Criminalising hacking tools

Making the sale, possession and distribution of the tools of hacking a criminal offence has obvious attractions. But many such tools are dual use and new laws run the risk of significantly inhibiting the activities of investigators, incident responders, penetration testers and academics. Recent UK attempts at framing such a law are discussed in order to show the broader problems of policy and wording.