HOME Calendar Join / Renew PC Alamode About Us HELP Sponsors
Reviews Columns Features Theme Issues   Archives Other  


 Computer Law

Do we really trust our computer hardware and software?
February 2001


Bill Wood is an Assistant City Attorney, in the San Antonio City Attorney's Office. He practices real estate and technology law for the city .

I'm afraid that most of us have gotten used to nasty surprises. Personal computer users have been forced to accept new hardware that is not exactly compatible and software that crashes immediately after installation. Well, maybe tolerated is the correct word. 

That is not a comforting thought when you think about air-traffic control software, the fail-safe control system of a nuclear power plant or the test equipment at the blood bank. Frankly, it isn't ever a satisfying thought. Just yesterday I saw the chaos when the cash register at a fast food restaurant was simply overcharging a customer. Thankfully the customer added the amounts in his head and challenged the charge. The worker entered the order three times and had three different answers. On the third attempt they got it right.

A great deal of law is about reliability. Law and Order is all about people and institutions doing what is reasonably expected. If they don't live up to the expectations then there should be legal consequences. The most important part of a lawyer's job in negotiating contract terms for the acquisition of new technology is to make sure that the contract defines what the widget is expected to do, how fast it is supposed to work, and then to incorporate a test program that verifies the final performance. Contracts and testing must provide the protection until things change in the technology world.

Some forward thinkers are not merely accepting the status quo. Eventually things may change. There are new initiatives that are seeking failure free computing where warranties and licenses rarely provide strong protection for the consumers.

Carnegie Mellon University, NASA, Microsoft, Sun Microsystems, Compaq, IBM, Hewlett-Packard, Silicon Graphics and others have formed the High Dependability Computing Consortium with the goal, 

"to undertake basic, empirical, and engineering research aimed at making the creation and maintenance of computer systems a true professional discipline comparable to civil engineering and medicine disciplines people stake their lives on without question." 

Granted some of the members are selling the products we love to hate, and it will take some strong results to cure the mistrust. Dean James H. Morris at Carnegie Mellon is a key supporter of the new efforts, and he is looking at it as a long-term project. He wrote, 

"the point is that enthusiasm for computers has progressed to the point that our society is already completely committed to using them, and is becoming utterly dependent on them working correctly and continuously. But, commercial computer systems, as we currently build them, simply aren't worthy of our unreserved trust and confidence."

He points out that one ambitious goal of the Consortium is to 

"understand the human problems in creating, maintaining, and using computer systems. This has become a vital area of research as computers have become ubiquitous. Seat-of-the-pants design might have been sufficient when the users of computers were engineers, scientists, and programmers; but now a deep understanding of human capabilities must be built into design because the users are often very different from the designers. “Pilot error” is the most frequently cited cause of airline mishaps, and 'programmer error' is similarly often the purported cause of software defects, except in the frequent case in which problems are blamed on 'user error'. We need to understand and account for the capabilities of both the designers and end users of systems." 

His very interesting essay is found on the Center for National Software Studies website.

Can you count on the security of your e-mail?
Well, a new law in England might cause you some misgivings. Last summer Parliament passed the Regulation of Investigatory Powers Act 2000.  Certain provisions appear to limit MI 5 and other British government powers when it actually gives the officials wide latitude and has several provisions that may surprise you. 

The purpose of the act is stated in its first sections. With some huge exceptions it is a criminal offense for any person in the United Kingdom to intercept any communication in the course of its transmission by means of the public postal service or through a public or private communications system. What is surprising is the requirement that anyone can be required to assist the government in intercepting Internet traffic for a long list of reasons. The British Secretary of State and other officials could issue warrants on private Internet Service Providers and even workers in a company's computer department to divert or copy internet traffic. I'm not an expert on the English legal system but this act does not appear to require a judge to sign the warrant.

Now that may not seem too shocking after the disclosure of the use of Carnivore by the FBI in the United States to eavesdrop on the bad guys. But there are some unusual provisions in the English law. Besides the expected national security and law enforcement concerns, the warrant can be issued, 

"for the purpose of safeguarding the economic well-being of the United Kingdom." 
Any US business trying to compete in the UK or with a branch in England might want to review the requirements of this act with US lawyers and UK solicitors.

But, it gets better. (Or is that worse?) Section 19 of the Act allows the official issuing the warrant to order the person upon whom it is served to keep the activities secret under penalty of up to five years in jail. The person might even be ordered not to tell his supervisors about the warrant--even if they are not the suspects. 

Clearly, the use of technology is integral to modern life. The trust we place in the technology's operation and security is always subject to change. I believe the High Dependability Computing Consortium is an encouraging step but the Regulation of Investigatory Powers Act 2000 is not.


Copyright© 1996-2009
Alamo PC Organization, Inc.
San Antonio, TX USA