33

When we answer questions on Stack Overflow, most of us most of the time don't know the asker - who they are, what the purpose of their software is, etc.

What if we were to inadvertently help out a "black hat" hacker, such as one who is out to steal identities or cause other such mayhem?

Even worse, what if it were a terrorist we were inadvertently helping?

If that came to light, we would doubtless feel rotten about it, to say the least; but would there also be possible legal repurcussions/ramifications, even though we unknowingly aided such ones?

Is this a concern to anyone else? Has it been discussed?

13
  • 3
    Related: meta.stackexchange.com/questions/199353/…
    – Andy Mod
    Commented Dec 16, 2015 at 16:32
  • 64
    I would caution against taking legal advice from programmers, but I am not a lawyer. Commented Dec 16, 2015 at 16:35
  • 8
    I do my best to shield myself. If the question mentions 'exploit', 'virus', 'trojan', 'buffer overflow' etc, I down and close vote immediate with a comment explaining why. Of course, they always claim to be 'investigating', 'learning', 'ethical' etc, as if I always believe what I read on teh internet, lol. Commented Dec 16, 2015 at 17:33
  • 22
    What if you gave someone directions to the airport and they turned out to be a terrorist? Oh, the guilt!
    – Kaz
    Commented Dec 17, 2015 at 2:00
  • 18
    I feel bad whenever someone says they're trying to use Python and I don't do anything about it. Commented Dec 17, 2015 at 2:03
  • 2
    Search engine and even internet are also used by terrorist Or hacker. That doesn't mean to stop both. So, don't worry about. If any one have feel like that then don't use.
    – ketan
    Commented Dec 17, 2015 at 5:27
  • 6
    How to counter a black hat? With a tin foil hat! Winter bash is real.
    – Lundin
    Commented Dec 17, 2015 at 12:51
  • 3
    @ChrisGerken Or worse, PHP. shudders
    – reirab
    Commented Dec 17, 2015 at 21:57
  • 2
    Don't worry; as of January 1, they don't have to include attribution to your code anymore. If they don't, authorities might not be able to trace it back to you. :) Commented Dec 17, 2015 at 22:06
  • @JoshuaTaylor: I assume you mean the January 1st coming up in a couple of weeks; I hadn't heard anything about such a change. I guess there's a joke here somewhere something like "When code is unattributed, only black hat hackers will..." Commented Dec 17, 2015 at 22:09
  • 1
    @B.ClayShannon There's a big post on meta.SE at the moment, The MIT License – Clarity on Using Code on Stack Overflow and Stack Exchange; as of January first (oh, they pushed back to February 1st!), code contributions to Stack Overflow won't be CC-BY-SA, but will be MIT license, with a modification to allow third parties to copy code without attribution. My joke was just that "if a terrorist uses your code, it would have been traceable to you, since they'd have to provide attribution, but after the change, they won't have to." Commented Dec 17, 2015 at 22:28
  • 1
  • @JoshuaTaylor: Yeah, I got it; but then again, some of those cats aren't too bright (like the cat who took a selfie in front of his bunker whose location was subsequently identified and bombed) and maybe they have politely provided attribution. That would be funny (in a non-humourousway). Commented Dec 17, 2015 at 22:43

1 Answer 1

67

Our questions and answers use an open license. Anyone gets to have access to that knowledge, including people with ill intent.

However, the vast and overwhelming majority of people out there are just trying to get their job done. Or their homework finished on time. Or are trying to learn. I really wouldn't worry about this.

And yes, this has already happened. The Silk Road operator asked questions on Stack Overflow. No, the people that answered did not get into any hot water. No one knew at the time that the question asker was going to be arrested for running a dark-web drug trafficking site.

8
  • 1
    That makes sense to me; but the way some governments operate still concerns me in this regard. I can see them saying, "Ignorance is no excuse - you helped them, and thus - off with your head!" (probably not literally). Commented Dec 16, 2015 at 16:36
  • 46
    @B.ClayShannon: If you live in a country where law enforcement can make that stick, don't use the internet. Get out now. Stack Overflow is the least of your worries.
    – Martijn Pieters Mod
    Commented Dec 16, 2015 at 16:37
  • 8
    Wow @MartijnPieters - I never knew that even happened, that was an interesting read.
    – JonH
    Commented Dec 16, 2015 at 17:26
  • 24
    In a related, depressing case: Iran imprisoned and nearly executed the author of a photo gallery application because it was used by some porn sites. en.wikipedia.org/wiki/Saeed_Malekpour
    – user149341
    Commented Dec 17, 2015 at 0:58
  • 7
    @B.ClayShannon: Although "Ignorance is no excuse" is a real legal doctrine, it's shorthand for "Ignorance of the law is no excuse" (Latin Ignorantia juris non excusat). IANAL, but I know that ignorance of facts and circumstances absolutely can be an excuse, either mitigating a crime or completely negating it, provided that your actions were reasonable and otherwise legal. Some relevant legal doctrines, that you might want to Google, include mens rea, criminal negligence, recklessness, and due diligence.
    – ruakh
    Commented Dec 17, 2015 at 2:48
  • 15
    " And while this won’t appear anywhere in the criminal charges against Ulbricht, the court of computer-programmer opinion may duly note that he asked two questions on the site, but didn’t take the trouble to answer anyone else’s" - What a jerk. Commented Dec 17, 2015 at 5:05
  • @peeskillet To be fair to the drug trafficker, he could have used another account for non-felonious purposes and answered questions with that one. :)
    – reirab
    Commented Dec 17, 2015 at 22:04
  • Don't forget that you need mens rea (a guilty mind) to be convicted of a crime. If you've just walked out your house and someone asks you where a certain house number is, you say, "that's it there", and they go and kill someone inside the house, you are not guilty of anything as it wasn't your intent to cause anyone harm.
    – DJDaveMark
    Commented Jan 23, 2018 at 14:24

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .