Security Incidents mailing list archives
Re: Cracked; rootkit - entrapment question?
From: mfratto () NWC SYR EDU (Mike Fratto)
Date: Thu, 2 Mar 2000 15:21:55 -0500
At 09:43 AM 3/2/00 -0600, Paul L Schmehl wrote:
IANAL, but how can it be entrapment? He has to break in to the machine before he gets tracked and logged. Even if you have a machine that's grossly misconfigured and wide open to hacking, that doesn't justify people hacking it. I say set it up, and let the script kiddie indict himself.
The problem is there is no case law nor are there laws on the books governing honeypots. A good lawyer can conceivably argue that it is an attractive nuisance, much like your swimming pool. Or that be placing the honeypot on the network you are asking for attacks. Much like a police person pretending to be a hooker trying to pick up Johns. There may also be an issue of timing. If you put the honeypot up to attract your would be cracker, then you are trying to "trap" them, right? Yeah, it doesn't make alot of sense, but that seems to be the way the system works. To the best of my knowledge, port scanning is *not* illegal. Neither is probing for vulnerabilities. In fact trying to break into a system is not illegal (strictly speaking). Being successful at breaking into a system is, however. mike
Current thread:
- Re: Cracked; rootkit - entrapment question?, (continued)
- Re: Cracked; rootkit - entrapment question? Paul Flores (Mar 02)
- getting to the point with DDoS thomas lakofski (Mar 02)
- Re: getting to the point with DDoS Ryan Russell (Mar 05)
- Re: getting to the point with DDoS thomas lakofski (Mar 07)
- Re: Cracked; rootkit - entrapment question? 1Lt Rob Lee (Mar 02)
- E-mail attatchment xum mux (Mar 02)
- Re: Cracked; rootkit - entrapment question? Ryan Russell (Mar 02)
- Re: Cracked; rootkit - entrapment question? David Brumley (Mar 02)
- Re: Cracked; rootkit - entrapment question? Lance Spitzner (Mar 02)
- Re: Cracked; rootkit - entrapment question? Paul L Schmehl (Mar 02)
- Re: Cracked; rootkit - entrapment question? Mike Fratto (Mar 02)
- Re: Cracked; rootkit - entrapment question? Simple Nomad (Mar 02)
- Re: Cracked; rootkit - entrapment question? Dave Dittrich (Mar 02)
- Re: Cracked; rootkit - entrapment question? Jon Lewis (Mar 02)
- Re: Cracked; rootkit - entrapment question? rain forest puppy (Mar 02)
- Re: Cracked; rootkit - entrapment question? Jordan Ritter (Mar 03)
- Re: Cracked; rootkit - entrapment question? CL: Nelson, Jeff (Mar 02)
- Re: Cracked; rootkit - entrapment question? Jon Lewis (Mar 02)
- Re: Cracked; rootkit - entrapment question? Craig H. Rowland (Mar 02)
- Re: Cracked; rootkit - entrapment question? Granquist, Lamont (Mar 03)
- Re: Cracked; rootkit - entrapment question? 1Lt Rob Lee (Mar 07)