Section 3A of the United Kingdom's computer misuse act states you are not allowed to produce, obtain or supply articles which can be used for computer misuse.
How do UK information security bloggers and conference speakers go about this, as technically, even with non-malicious intent, there is a violation of the CMA?
(4) In this section “article” includes any program or data held in electronic form.
Prosecutors should be aware that there is a legitimate industry concerned with the security of computer systems that generates 'articles' (this includes any program or data held in electronic form) to test and/or audit hardware and software. Some articles will therefore have a dual use and prosecutors need to ascertain that the suspect has a criminal intent.
Does the institution, company or other body have in place robust and up to date contracts, terms and conditions or acceptable use polices?
Are students, customers and others made aware of the CMA and what is lawful and unlawful?
Do students, customers or others have to sign a declaration that they do not intend to contravene the CMA?
Has the article been developed primarily, deliberately and for the sole purpose of committing a CMA offence (i.e. unauthorised access to computer material)?
Is the article available on a wide scale commercial basis and sold through legitimate channels?
What stops you from invoking §19.6 if a police officer attempts to seize your mobile phone?
Why is PayPal blocking my account according to U.S. tax law, if I've a UK account only?
Am I allowed to reverse engineer/decompile a computer program?