Re: Honeypot legal ramifications....

[Valdis.Kletnieks () vt edu]

On Mon, 07 Jun 2004 18:08:25 MDT, Pitts said:

> Regarding the privacy of hackers...IMO they waive their rights if they are
> confronted with a banner stating ...authorized users only, all events are
> monitored... This seems to be fair warning to anyone, although I am unaware of
> any legal precedents.

Just keep in mind that there's a severe flaw there - it's the rare exploit indeed
that launches /bin/login and provides the banner - most of them launch a /bin/sh
and go directly to a shell prompt.. so it's *very* unlikely that your hacker
ever sees your login banner.

You're *much* more likely to make a warning banner stick against your *own*
users, because then they can't argue that they didn't know what the policy was,
and you're probably able to show that they saw the banner when they logged in
via the usual authorized channels.

Attachment: _bin
Description: