Concern in Russian infosec community as new Russian legislation criminalizing trafficking in stolen personal data has no exceptions for incident responders or CTI researchers. Sharing a data leak to evaluate if it's real? Could result in years in prison—maximum sentence is 10 years. Will the Duma fix the obvious problem before final passage of the bill? Not looking likely in an environment where legislators are clamoring for action in response to a flood of Russian data dumped on the Internet.
=> More informations about this toot | View the thread | More toots from sig_ug@infosec.exchange
text/geminiThis content has been proxied by September (3851b).