Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Breach case could curtail Web flaw finders
Robert Lemos, SecurityFocus 2006-04-26

Security researchers and legal experts have voiced concern this week over the prosecution of an information-technology professional for computer intrusion after he allegedly breached a university's online application system while researching a flaw without the school's permission.

Comments Mode:
Breach case could curtail Web flaw finders 2006-04-26
Anonymous (7 replies)
Re: Breach case could curtail Web flaw finders 2006-04-27
Anonymous
It's not essentially the same thing, unless I'm storing your valuables in my house. If you want a scenario, how about this:

You're sitting in your bank's parking lot while you significant other is inside cashing a check. You notice people walking up to the employee entrance and entering without using a key, code, badge, etc. - just opening the door and walking in. Not believing your eyes you get out of your car and walk up and try the door, only to discover it is unlocked. Looking inside you see the bank's vault on the right hand side of the hallway, also standing wide open. Should you be charged with a crime if you report this poor security to the bank manager?

Granted, this is silly because in reality your money is stored electronically and not in the actual vault, but it is far closer to this case than your example. He had an interest in testing this site because it was asking for his data.

I think this US Attorney needs to stop wasting time on cases like this and start cracking down on the spammers, phishers, bot-herders, etc. They don't have good intentions, this guy did.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11389/33769#33769
FreeMcCarty.com 2006-04-26
Anonymous (2 replies)
Re: FreeMcCarty.com 2006-04-27
carl
Re: FreeMcCarty.com 2006-04-28
Bilz
In other words don't steal data? 2006-04-27
Anonymous (1 replies)
Imagine a world... 2006-04-27
jvf (1 replies)
Re: Imagine a world... 2006-09-26
Dve
as expected... 2006-04-27
infamous41md (2 replies)
Re: as expected... 2006-04-27
BXLE
Re: as expected... 2006-04-28
Anonymous
appearance today 2006-04-29
mv
He Should be Prosecuted 2006-05-01
Anonymous (2 replies)
Re: He Should be Prosecuted 2006-05-01
Anonymous
Re: He Should be Prosecuted 2006-05-23
Anonymous
Breach case could curtail Web flaw finders 2006-05-18
Spider Jerusalem







 

Privacy Statement
Copyright 2009, SecurityFocus