Re: The legal / illegal line?

[Chris Travers <chris () metatrontech com>]

Barry Fawthrop wrote:
> Thanks All
>
> I agree totally, that it is a line that should be kept away from
> But then how do you "prove" to someone that their system isn't as secure
> as they "feel"/assume it is?
>   
Tell them what you an do and ask their permission to proceed.  Often 
people who are overly confident in the security of their systems are 
just as interested in proving you wrong.  Once they give you permission, 
as long as you stay within the scope agreed upon, I would think it would 
be hard to call it trespassing.  I generally try to get such permission 
in written form (at least email).

IANAL though.

Best Wishes,
Chris Travers

Attachment: chris.vcf
Description:

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------