CSS Prepare

optional · CSS study notes

I.28 Computers & Society

⬆️ Back to: P-I.I. Introduction to Computing

🧭

Page Outline — click a heading to jump.

Subpages:

🎯

Exam pattern (2016–2026): 2024 Q2(a) future of IT in Pakistan · 2025 Q2(a) Generative AI and society. Both answered on I.28.1. Two years running — rising.


CSS Computer Science (Optional) — Paper-I, Section-A, Topic I, p.69. Covers: Computers & Society (overview).

Definition

  • Computers & Society: a syllabus topic covering the social, ethical, security, and legal issues that arise from the widespread use of computers.

Overview

  • Computers have transformed nearly every dimension of society — communication, commerce, education, healthcare, and governance — bringing both opportunity and new categories of risk and responsibility.
  • This is why "Computers & Society" groups security, ethics, and law together: technical capability alone is not enough, so society needs frameworks to govern how that capability is used.

Key Dimensions Covered in This Section

  • Information Security/Privacy: the practice of protecting data from unauthorized access, alteration, or disclosure (security), and the broader right of individuals to control what personal information about them is collected, stored, and shared (privacy).
    • Example: a hospital encrypting patient records addresses security; a law requiring consent before sharing that data addresses privacy.
    • Covered in full depth on its own page.
  • Computer Crimes: illegal acts committed using a computer as the instrument (e.g., hacking, financial fraud) or as the target (e.g., a denial-of-service attack against a server).
    • Example: unauthorized access to a bank's database to steal funds.
    • Covered in full depth on its own page.
  • Ethical Issues: questions of right and wrong conduct in computing that go beyond what is strictly illegal — something can be legal but still ethically questionable.
    • Example: a company legally collecting large amounts of user data without making its use fully transparent.
    • Covered in full depth on its own page.
  • Viruses: malicious software (malware) that attaches to or replicates within programs/files and can damage data, steal information, or degrade system performance; a broader category that also includes worms, trojans, and ransomware.
    • Example: a virus attached to an email attachment that corrupts files once opened.
    • Covered in full depth on its own page.
  • Plagiarism: presenting someone else's work, words, code, or ideas as one's own without proper attribution — made easier (and easier to detect, via plagiarism-checking software) in the digital age due to the ease of copying digital content.
    • Example: copying paragraphs from a website into an assignment without citation.
    • Covered in full depth on its own page.
  • Intellectual Property Rights (IPR): the legal protections (copyright, patents, trademarks) that give creators exclusive rights over their original work — software, writing, designs, inventions — for a defined period, so others cannot copy, distribute, or sell it without permission.
    • Example: software piracy (using licensed software without paying) is an IPR violation.
    • Covered in full depth on its own page.
  • Each of these is covered in its own dedicated page — this overview frames why they belong together: each represents a point of friction between what technology makes possible and what society considers acceptable, safe, or fair.

See Also

  • The opportunity side of this topic: how computers have changed society for the better, sector-wise benefits, the evolving role of computing, and who is being benefited. Read together with this overview's security/ethics/law framing for a complete essay answer.

MCQ Traps

  • Ethical issues are not the same as computer crimes — an act can be unethical without being illegal (e.g., quietly harvesting user data within the letter of the law), and illegal without necessarily being seen as unethical by everyone; don't conflate "illegal" with "unethical."
  • Viruses are one type of malware, not a synonym for all malware — worms, trojans, and ransomware are related but technically distinct categories, each covered in more depth on the dedicated Viruses page.

✅ Self-Test Questions (with Answers)

Q1. Why are security, ethics, and law grouped together under "Computers & Society" rather than treated as separate unrelated topics?

Ans: Because all three address the same underlying problem from different directions: the gap between what technology makes possible and what society judges acceptable, safe and fair. A computer will copy a file, intercept a transmission or profile a person just as readily as it performs a legitimate task — the machine has no notion of permission. Security provides the technical response (encryption, authentication, firewalls, access control — making harmful acts difficult). Ethics provides the normative response (professional codes, norms of consent and transparency — telling practitioners what they ought to do even where nothing forbids it). Law provides the coercive response (statutes and penalties — defining what is forbidden and punishing it).

None of the three is sufficient alone:

  • Security without law gives no remedy once defences fail; a victim needs a legal route to redress.
  • Law without security is unenforceable, since prosecution cannot recover leaked data or reverse a breach.
  • Both without ethics leave the vast grey zone untouched — the many practices that are perfectly legal and technically permitted yet still harmful, such as opaque data harvesting or algorithmic manipulation of attention.

They are also mutually constitutive: today's ethical objection becomes tomorrow's statute (data-protection law grew out of privacy ethics), and legal requirements then mandate specific security controls (breach notification, encryption of sensitive records). Technology moves faster than legislation, so ethics fills the interval before law catches up.

CSS angle: Pakistan illustrates the pattern. PECA 2016 supplies the legal layer, criminalising unauthorised access, data interference, identity fraud and electronic forgery; PTA and the National CERT framework handle the regulatory and technical layer; and the long-pending Personal Data Protection Bill represents the ethical concern about consent and data control not yet fully converted into enforceable law — exactly the lag that makes the ethical layer necessary.

Q2. Name the six sub-areas covered under this topic.

Ans: The six sub-areas are:

  • Information Security and Privacy — security is protecting data from unauthorised access, alteration or disclosure; privacy is the individual's right to control what personal information about them is collected, stored and shared. A hospital encrypting patient records is security; a law requiring consent before those records are shared is privacy.
  • Computer Crimes — illegal acts in which a computer is the instrument (hacking, online financial fraud, identity theft) or the target (denial-of-service attacks, data destruction).
  • Ethical Issues — questions of right and wrong conduct in computing that extend beyond what is strictly illegal, such as opaque data collection, algorithmic bias and professional responsibility.
  • Viruses (and malware generally) — malicious software that replicates within or attaches to programs and files, damaging data, stealing information or degrading performance. Viruses are one category within the wider family that also includes worms, trojans, ransomware and spyware.
  • Plagiarism — presenting another person's work, words, code or ideas as one's own without attribution; made far easier by digital copying, and also far easier to detect through plagiarism-checking software such as Turnitin.
  • Intellectual Property Rights (IPR) — the legal protections (copyright, patents, trademarks, plus trade secrets) granting creators exclusive rights over original work for a defined period. Software piracy is the most common IPR violation in computing.

A memory aid for the six: S-C-E-V-P-I — Security, Crimes, Ethics, Viruses, Plagiarism, IPR. Note the trap that viruses are one type of malware, not a synonym for all malware.

Q3. Give one example each of an act that is illegal (a computer crime) and an act that is legal but ethically questionable.

Ans: Illegal — a computer crime: unauthorised access to a bank's database to transfer funds into an attacker's account. This is straightforwardly criminal: it involves unauthorised access to an information system, unauthorised data interference and electronic fraud, all of which are offences under Pakistan's Prevention of Electronic Crimes Act (PECA) 2016, carrying imprisonment and fines. Equally clear examples are ransomware encrypting a hospital's records and demanding payment, phishing to steal banking credentials, or a DDoS attack taking a government portal offline.

Legal but ethically questionable: a technology company collecting extensive personal data through terms-of-service consent that no ordinary user realistically reads or understands, then using it to build detailed behavioural profiles and sell targeted advertising. Nothing here is unlawful — consent was formally obtained and disclosure appears in the privacy policy — yet it is ethically troubling because the consent is not meaningful: the document is long and technical, refusing it means losing access to a service that has become socially near-essential, and the user cannot foresee the eventual uses of the data.

Other examples in the legal-but-questionable category:

  • An employer monitoring employees' keystrokes, screens and browsing, disclosed in the contract but far beyond what staff expect.
  • Dark patterns — interfaces deliberately designed to make cancelling a subscription tortuous while subscribing takes one click.
  • Deploying an algorithm with demonstrable bias in hiring or lending because no statute yet requires bias auditing.

The principle to state explicitly: legality is a floor, not a ceiling. Law defines the minimum standard and always lags behind technological capability; ethics governs the wide space above that floor where conduct is permitted but not defensible. Conversely, an act can be illegal without being widely regarded as unethical — downloading academic papers a person cannot afford but genuinely needs for research is a common illustration.

Q4. How does plagiarism relate to intellectual property rights, and how are they different?

Ans: They overlap but are not the same. Both concern the unauthorised use of someone else's work, but they protect different interests, are enforced by different authorities, and are violated in different ways.

Plagiarism is an ethical and academic offence: presenting another's words, ideas, data or code as one's own without attribution. The wrong is deception about authorship — taking credit that is not yours. It is not in itself a crime; it is punished by universities, journals, employers and professional bodies through failure, retraction, degree revocation or dismissal.

Infringement of Intellectual Property Rights is a legal offence: using protected work — copying, distributing, selling or adapting it — without the rights holder's permission. The wrong is violation of an owner's exclusive economic rights, and it is enforced through the courts by fines, damages and, in serious cases, imprisonment. In Pakistan it falls under the Copyright Ordinance 1962 and the framework administered by the Intellectual Property Organization of Pakistan (IPO-Pakistan).

AspectPlagiarismIPR infringement
Nature of the wrongEthical and academic; false claim of authorshipLegal; violation of an owner's exclusive rights
Harm done toThe original author's credit and reputationThe rights holder's economic interest
Cured byProper citation and attributionA licence or the owner's permission
Enforced byUniversities, journals, employers, HECCourts of law
Typical penaltyFailure, retraction, degree revocation, dismissalFines, damages, injunction, imprisonment
Applies toIdeas and expression, including public domain workOnly work still under legal protection

The four combinations make the relationship clear:

  • Both at once — copying a copyrighted article into your thesis uncredited: plagiarism and infringement.
  • Plagiarism only — passing off Shakespeare or a very old public-domain text as your own writing: the copyright has long expired, so no law is broken, but it is still academic dishonesty.
  • Infringement only — distributing pirated copies of software that correctly names its developer: authorship is not misrepresented, but the owner's exclusive distribution right is violated.
  • Neither — quoting a source with full citation, within fair-use limits.

CSS angle: This distinction has real institutional force in Pakistan. The Higher Education Commission (HEC) operates a formal Plagiarism Policy requiring similarity checks on theses and research publications, with penalties up to degree revocation — an academic sanction entirely separate from any copyright litigation. Meanwhile software piracy remains a persistent IPR problem with direct economic consequences for the software industry and for Pakistan's standing in trade and investment assessments.

Continue studying