The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [ethical-hacking]

An ethical hacker, also known as a whitehat hacker, is a security professional who applies their hacking skills for defensive purposes on behalf of the owners of information systems. Use this tag for questions about legal issues related to ethical hacking. Do not use this tag for questions related to ethics in general.

Filter by
Sorted by
Tagged with
3
votes
1answer
89 views

Is reverse engineering for research legal?

I want to look at the code of a certain app, without modifying it. Is that fine accordingly to EU laws ? Btw, sorry if I posted this in the wrong place.
2
votes
2answers
88 views

Hacking a scammer: is this guy breaking the law by deleting phishing data?

I just watched this video. In it the presenter hacks a phishing website using a SQL injection attack and then deletes the database of harvested emails and passwords. Assuming that he did this to a ...
0
votes
2answers
60 views

Duty of care dilemma when reporting Web vulnerabilities to both Stakeholders and Web Service owner

Ok, I am going to ask this question with an Analogy. A Locksmith is walking in the street and comes across a door. The door seems to be well secured to a normal user and is actually a door to safe ...
0
votes
1answer
95 views

Legal status of responsible disclosure

In the current security landscape it is common to offer responsible disclosure to (ethical) hackers to report vulnerabilities in such a way that the company does not pursue legal action against this ...
-3
votes
1answer
81 views

does law defines any hacker rules? [closed]

does law defines any limitation that tells how much can a hacker use his knowledge in different way? Any boundary that tells about hacker and cracker.
6
votes
2answers
217 views

Are publicly available password dumps legal under GDPR

When a company gets breached by hackers, often the contents of their databases will make its way onto the internet. Sometimes this will include obviously personal information such as email contents or ...
2
votes
0answers
254 views

Is it illegal to perform wifi hacks on your own home network using tools like WiFiPhisher, Aircrack, and Wireshark?

Apologies if this has been asked countless times. I've seen it a few times around here however they usually pertain to someone having written permission. And I don't... Or if someone could post a ...
0
votes
1answer
1k views

Is it illegal to create and sell a exploit of a zero-day vulnerability?

The definition of an exploit: A software tool designed to take advantage of a flaw in a computer system, typically for malicious purposes such as installing malware. The definition of a zero-day ...
2
votes
0answers
444 views

As a Developer how should my contract be worded to protect against hacking

I am a web developer and have a contract for client based projects that has been improved over years and many projects. However after reading it this month I think that upgrading the section that ...
3
votes
1answer
467 views

Legality of scanning a site with SSLLabs SSL Server Test in order to find and report weaknesses

I am wanting to scan a site (which I do not own) to see if they are vulnerable to anything like Heartbleed or the POODLE attack, not because I want to exploit any such vulnerabilities for malicious ...