.html The directive itself, an extensive analysis by the european center for e-commerce and internet law, related movies, documentaries and more http://www.lukasfeiler.com/Linuxwochen2007_DataRetention.pdf More information to follow http://pear.php.net/package/XML_Query2XML This release makes it easier to dump all contents of a database to XML http://rocketscience.lukasfeiler.com/bigqmail.patch the make commands that need to be run were missing http://linuxwochen.at/2007/Programm_Wien:_%C3%9Cberwachungsstaat_vs_B%C3%BCrgerrechte:_Die_europ%C3%A4ische_Data_Retention_Richtlinie The EU Data Retention Directive as well as its Austrian implementation will be subject to this talk. Ways to circumvent the new surveillance measures will also be covered (e.g. EFF's Tor). http://www.qmail.org/top.html#200704210 It's a new version of a combined patch for carrier-grade qmail mail server installations and includes netqmail-1.05-tls-smtpauth, the validrcptto.cdb patch, the big-concurrency.patch, the doublebounce-trim.patch and the big-ext-todo patch (EXTTODO patch and big-todo patch) http://pear.php.net/package/XML_Query2XML This release adds the capability to handle data sources that use another character encoding than ISO-8859-1; it is now also possible to use to use another XML encoding than UTF-8 (e.g. ISO-8859-1) http://rocketscience.lukasfeiler.com/bigqmail.patch It's a combined patch for carrier-grade qmail mail server installations and includes netqmail-1.05-tls-smtpauth, the validrcptto.cdb patch, the big-concurrency.patch, the doublebounce-trim.patch and the big-ext-todo patch (EXTTODO patch and big-todo patch) http://www.lukasfeiler.com/articles.html#cyberlaw Explains why botmasters might not be criminally liable in Austria http://query2xml.sourceforge.net I am proud to announce the second stable release of XML_Query2XML: it is now possible to integrate other XML data sources http://www.lukasfeiler.com/articles.html#ThreatUpdates Discusses the nature of and the criminal liability for Man-in-the-Middle (MITM) Attacks http://query2xml.sourceforge.net I am proud to announce the first stable release of XML_Query2XML http://query2xml.sourceforge.net Due to security considerations this release does not use eval() anymore http://www.lukasfeiler.com/articles.html (output is an Austrian magazine for business & IT) http://query2xml.sourceforge.net This release adds support for the database abstraction library ADOdb http://www.lukasfeiler.com/articles.html#ThreatUpdates Discusses the criminal liability for social engineering in Austria http://query2xml.sourceforge.net This release fixes a minor bug with PHP5 prior to 5.1.0 http://www.lukasfeiler.com/articles.html (output is an Austrian magazine for business & IT) http://www.lukasfeiler.com/Tor.pdf This article (written in German) shows why Tor makes the EU data retention directive useless http://www.lukasfeiler.com/articles.html#ThreatUpdates Think of a hacker building a network of 10,000+ compromised machines ... http://www.lukasfeiler.com/articles.html The new sections also includes regularly published Informations Securty Threat Updates http://www.lukasfeiler.com/teaching_linuxwochen/index.html Today I gave a talk at the Linuxwochen in Vienna on computer crime law - presentation slides and some additional information are now available http://query2xml.sourceforge.net XML_Query2XML finally got accepted as an official PEAR package! See also http://pear.php.net/package/XML_Query2XML http://www.lukasfeiler.com/favorite_books/index.html all are available online: includes some papers from phrack, the famous Empirical Study of the Reliability of UNIX Utilities, a couple of Spafford articles and lots more http://rocketscience.lukasfeiler.com/qmail/ includes new patch for Clam AV v0.88.1 http://www.lukasfeiler.com/favorite_books/index.html ISO/IEC 27001, 17799, German BSI standards, NIST publications; the common criteria and the orange book are still to follow http://www.lukasfeiler.com/Zur_strafrechtlichen_Beurteilung_von_IT-Sicherheitsluecken.pdf Zur strafrechtlichen Beurteilung von IT-Sicherheitsluecken http://rocketscience.lukasfeiler.com/qmail/ qmail with TLS and SMTP auth & Courier-IMAP/POP3 & MySQL & Clam AV & SpamAssassin - all with virtual domain support http://www.lukasfeiler.com/nyc/ it contains a Google Map Mashup and two posters http://query2xml.sourceforge.net full PEAR coding convention complience http://query2xml.sourceforge.net new exception handling, MDB2 support and new unit tests