funsec mailing list archives

Re: OK, all you EU guys who took the CEH just wasted your money


From: Blue Boar <BlueBoar () thievco com>
Date: Fri, 30 Mar 2012 13:26:54 -0700

I'm assuming Germany provides an example as to how tools will be treated.

                                BB

On 3/30/12 1:04 PM, Valdis.Kletnieks () vt edu wrote:
On Fri, 30 Mar 2012 12:46:04 -0700, Vic Vandal said:
"Ethical" (the "E" in CEH) hackers would only attack systems that belong to
organizations that gave them written permission to do so.  The new laws would be
inapplicable to that scenario.

From the fine article's first paragraph:

"Possessing or distributing hacking software and tools would also be an offence,"

Got a copy of Metasploit or Nessus on your laptop? Better not visit the EU with
that laptop in your possession.  And what will pen-testers use to run
pen-tests, if they can't have hacking software and tools?

I don't know the exact wording proposed - "possession or distribution with
intent to commit a crime" would be a heck of a lot easier to deal with.  The devil
is in the details.  Consider that almost every car has a tire iron - and they're not
weapons until you try to use them on something other than your own car's tires.




_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: