Penetration Testing mailing list archives

Re: RE: How to track down a wireless hacker


From: cwright () bdosyd com au
Date: 13 Nov 2007 10:37:01 -0000

CG

Yes, but these are unrelated to honeynets so I fail to see the point. I know that wireless attacks are a crime; that is 
not at issue.

The issue is not that wireless is against the law. This is a no brainer. The issue was that honeynets cost, they have a 
questionable legal status and have never been used as evidence or an aid to capture a single attacker in the western 
world.

As for whether you wish to take my opinion or not on the issue of a questionable legality for honeynets, 

Richard Salgado was the legal council for the honeypot project.  He was also an attorney with the Dept. of Justice 
(US). He has stated on a number of occasions that honeypots are questionable from a legal perspective and setting one 
up for the purposes of monitoring an attacker is risky. There are exceptions under the Patriot Act for US Law 
enforcement, but this does not help a company. 

I would also try not reporting 5th hand from tabloid online press sources or pseudo-law. Go to a source reference.

Regards,

Dr Craig Wright (GSE-Compliance)


PS. If you want to cite cases try:
www.westlaw.co.uk or www.westlaw.com 
http://www.lawtel.com
http://www.lexisnexis.com
www.butterworths.co.uk or www.butterworths.com

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: