Penetration Testing mailing list archives
Re: Pentester Convicted
From: bart () packetjunkie com
Date: Thu, 11 May 2006 04:02:42 -0700
While I would love to see nothing more than for the public to recognize that what this guy did was most likely of good intention, you have to sit back and look at the big picture. Testing an exploit on a University's server without explicit consent from the University is illegal. Plain and simple. I don't care what your intentions are. That is why we have Rules of Engagements and Get Out of Jail Free cards in this business. For this guy to ignore those rules, that tells me he is either not a professional, or his intentions may have been tainted by his curiosity. As a professional, one should understand the legalities of doing things like this. I know personally, I would never try to do anything without consent, especially after reading such stories as this. This is probably the result of some overzealous incident response person at the University working as an intern and not knowing fully what took place. But, the fact of the matter is, this gentleman did not handle himself the way he should have. ------------------------------------------------------------------------------ This List Sponsored by: Cenzic Concerned about Web Application Security? Why not go with the #1 solution - Cenzic, the only one to win the Analyst's Choice Award from eWeek. As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request () cenzic com for details. ------------------------------------------------------------------------------
Current thread:
- Re: Pentester Convicted bart (May 11)