DOJ’s Totally Non-Binding Guide to Legal Cyber Research

DOJ has published a new non-binding guidance document, Legal Considerations when Gathering Online Cyber Threat Intelligence and Purchasing Data from Illicit Sources, intended particularly for dealing with sites that "openly advertise illegal services and the sale of stolen credit card numbers, compromised passwords, and other sensitive information." It says that private security researchers and threat intelligence firms that visit black market online forums for research should create internal rules, document their work, and have established relationships with law enforcement.