Computing and Ethics

A. What is Intellectual Property?

Intellectual Property (IP) refers to intangible creations of the human intellect, such as software code, literary compositions, artistic creations, inventions, symbols, names, and industrial designs.

A. The Four Major Forms of Software Piracy:

• End-User Piracy: Using multiple installations of a single-user licensed software across a company network without purchasing additional licenses.
• Hard-Disk Loading / Pre-Installed Piracy: Computer hardware vendors installing unauthorized, cracked copies of commercial operating systems or software onto computers prior to sale to attract buyers.
• Software Counterfeiting: Duplicating, packaging, and selling pirated software disguised as authentic manufacturer products with forged security seals.
• Internet / Online Piracy: Uploading copyrighted software to unauthorized peer-to-peer (P2P) torrent networks or file-sharing platforms for illegal downloading.

B. Software Classification Spectrum:

A. Hacking vs Cracking:

• Ethical Hacker (White-Hat): A certified computer security specialist who systematically breaches system defenses with explicit prior authorization from the system owner to discover vulnerabilities before malicious adversaries can exploit them.
• Cracker (Black-Hat Hacker): An unauthorized intruder who breaks into computer networks with criminal, malicious intent to steal sensitive data, deploy malware, extort ransom, or sabotage critical infrastructure.

B. Taxonomy of Malicious Software (Malware):

C. Modern Social Engineering Attacks:

• Phishing: Fraudulent emails or SMS messages disguised as official communications from trusted institutions (banks, schools) tricking users into revealing passwords or credit card credentials on spoofed counterfeit websites.
• Identity Theft: Stealing personal credentials (PAN, Aadhaar, Social Security number) to fraudulently obtain credit cards, loans, or impersonate the victim in criminal activities.
• Cyberbullying & Stalking: Using digital messaging platforms to harass, intimidate, defame, or stalk individuals persistently.

A. The Core Defensive Shields:

1. Cryptography (Encryption & Decryption):
   The mathematical process of transforming intelligible human-readable data (Plaintext) into an unreadable scrambled format (Ciphertext) using an encryption key. Only recipients possessing the authorized decryption key can unscramble the message.
   • Symmetric Encryption: Uses the same secret key for both encryption and decryption.
   • Asymmetric Encryption (Public-Key): Uses a public key to encrypt and a mathematically linked private key to decrypt (powers HTTPS, SSL/TLS, and Digital Signatures).
2. Firewalls: A hardware or software barrier installed between an internal private network and the untrusted public Internet. It inspects all incoming and outgoing network data packets, blocking unauthorized traffic based on predefined security rules.
3. Two-Factor Authentication (2FA): Demands two independent forms of verification before granting access: (1) Something you know (password) + (2) Something you have (OTP sent to smartphone or biometric fingerprint).
4. Digital Footprint Management: The trail of data left behind when using the Internet.
   • Active Footprint: Data you deliberately submit (social media posts, blog comments, uploaded images).
   • Passive Footprint: Data collected invisibly without direct consent (IP addresses, browsing history, cookies, geolocation logs).

Key Provisions of the IT Act 2000 (Amended 2008):

• Legal Recognition: Grants formal legal validity to electronic records, digital signatures, and e-commerce transactions in India.
• Section 65 (Tampering with Computer Source Documents): Imprisonment up to 3 years or fine up to ₹2,00,000 for altering or concealing source code.
• Section 66 (Hacking with Computer System): Punishable with imprisonment up to 3 years or fine up to ₹5,00,000 for unauthorized access, data destruction, or denial of service.
• Section 66C & 66D (Identity Theft & Cheating by Personation): Imprisonment up to 3 years and fines for using fraudulent digital signatures or passwords.
• Section 66E (Violation of Privacy): Strict criminal penalties for capturing, publishing, or transmitting images of private body parts without consent.
• Section 66F (Cyber Terrorism): Imprisonment for life for cyber attacks threatening the sovereignty, unity, or integrity of India.

A. Case Study 1: The WannaCry Ransomware Epidemic (2017):

In May 2017, the WannaCry worm exploited an unpatched vulnerability in Microsoft's Server Message Block (SMB) network protocol. Within hours, it encrypted critical hospital diagnostic databases, government offices, and rail transport networks across 150 nations. The disaster highlighted the critical necessity of automated security patching, maintaining offline air-gapped backups, and implementing network firewalls.

B. The Digital Personal Data Protection Act (DPDPA 2023):

India's latest landmark privacy law enforces stringent accountability on "Data Fiduciaries" (corporations handling user data):

• Uncompromising Consent Architecture: Companies must acquire clear, specific, and revocable consent before processing personal user data.
• Right to Erasure & Correction: Citizens possess the legal right to demand the deletion of their personal digital footprint.
• Hefty Financial Penalties: Fines up to ₹250 crore can be levied on organizations failing to take reasonable security safeguards to prevent personal data breaches.

A. The Ten Commandments of Computer Ethics (Computer Ethics Institute):

1. Thou shalt not use a computer to harm other people.
2. Thou shalt not interfere with other people's computer work.
3. Thou shalt not snoop around in other people's computer files.
4. Thou shalt not use a computer to steal.
5. Thou shalt not use a computer to bear false witness (spread fake news/defamation).
6. Thou shalt not copy or use proprietary software for which you have not paid (Software Piracy).
7. Thou shalt not use other people's computer resources without authorization or proper compensation.
8. Thou shalt not appropriate other people's intellectual output (Plagiarism).
9. Thou shalt think about the social consequences of the program you are writing or system you are designing.
10. Thou shalt always use a computer in ways that ensure consideration and respect for your fellow humans.

B. Essential Netiquette Protocols:

• Avoid typing in ALL CAPS (interpreted as shouting in digital communications).
• Respect bandwidth and storage; do not spam or forward unverified viral messages.
• Respect personal privacy; never publish photographs or personal details of others without explicit consent.
• Exercise critical evaluation; verify factual sources before sharing information online.

A. The 7 Golden Rules of Personal Cyber Safety:

1. Password Entropy: Create complex passphrases containing at least 12 characters combining uppercase, lowercase, numbers, and special symbols (e.g., Tr@vel#Blue$99). Never reuse passwords across email and social media.
2. Phishing Vigilance: Never click on hyperlinks embedded in unsolicited emails or SMS messages claiming lottery prizes, bank account blocks, or urgent threats. Check the sender's exact domain address.
3. Public Wi-Fi Precaution: Avoid accessing net banking or entering credit card numbers over unencrypted public Wi-Fi networks in cafes, airports, or railway stations.
4. Software Updates: Enable automated operating system and antivirus updates to patch newly discovered zero-day security vulnerabilities.
5. Social Media Privacy Settings: Restrict profile visibility to approved friends only; never share real-time location tags, home addresses, or travel plans publicly.
6. Report Cybercrimes Promptly: In India, report cyber harassment, fraud, or abuse immediately to the national cybercrime portal (cybercrime.gov.in) or helpline 1930.