1-"is an attempt to gain access to a system by posing as an authorized user. Synonymous with impersonating, masquerading or mimicking."[1]
2-"Assuming the identity of another as in sending email under someone else's name."[2]
3-"Unauthorized use of legitimate identification and authentication data, however it was obtained, to mimic a subject different from the attacker. Impersonating, masquerading, piggybacking, and mimicking are forms of spoofing."[3]
But the government of Pakistan has a unique definition for it. i.e
" Whoever establishes a website, or sends an electronic message with a counterfeit
source intended to be believed by the recipient or visitor or its electronic system to be an authentic source with intent to gain unauthorized access or obtain valuable information which later can be used for any unlawful purposes commits the offence of spoofing."
This definition is apperently somewhat okey, if it is to be used for some general purposes. But if we have to define some thing as a crime, than it ,undoubtedly demands much consideration and attention, which this definition was not fortunate enough to have. This definition contains too much loopholes in it, and is so much vague in its nature, that any innocent person can become a victim of it. And that is something which should must not be a part of laws, which could cause in severe penalties, like imprisonment upto 3 years, or fine or both- as described in the law.
If we compare this definition with the international defintions, one fact will be abondantly clear in front of us, that on what the government is trying toput a label of spoofing, can actually be considered as phishing, but not spoofing.
It is not the heading, under which this definition is given, about which i have reservations, but i have some serious reservations about its content also. Anonomity and privacy is the right of every citizen of this country, provided not only by the constitution of Pakistan, but by the UNO charter as well. If this law is implimented fully in letter and spirit- by keeping record of every individual's IP address- then it could ifringe our privacy, and could deprive us from our basic right.
Having said all that, let me also add, that i am not of a view keeping track of mischievious elements in the society, but what all i am saying is, that such laws should not put anty kind of bars and constraints of a common and innocent citizens freedom and annonomity. At the end through this plateform, I would like to appeal the government of Pakistan to ammend such laws, which have more ability to drag an innocent person in the law courts than the real culprits. Why can't we made laws like the rest of the countries, which has the ability to dealt with the troublesome and wicked elements, and give the due freedom to the innocent persons as well.
References:
1-ftp.fas.org/irp/congress/1996_hr/s960605a.htm
2-www.psycom.net/iwar.2.html
3-www.npd.ufes.br/Glossary_Security.htm
4-Section 15 of the prevention of electronic crime law.
