So, Microsoft has offered a reward for information on the writers of Downadup worm. Following a tradition going back many years where rewards were put up for murderers, highwaymen and even kings, the IT industry truly is ‘back to basics’. Don’t knock it, it works. Sven Jaschan, the author of the Sasser and Netsky worms, was arrested in May 2004 after a reward of £250,000 was offered. But there isn’t much consistency in how and when rewards are put up. When Storm was at its height, a reward wasn’t offered, and yet it actually went live, whereas Downadup is yet to do so.
I suppose this reflects real life: not every crime has a reward associated with it. However, it is a good indication of our failure to govern this new virtual world, and to learn from real world experience. I am reminded as to why Bonnie and Clyde were initially so successful as bank robbers – they could always dash across a state line and be safe from prosecution. In the end, the US had to amend its laws to close this loophole. This is precisely where we are with Internet crime. Hackers in one part of the world can commit crimes in another, remaining out of reach of the relevant authorities. It is an international problem which needs an international solution, just as the US needed a nationwide solution to catch bank robbers. In the meantime, rewards are the best we’ve got.