Questions tagged [hacking]
Non-normative tag for questions relating to the use of information technology, typically in unintended manners.
98
questions
5
votes
2answers
2k views
Can Law Enforcement in the US use evidence acquired through an illegal act by someone else?
There are reports on the internet this morning that a group of people were able to hack Parler and download around 70tb of data from the servers before AWS ceased hosting the platform. There are ...
0
votes
2answers
81 views
Publishing research obtained by violating Google's TC
I believe Google's Terms and Conditions prohibit bot scraping: that is, submitting lots of (automated) search queries in a short time.
This is enforced by mechanisms such as CAPTCHAs and IP ...
1
vote
0answers
53 views
Is using proxies to circumvent rate limit to scrape data legal in India?
I'm in India, and this is what the Indian Information Act of 2000/66F says on the matter:
Indian Information Act 2000/66F
Punishment for cyber terrorism.– Whoever,– with intent to threaten the unity, ...
15
votes
2answers
6k views
Is it legal to hack a hacker back (in the US)?
I was wondering if it's legal to do what most people call a "hack back." Suppose someone tricked you into downloading software onto your computer that was designed to steal your data, but it ...
0
votes
1answer
246 views
Is there any country where hacking back is legal?
Building on this unanswered question: Under what circumstances could laying hacker "traps" cause civil or criminal liability for non-law enforcement civilians?
I was wondering if there was ...
1
vote
3answers
159 views
Is unintentional one-time bug abuse illegal?
Concrete examples :
Someone making API requests through a banking platform, withdrew many times in succession, and through some miracle bug they all went through.
Someone unaffiliated with a ...
-2
votes
1answer
81 views
What happens after bugs are found in a private residence? [closed]
I have evidence of being spied on by complete nobodies and weirdly threatened malicious people on the web so I have a bug sweep coming up. What should I do after the technician finds hidden cameras ...
-1
votes
2answers
98 views
Which kind of lawyer does a hacking and spying victim need? [closed]
In the event that someone hacks your devices in order to let people on the internet spy on you every day, which kind of lawyer do you need to attack the situation? Based on what's being done and how ...
0
votes
0answers
90 views
Is it illegal to refuse to fix a hacked website?
Suppose there's a website or a server that has been hacked. There is no personal data stored anywhere, so there hasn't been a real data breach, because basically there's no valuable data to steal at ...
1
vote
0answers
129 views
Under what circumstances could laying hacker “traps” cause civil or criminal liability for non-law enforcement civilians?
The answer to If a hacker is infected as a result of their actions, is the victim liable? that explained laying a trap to injure someone could go either way depending on the severity of the injury and ...
5
votes
1answer
180 views
If a hacker is infected as a result of their actions, is the victim liable?
If a hacker gained unauthorized access to a computer network, downloaded a virus that was on a computer and infected their own system, would the victim of the hacker be liable for damages?
Does it ...
2
votes
2answers
100 views
How can I safely provide a free online service?
I am developing a website for secure sharing credentials. Similar to https://www.cloak.sh/ .
How can I protect myself and hopefully eliminate all my liability, while still providing a service "...
0
votes
1answer
492 views
Is it legal to sell cracked gaming accounts?
A coworker recently said they have a small side business in which they were selling cracked gaming accounts.
Is this legal?
It sounds very illegal, but I haven’t found anything definitive on Reddit ...
0
votes
2answers
74 views
If a website receive an attack by an Hacker, who is evanutally liable for the data breach?
I'm trying to create a very general example, i know there are surely hundreds of variables that must be analyzed but even just some general considerations from who had some experience can be useful ...
2
votes
3answers
433 views
Is CNN Chris Cuomo right about Clinton's emails: “it's different for the media”?
In 2016, CNN reporter Chris Cuomo, said about Hillary Clinton's hacked emails:
Also interesting is remember...it's illegal to possess the stolen documents. It's different for the media. So ...
36
votes
3answers
30k views
Is it legal to crack MD5 hashes?
I saw a website that involves programming problems. One problem asks to write a program that finds a string whose MD5 hash is given.
Is it criminal to crack the MD5 hash by finding those strings?
-1
votes
2answers
108 views
Can I get in trouble for someone else using my code for bad?
I don't know if this is the right place to ask this but oh well. I wrote some proof of concept code that can do stuff to computers on my school network if the user has admin privileges. If I publish ...
1
vote
1answer
94 views
Legality of Cyber Attack on illegal foreign website
I live in a country where website that provides pornography, illegal drugs, prostitution, illegal gambling, etc are forbidden (in Indonesia). But foreign websites (ex. from western countries) on those ...
2
votes
1answer
102 views
Is it legal to disclose a technical vulnerability publicly that might cause a monetary loss to millions of people?
I'll cite an example that came to my mind to crisply explain the essence of my question. It might contain some extreme assumptions not rooted in real world examples.
Computer scientist John Doe who ...
0
votes
0answers
105 views
Is it legal to create and sell a tool to modify config files for games
I've recently discovered an oversight in a popular games config file system that allows you to use an item even if you haven't yet unlocked it, this is a multiplayer game where players are expected to ...
3
votes
1answer
202 views
Are we legally liable for negligence if a breach in a 3rd party happens due to us giving extra visibility to a vulnerable system?
TL;DR - Found a dangling DNS record that was pointing to an IP address we don't own, the server found on that IP address was running a vulnerable piece of software. Wondering if attackers found & ...
3
votes
2answers
89 views
Am I liable for problems caused by unendorsed software modification on my products?
Imagine the following hypothetical.
My firm produces electronic controllers for a variety of products. Let's focus, say, on a commercial washing machine.
We design the electronics and develop the ...
0
votes
0answers
81 views
Is selling IOS game hacks illegal through some platform?
so basically we have a website and we sell monthly subscriptions. The website has a lot of different game hacks and some tutorials for hacking. So, the question is, is this completely illegal? because ...
1
vote
1answer
117 views
Would it be legal to change the functionality of your own software to do something apparently malicious if fullly documented?
This topic came up when discussing the infamous left-pad disaster from awhile back. To give a brief summary the author of a small package hosted on the npm repository that numerous other packages had ...
4
votes
1answer
160 views
When is a permission required to attack a system?
Never attack something you don't have a permission for!
This is one of the golden rules of penetration testing, yet it's surprisingly unclear. What exactly counts as an attack, and when do I need ...
3
votes
1answer
151 views
Is reverse engineering for research legal?
I want to look at the code of a certain app, without modifying it. Is that fine accordingly to EU laws ? Btw, sorry if I posted this in the wrong place.
7
votes
3answers
1k views
Bypassing website's paywall by modifying HTTP request headers
Recently I see some debates about bypassing paywalls by modifying browser's HTTP request as stated on ghack.
Most paywalled websites allow users to read a certain number of free articles before ...
0
votes
0answers
46 views
Is the NSO Group guilty of computer crimes?
The NSO Group is the company (based in Israel but American-owned) which appears to be responsible for the software used to penetrate WhatsApp.
The case seems to have a lot of parallels with the ...
12
votes
3answers
9k views
If I accidentally leaked my school's IP address and someone attempts a DDoS attack on my school am I at fault?
I found my schools IP address and if it accidentally got out and my school got a DDoS attack am I liable for damages? (I'm in Colorado if that helps.)
1
vote
2answers
113 views
Legal issues of searching for software vulnerabilities
What are the legal issues about finding zero-day vulnerabilities (i.e. previously unknown vulnerabilities in a program/website) and what is the standard legal practices before trying to find them if ...
0
votes
1answer
75 views
What should happen if I ask Proxy / VPN provider about their service illegal use against me? [closed]
Let's say I am running a website that somebody is trying to hack, from the logs I got that he is using mostly VPN servers of X company.
So, even if the VPN company adverts themselves for being 100% ...
6
votes
2answers
244 views
Hacking devices to unlock features: Legal or not?
There are 2 models of multimeter, A and B. Physically they are absolutely identical, yet model B has some functions unlocked, that are locked in model A. B costs about $400 more than A. If one tampers ...
1
vote
1answer
73 views
US extradition or domestic prosecution of US based foreign cyber crime?
I’m a cybersecurity professional familiar with the extradition of foreign cyber criminals to the US. But what if the situation were flipped? Given the following scenario what would likely happen?
US ...
1
vote
1answer
175 views
how are companies like metasploit and trustedsec and rapid7 legally protected?
rapid7 and trustedsec develop professional penetration testing software rapid7 also sells a pro version of metasploit...my question is that if someone uses their software illegally how are those ...
0
votes
2answers
98 views
Does a EULA protect the developer [closed]
I have a simple question...If a client asks a developer to develop a penetration testing / security related software and that he is ready to accept the EULA which comes with the software...does that ...
1
vote
1answer
60 views
law about ethical hacker using pirated software or gadgets?
Is there any law if a ethical hacker is invited to our company and he used pirated software?
Can we take any legal action or its normal in this field?
2
votes
1answer
137 views
Evil Wifi Terms of Service [duplicate]
It's a well know fact that very few people read the Terms of Service when accessing a public WIFI network. The internet is full of hilarious stories like:
22,000 people agree to clean toilets for ...
1
vote
3answers
287 views
Can a website that passively promotes illegal activities be legally shutdown?
I've seen a couple of clearnet websites that have been around for years that, although not directly, do create and promote a type of community where most of its members sell and buy stuff such as ...
7
votes
3answers
989 views
Are publicly available password dumps legal under GDPR
When a company gets breached by hackers, often the contents of their databases will make its way onto the internet. Sometimes this will include obviously personal information such as email contents or ...
2
votes
0answers
1k views
Is it illegal to perform wifi hacks on your own home network using tools like WiFiPhisher, Aircrack, and Wireshark?
Apologies if this has been asked countless times. I've seen it a few times around here however they usually pertain to someone having written permission. And I don't...
Or if someone could post a ...
0
votes
1answer
838 views
Is is illegal to hack websites in a country considered to be an enemy of my country?
I know that Hacking is illegal in any country. my question is this "is it illegal to hack enemy country website ?" e.g i lived in Pakistan, let say i hacked Indian Govt websites. is this illegal ? if ...
1
vote
1answer
87 views
What happens to the developer studio of a game that makes an exploit possible on a console?
Often with consoles to be able to softmod them, some legitimately acquired game is required that provides an exploit such that the whole console can be modded, possibly resulting in the owner ...
2
votes
1answer
253 views
Is using method below against the eula of pubg?
I made a generic tool/application to terminate the foreground window on windows systems.
It is written in c++. It uses functions from windows.h:
HWND foo = GetForegroundWindow();
GetWindowText(foo,...
0
votes
1answer
138 views
Dealing with a Hacker
I run a small online entertainment business, recently a teenager has been hacking into our systems and causing numerous problems. After talking with him, and his refusal to cooperate, we have decided ...
0
votes
0answers
147 views
Can a software developer/company be held liable for illegal acts done with their software?
If a software developer(s) / company creates software that can be used for hacking purposes but has "Terms of Use" that state it can not be used for an illegal activity. Can the creator(s) be held ...
1
vote
2answers
134 views
Is it legal to buy a vulnerability without using it against users?
Is it legal in the United States to buy a vulnerability in a well-known software but without using it in the wrong way? like exploiting it against users.
1
vote
1answer
218 views
Will a site get into trouble if it's users use it's resources for unethical/unhealthy things on the internet?
Take the site 10minutemail.com for example. What if someone uses the temporary email and logs into somewhere on the internet and does something illegal. When the investigations happen, the email will ...
0
votes
1answer
182 views
Is a Hacking EULA legal?
So I often watch my web server traffic. At least a quarter of the time, it's someone attempting to break in. Either by ssh or by attacking my directories and login panel.
My question is, if I ...
9
votes
1answer
4k views
Exploiting online video games illegal, a tort, or allowable under the law?
Recently a news story came out about "Manfred", a hacker who makes a living exploiting bugs in online video games to make in-game currency (or items) which he then sells to other gamers. Here is a ...
0
votes
2answers
1k views
What legal consequences could an employee face who sabotages a company website?
A disgruntled employee who left our company a few weeks ago linked an external file that edits the DOM of our website for people who are not logged in and not on our IP Address (which prevented us ...
