Penetration Testing mailing list archives

Re: Information Assessment Legality


From: Stephen <stephen () greyhat-security com>
Date: Tue, 12 Oct 2010 08:14:46 +1030

Hi Michal, appreciate the advice, and yes, I would be talking to a real
lawyer if I could afford it - however, at this stage I can't, and
because this isn't going to be my main source of income, I can't really
justify spending what I do have on this. At this stage, it's only really
going to be a "hobby" type service - just wanted to make sure what I was
doing wasn't going to have negative legal ramifications, and I thought
I'd ask a few who maybe had experience with it :) Thanks for your input!

On Mon, 2010-10-11 at 13:46 -0700, Michal Zalewski wrote:
I wanted to know if there
were special licenses needed, and whether we would be responsible if
that information were used to commit a crime, or not?

You're to make a business out of it; shouldn't you be talking to a real lawyer?

(And if you're radically opposed to the idea of receiving
authoritative advice, it would be helpful to specify which national
laws you expect to be subject to ;-)

/mz

-- 
Stephen
CEO of Greyhat-Security.com
Education, Assessments, and Community
Phone (Skype): +618 8121 7403


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: