Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Breach case could curtail Web flaw finders
Robert Lemos, SecurityFocus 2006-04-26

Security researchers and legal experts have voiced concern this week over the prosecution of an information-technology professional for computer intrusion after he allegedly breached a university's online application system while researching a flaw without the school's permission.

Comments Mode:
FreeMcCarty.com 2006-04-26
Anonymous (2 replies)
Re: FreeMcCarty.com 2006-04-27
carl
Re: FreeMcCarty.com 2006-04-28
Bilz
In other words don't steal data? 2006-04-27
Anonymous (1 replies)
Imagine a world... 2006-04-27
jvf (1 replies)
Re: Imagine a world... 2006-09-26
Dve
as expected... 2006-04-27
infamous41md (2 replies)
Re: as expected... 2006-04-27
BXLE
Re: as expected... 2006-04-28
Anonymous
appearance today 2006-04-29
mv
He Should be Prosecuted 2006-05-01
Anonymous (2 replies)
Re: He Should be Prosecuted 2006-05-01
Anonymous
Re: He Should be Prosecuted 2006-05-23
Anonymous
Breach case could curtail Web flaw finders 2006-05-18
Spider Jerusalem
If it was anyone else, I would sympathize 2006-07-21
Anonymous (1 replies)
Re: If it was anyone else, I would sympathize 2006-08-28
Anonymous (1 replies)
Re: Re: If it was anyone else, I would sympathize 2006-09-08
Anonymous
It seems fairly obvious to me if the person is indeed a "professional" (quotes for doubt), his intent was to find a flaw then bring it to the attention of the school and get the kudos (and aid his chances of acceptance if applying as others state). The actions were clearly meant to derive benefit of some sort, be it notoriety, financial or intangible (acceptance to school).

In this case, he did not obtain permission, therefore, the vast majority of real professionals would say he "hacked" their server.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11389/34068#34068







 

Privacy Statement
Copyright 2008, SecurityFocus