Questions tagged [computer-misuse-act]

Questions involving the U.K. Computer Misuse Act

Filter by
Sorted by
Tagged with
0
votes
0answers
20 views

Are there any legal repercussions for writing open source code that ends up being used as a botnet? [duplicate]

For example, there is a whole project tutorial on how to build one, as well as plenty of examples of people writing their own. If open source software (such as the above) was taken by a bad actor and ...
2
votes
1answer
56 views

Has anyone been prosecuted for making/using malware?

Has anyone been prosecuted under the Computer Misuse Act 1990 Section 3A for using or making malware in the UK? I have found example in the US, but none for the UK.
2
votes
1answer
63 views

Is It Illegal To Test A Website For Exploits Regarding My Personal Info?

American here. I'm not a hacker or anything, just a normal computer science student. Anyways, I believe that my university has left an exploit open through their hub where anyone can use the modular ...
0
votes
2answers
105 views

Is it legal to host a website that gives users access to database leaks and guides on how to do illegal things?

Is it legal to own and operate a website that would host database leaks, accounts lists, Anarchist's Cookbook (guides on making bombs etc, drugs and more), and guides on stealing credit card info and ...
0
votes
0answers
49 views

Are open source RAT's legal?

I've been working on a Remote Administration Trojan (Malware) for fun, simliar to Quasar. I would like to publish the software on GitHub as an open-source/free to use tool for under the MIT license. ...
3
votes
1answer
190 views

Are we legally liable for negligence if a breach in a 3rd party happens due to us giving extra visibility to a vulnerable system?

TL;DR - Found a dangling DNS record that was pointing to an IP address we don't own, the server found on that IP address was running a vulnerable piece of software. Wondering if attackers found & ...
1
vote
1answer
142 views

how are companies like metasploit and trustedsec and rapid7 legally protected?

rapid7 and trustedsec develop professional penetration testing software rapid7 also sells a pro version of metasploit...my question is that if someone uses their software illegally how are those ...
0
votes
2answers
92 views

Does a EULA protect the developer [closed]

I have a simple question...If a client asks a developer to develop a penetration testing / security related software and that he is ready to accept the EULA which comes with the software...does that ...
0
votes
1answer
101 views

Does selling game hacks based on personal user agreement is legal?

There are so many websites who sell the game hacks and game companies never sue them for that("because they have their own terms and conditions - that's what I think basically"). So if I sell hacks ...
1
vote
3answers
117 views

Is it against the Computer Misuse Act to remove client-side input validation?

I recently ran into an issue where the 'Change Password' form for a website allowed me to choose a long password (50+ characters), but the login form had a lower limit of 16 characters. This means ...
0
votes
1answer
151 views

iPad hijacking at night

We are having issues with our neighbors. I play music from my iPad at night to help me sleep, using headphones, and my neighbor has been hijacking it and playing discordant sounds to wake me up in the ...
0
votes
2answers
115 views

Would it be illegal to upload the source code of a computer virus I developed? [duplicate]

If I upload source code of a virus I have developed so that the larger software community could benefit from developing solutions to tackle the virus, and if somebody else uses my source code to harm ...
1
vote
2answers
51 views

Does the 9th Court Ruling Imply That a Public Endpoint Is Truly Public?

Violating Terms of Use Isn’t a Crime, EFF Tells Court—Again The recent ruling by the 9Th CAP states that a user is not legally (criminally(civil maybe?)) bound by the ToS of a website operator. Does ...
9
votes
1answer
3k views

Exploiting online video games illegal, a tort, or allowable under the law?

Recently a news story came out about "Manfred", a hacker who makes a living exploiting bugs in online video games to make in-game currency (or items) which he then sells to other gamers. Here is a ...
2
votes
2answers
97 views

Is Running an Amplified DNS Attack on a Consenting Person Legal?

I wasn't sure whether to put this in the legal or security stack exchange because this will take someone with considerable computer knowledge to answer. Amyways, I want to try out an amplified DDOS ...
0
votes
2answers
68 views

what can I do after being scammed

I traded a Domain name (http://stamp.wtf) for a year of hosting by a man. After (permanently) transfering the domain to the man, he set up an account for. He then deleted it a few days later (...
2
votes
2answers
197 views

Can academics break the law with their research?

Are there any U.S. or U.K. laws that prevent academic research papers or journals from being published? Can academics outline the methodology of illegal activities? For example, could a computer ...
13
votes
3answers
644 views

Are Drone Intrusion Prevention Systems (Drone IPS) systems illegal?

A drone intrusion prevention product being advertised at RSA Conference this year has piqued my interest, and I'm trying to determine whether it and other drone IPS systems are illegal. For ...
2
votes
1answer
77 views

Accessing Internet Connected Devices with Default Credentials

In a world of ever increasing numbers of internet connected devices people are having more and more of their appliances exposed to the outside world: cameras, fridges, thermostats etc. Many of these ...
2
votes
1answer
767 views

What is the legal status of data (intentionally deleted or not) on a second-hand computer?

If a person purchases a second-hand computer, and the seller has not wiped the hard drives of that computer before the sale, is it legal for the buyer to access the data on it? Alternatively, if the ...
6
votes
3answers
904 views

How is “unauthorized” access determined under the Computer Misuse Act?

Regarding the Computer Misuse Act as a whole, but in particular Section 1:- (1)A person is guilty of an offence if— (a)he causes a computer to perform any function with intent to secure access to any ...
0
votes
1answer
1k views

Is it illegal to create and sell a exploit of a zero-day vulnerability?

The definition of an exploit: A software tool designed to take advantage of a flaw in a computer system, typically for malicious purposes such as installing malware. The definition of a zero-day ...
0
votes
1answer
91 views

Who can initiate the legal proceedings for hacking?

If a server is owned and maintained by Organization A, but almost fully installed and configured by Person A, who is a employee of Organization A, then who initiates the legal proceedings regarding ...
2
votes
1answer
622 views

What is the statute of limitations for a violation of the Computer Misuse Act of 1990's provision(s) on phishing?

I came across a story about a twenty-something year old male who setup a fake website in order to 'phish' for usernames and passwords for a popular game. After acquiring the credentials he would then ...
1
vote
2answers
93 views

Does merely serving content alone constitute “operating” in the EU and so should every website be compliant with the EU Cookie Law?

I was wondering if all websites in the world need to be compliant with the EU Cookie Law. For example a company website of a US company, hosted in the US but serving visitors in the EU. Also, does ...
4
votes
1answer
157 views

Purposeful Destruction of a Computer

A hobby of mine is reading up on the latest IT nasties, and i came across 'The USB Killer'. 'The USB Killer' is designed to look just like a USB Thumb drive, but when plugged in it causes a lot of ...
6
votes
1answer
442 views

Section 3A of the United Kingdom's Computer Misuse Act 1990

Section 3A of the United Kingdom's computer misuse act states you are not allowed to produce, obtain or supply articles which can be used for computer misuse. How do UK information security bloggers ...