So I often watch my web server traffic. At least a quarter of the time, it's someone attempting to break in. Either by ssh or by attacking my directories and login panel.
My question is, if I present a EULA to the user PRIOR to them being able to access my login page, that specifically states
"If you load the login page, you agree to all me to access your machine remotely including all of the files on it"
Then I proceed to access it after they attempt to login.
Would this hold up in court or would it still violate the computer fraud and abuse act?
The exact flow of events would be...
- Person attempts to navigate to my website login page on a server that I own, control and operate.
- Prior to being able to access the login they're forced to accept a EULA
- They accept EULA and proceed to the login page
- I have a payload that then deploys on their machine which gives me partial control over it
- [I go to jail] OR [I don't go to jail]