# Shorting based on info a worm sent you

**URL:** <https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177>\
**Category:** Factual Questions\
**Created:** [October 16, 2008, 11:03am UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177 "2008-10-16T11:03:04Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\
**Post date:** [October 16, 2008, 11:03am UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/1 "2008-10-16T11:03:04Z")

</div>

Dan, of Dan’s Data, has a rather interesting little anecdote embedded in a much longer [piece about malware, past and present](http://www.dansdata.com/gz007.htm):

> [@](#):
>
> The best dirt Sircam ever sent me was a document from a company that helps other companies through receivership. It named a business that hadn’t yet announced receivership. I could have gone short on their stock and turned myself into part of an insider trading test case, but I didn’t.

(To be clear: Sircam is a worm that spreads by embedding itself in arbitrary files on the infected computer’s hard drive and then emailing the result to a new victim. It’s obviously possible to strip out the worm and read the file it used.)

I’m a sucker for the murky concepts of responsibility and intent when a complex system misfires. Is there anything on the books about acting on information you shouldn’t have that you got by accident? Can you forge a usable defense out of someone else’s horrible computer security practices? I don’t suppose there’s anything especially clear in precedent or law in this area yet.

---

<div class="post-metadata">

**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\
**Post date:** [October 17, 2008, 8:09pm UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/2 "2008-10-17T20:09:39Z")

</div>

So nobody’s willing to take a stab at this? I guess Dan was right about that ‘test case’ thing. 🙂

---

<div class="post-metadata">

**Author:** ![Ethilrist](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ethilrist/32/4604_2.png) [@Ethilrist](https://boards.straightdope.com/u/Ethilrist)\
**Post date:** [October 17, 2008, 8:19pm UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/3 "2008-10-17T20:19:53Z")

</div>

This would explain the mandatory footer on corporate emails (“this may contain privileged, proprietary or otherwise private information”). Having said that in the email, or in a header at the top of the code for an application, or on the document info screen in the word document, absolves the company from a certain amount of liability and shoves it off onto anybody who uses the information in an inappropriate manner.

Not being guilty of insider trading because the information came from stolen data is like not being guilty of taking illegal drugs because they were in a purse you stole.

---

<div class="post-metadata">

**Author:** ![ultrafilter](https://avatars.discourse-cdn.com/v4/letter/u/3d9bf3/32.png) [@ultrafilter](https://boards.straightdope.com/u/ultrafilter)\
**Post date:** [October 17, 2008, 8:31pm UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/4 "2008-10-17T20:31:21Z")

</div>

My (non-lawyer) guess is that some court somewhere would find that a reasonable person would assume that the information was not public and should not be used as a basis for trading.

---

<div class="post-metadata">

**Author:** ![Santo\_Rugger](https://avatars.discourse-cdn.com/v4/letter/s/e95f7d/32.png) [@Santo\_Rugger](https://boards.straightdope.com/u/Santo_Rugger)\
**Post date:** [October 17, 2008, 8:36pm UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/5 "2008-10-17T20:36:51Z")

</div>

> [@Ethilrist](#):
>
> This would explain the mandatory footer on corporate emails (“this may contain privileged, proprietary or otherwise private information”). Having said that in the email, or in a header at the top of the code for an application, or on the document info screen in the word document, absolves the company from a certain amount of liability and shoves it off onto anybody who uses the information in an inappropriate manner.

Are those header/footers legally binding for an email you did not solicit and never agreed to?

> [@Ethilrist](#):
>
> Not being guilty of insider trading because the information came from stolen data is like not being guilty of taking illegal drugs because they were in a purse you stole.

If I understand worms correctly, it would be more analogous to not being guilty of possessing illegal drugs when a thief stole somebody’s purse and threw it in your backyard.

---

<div class="post-metadata">

**Author:** ![Tastes\_of\_Chocolate](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tastes_of_chocolate/32/3232_2.png) [@Tastes\_of\_Chocolate](https://boards.straightdope.com/u/Tastes_of_Chocolate)\
**Post date:** [October 17, 2008, 8:38pm UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/6 "2008-10-17T20:38:37Z")

</div>

> [@Derleth](#):
>
> I’m a sucker for the murky concepts of responsibility and intent when a complex system misfires. Is there anything on the books about acting on information you shouldn’t have that you got by accident?

What if we remove the worm from the equation? How about I’m sitting on a bus, minding my own business, and I overhear someone on their cellphone, talking about a company about to go into receivership. I get off the bus, call my stockbroker and short the stock. Is it insider trading? In both cases I’ve received information that I made no effort to find. It was dropped on me, and I just acted on it.

---

<div class="post-metadata">

**Author:** ![mazinger\_z](https://avatars.discourse-cdn.com/v4/letter/m/5f9b8f/32.png) [@mazinger\_z](https://boards.straightdope.com/u/mazinger_z)\
**Post date:** [October 17, 2008, 8:45pm UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/7 "2008-10-17T20:45:55Z")

</div>

> [@Tastes\_of\_Chocolate](#):
>
> What if we remove the worm from the equation? How about I’m sitting on a bus, minding my own business, and I overhear someone on their cellphone, talking about a company about to go into receivership. I get off the bus, call my stockbroker and short the stock. Is it insider trading? In both cases I’ve received information that I made no effort to find. It was dropped on me, and I just acted on it.

The short answer is that you need a fiduciary duty to the information or not have misappropriated it in some manner, and that you are not found to be an insider.

---

<div class="post-metadata">

**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\
**Post date:** [October 17, 2008, 8:52pm UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/8 "2008-10-17T20:52:20Z")

</div>

> [@mazinger\_z](#):
>
> The short answer is that you need a fiduciary duty to the information or not have misappropriated it in some manner, and that you are not found to be an insider.

And Dan, as a complete outsider who got the information by accident, would have no duty to it, fiduciary or otherwise, and did not misappropriate it (the person who wrote the worm did\*). So, does his lack of duty help him or hurt him if he shorts the stock?

\*(I’m basing this on the fact a felon is responsible for anything that happens as a direct result of his felony so, for example, a burglar is guilty of homicide if a homeowner has a heart attack by being surprised by the invasion.)

---

<div class="post-metadata">

**Author:** ![mazinger\_z](https://avatars.discourse-cdn.com/v4/letter/m/5f9b8f/32.png) [@mazinger\_z](https://boards.straightdope.com/u/mazinger_z)\
**Post date:** [October 17, 2008, 9:30pm UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/9 "2008-10-17T21:30:33Z")

</div>

> [@Derleth](#):
>
> And Dan, as a complete outsider who got the information by accident, would have no duty to it, fiduciary or otherwise, and did not misappropriate it (the person who wrote the worm did\*). So, does his lack of duty help him or hurt him if he shorts the stock?
> 
> \*(I’m basing this on the fact a felon is responsible for anything that happens as a direct result of his felony so, for example, a burglar is guilty of homicide if a homeowner has a heart attack by being surprised by the invasion.)

Though IAL, this is not legal advice, standard disclaimers apply:

Generally, no. The further removed from the source of information, or the less the connection between the source and the inside trader, then the less likelihood that the government will prosecute. It happens, though. One of the cases I read was about some guy attending a charity event and the CEO spouted about some big acquisition that didn’t happen yet. So, this guy overhearing it bought a ton of shares, enough for the SEC to notice. After an extensive investigation (I assume which was very far from pleasant), he was able to keep his money.

Non theory, though, overall, I’m sure the prosecutor in any case will look to see what a reasonable, prudent person would have done with the information. There’s a difference between going on sharebuilder and putting $200 for the next scheduled trade, and to go about mortgaging the house, emptying the 529 accounts and raiding the 401(k)s and IRAs for a short time gamble.

---

<div class="post-metadata">

**Author:** ![Gfactor](https://avatars.discourse-cdn.com/v4/letter/g/9de053/32.png) [@Gfactor](https://boards.straightdope.com/u/Gfactor)\
**Post date:** [October 18, 2008, 2:44am UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/10 "2008-10-18T02:44:38Z")

</div>

What **mazinger\_z** said. The Supreme Court has said that the mere possession of non-public information does not require the holder to abstain from trading on it.

See _Dirks v. SEC_, [http://caselaw.lp.findlaw.com/scripts/getcase.pl?court=us&vol=463&invol=646](http://caselaw.lp.findlaw.com/scripts/getcase.pl?court=us&vol=463&invol=646) (insider must personally benefit from disclosure)

and

_United States v. O’Hagan_: [http://caselaw.lp.findlaw.com/scripts/getcase.pl?navby=search&court=US&case=/us/000/96-842.html](http://caselaw.lp.findlaw.com/scripts/getcase.pl?navby=search&court=US&case=/us/000/96-842.html)

> [@](#):
>
> There is no " `general duty between all participants in market transactions to forgo actions based on material, nonpublic information.’ " Id., at 655 (quoting Chiarella, 445 U.S., at 233 ); see Aldave, 13 Hofstra L. Rev., at 122 (misappropriation theory bars only “trading on the basis of informationthat the wrongdoer converted to his own use in violation of some fiduciary, contractual, or similar obligation to the owner or rightful possessor of the information”).

While one can negligently breach a fiduciary duty, apparently the sorts of breach that trigger insider trading liablity involve more purposeful conduct than failure to prevent computer intrustions.

---

<div class="post-metadata">

**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\
**Post date:** [October 18, 2008, 2:52am UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/11 "2008-10-18T02:52:04Z")

</div>

Fascinating. I suspected it would go something like that, but it’s always intersting to know more.

---

<div class="post-metadata">

**Author:** ![dalej42](https://avatars.discourse-cdn.com/v4/letter/d/67e7ee/32.png) [@dalej42](https://boards.straightdope.com/u/dalej42)\
**Post date:** [October 18, 2008, 2:52am UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/12 "2008-10-18T02:52:43Z")

</div>

I’m a brokerage principal.

NO, you can not trade on non-public information regardless of how you got it. Both you and the person who let the information out can be held responsible.

[Cite](http://www.investopedia.com/terms/t/tipping.asp)

It does not mean you will be prosecuted. But, there is a chance.

---

<div class="post-metadata">

**Author:** ![Hilarity\_N.Suze](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hilarity_n.suze/32/6223_2.png) [@Hilarity\_N.Suze](https://boards.straightdope.com/u/Hilarity_N.Suze)\
**Post date:** [October 18, 2008, 4:13am UTC](https://boards.straightdope.com/t/shorting-based-on-info-a-worm-sent-you/468177/13 "2008-10-18T04:13:07Z")

</div>

I think there is a bunch of precedent. The only case I remember (and whose name I don’t remember) involved the girl friend of a guy who heard his father, who was a principal in some company, talking on the phone at home, and gave the info to his girl friend. IIRC (and this was in the mid-80s) she didn’t get into any trouble because she was too many steps away from the principal.

This may be one of the cases somebody else has cited. Of course if you take this to the broker and say where you got it, the broker’s ethics will put a stop to your trading. Or should.
