Questions tagged [hacking]

Non-normative tag for questions relating to the use of information technology, typically in unintended manners.

Filter by
Sorted by
Tagged with
36
votes
3answers
30k views

Is it legal to crack MD5 hashes?

I saw a website that involves programming problems. One problem asks to write a program that finds a string whose MD5 hash is given. Is it criminal to crack the MD5 hash by finding those strings?
18
votes
1answer
503 views

Liability for damages in the U.S. for finding and disclosing “0-day” computer exploit

In the IT/Programming security world, usually people contact the vendor/owner of a particular software if they find a bug or security vulnerability and give them time to patch it before releasing the ...
17
votes
1answer
2k views

Clean Hands doctrine and Plausible Deniability

There is a question on the Superuser forum wherein a bad actor is trying to trick someone into connecting to an access point, presumably so they can sniff information. They are doing this by setting ...
16
votes
2answers
38k views

Is it legal to publish email that someone sent to me?

I'm not asking whether it is ethical - that would be a totally different question. I'm asking whether it is legal? In my book - in my way how I interpret consensual reality - once I press SEND ...
15
votes
2answers
6k views

Is it legal to hack a hacker back (in the US)?

I was wondering if it's legal to do what most people call a "hack back." Suppose someone tricked you into downloading software onto your computer that was designed to steal your data, but it ...
15
votes
1answer
686 views

Ethical Hacking

How is Ethical Hacking (Certified Ethical Hackers) defined by U.S. law? Is there any law which protects an Ethical Hacker for helping to find out bugs and security loopholes in online/digital ...
12
votes
3answers
9k views

If I accidentally leaked my school's IP address and someone attempts a DDoS attack on my school am I at fault?

I found my schools IP address and if it accidentally got out and my school got a DDoS attack am I liable for damages? (I'm in Colorado if that helps.)
10
votes
3answers
478 views

Under what circumstances could law enforcement hack a server?

I recently read a wired article about Silk Road and the arrest of Ross Ulbricht. The article describes how an FBI agent attempted to discover the true IP address of the Silk Road Server: Tarbell [...
9
votes
1answer
4k views

Exploiting online video games illegal, a tort, or allowable under the law?

Recently a news story came out about "Manfred", a hacker who makes a living exploiting bugs in online video games to make in-game currency (or items) which he then sells to other gamers. Here is a ...
7
votes
3answers
1k views

Are publicly available password dumps legal under GDPR

When a company gets breached by hackers, often the contents of their databases will make its way onto the internet. Sometimes this will include obviously personal information such as email contents or ...
7
votes
3answers
1k views

Bypassing website's paywall by modifying HTTP request headers

Recently I see some debates about bypassing paywalls by modifying browser's HTTP request as stated on ghack. Most paywalled websites allow users to read a certain number of free articles before ...
6
votes
3answers
3k views

Is it legal to hijack online scammers accounts?

If someone were to start phishing scammers, hijacking their accounts and handing them over to the FBI, is there any protection for said vigilante? I think there is some precedence for the necessity ...
6
votes
1answer
173 views

In Apple's Case, Under the All Writs Act - What does “Judicial Tools” Available Mean?

Question: Under the All Writs Act, 28 U.S. Code § 1651 - Writs, it appears that it can only be invoked IF AND ONLY IF there are no other "Judicial Tools Available" -- What does this mean? In Apple's ...
6
votes
2answers
256 views

Hacking devices to unlock features: Legal or not?

There are 2 models of multimeter, A and B. Physically they are absolutely identical, yet model B has some functions unlocked, that are locked in model A. B costs about $400 more than A. If one tampers ...
5
votes
2answers
2k views

Can Law Enforcement in the US use evidence acquired through an illegal act by someone else?

There are reports on the internet this morning that a group of people were able to hack Parler and download around 70tb of data from the servers before AWS ceased hosting the platform. There are ...
5
votes
1answer
180 views

If a hacker is infected as a result of their actions, is the victim liable?

If a hacker gained unauthorized access to a computer network, downloaded a virus that was on a computer and infected their own system, would the victim of the hacker be liable for damages? Does it ...
5
votes
1answer
395 views

How does Aaron Swartz's mass download from JSTOR constitute hacking?

I might be a bit late on this but I just got to know the story of Aaron Swartz, a phenomenal guy to say the least. The internet is filled with news posts, blogs, and even documentaries stating that "...
4
votes
2answers
2k views

Is it legal to bypass location restrictions on web sites?

Some web sites refuse to offer content to connections which appear to them to be coming from certain countries (or all countries but one, or offer different content based on the apparent location of ...
4
votes
1answer
163 views

When is a permission required to attack a system?

Never attack something you don't have a permission for! This is one of the golden rules of penetration testing, yet it's surprisingly unclear. What exactly counts as an attack, and when do I need ...
4
votes
2answers
213 views

Is it legal to publish personal information obtained in public?

Lets say I built a device using some software like NFCProxy or a hardware/software kit like Proxmark3 and just stood in middle of a sidewalk with a high amount of foot traffic and I passively captured ...
4
votes
2answers
464 views

How is authenticity of a given evidence determined?

I was reading this question on security SE. The title of the question is: "What are legal/ethical concerns to bear in mind, when hacking websites with open invitations?" This answer suggests to "log ...
4
votes
1answer
153 views

Privacy on stolen laptop

On slashdot.org the following case was discussed: A owns a laptop, and has software installed that allows to log into the laptop remotely. B steals the laptop, and uses it to log into their Facebook ...
4
votes
1answer
652 views

Is it legal to access open wifi networks without permission

Let's say if my neighbor keeps his/her wifi-network security open and my wifi settings are set to automatically connect to open wireless networks as they don't need any key to access. Then ...
4
votes
1answer
2k views

Is it illegal to reverse engineer an unsecured API

Is it legal to reverse engineer an unsecured API? Simple REST API used in Android app No SSL (just straight HTTP) Passwords are sent in plain text over this HTTP API I ran the Android app and ...
4
votes
2answers
234 views

Guessing forgotten password and breaking into own online account

If you have an online account and forget the password, are you allowed to guess it? What if you automate the process, like in a brute force attack? Can other things, like the verification code be ...
3
votes
2answers
1k views

Is cracking software with server emulators illegal?

Let's say I have a program that needs you to login with a paid account in order to use it, and it sends authorization data to a server (username and pass) using this example link (I show example ...
3
votes
1answer
106 views

Legal status of Cellebrite hack

The CEO of Signal has posted the discovery of security vulnerabilities in Cellebrite products. These products are used by police to evade security on seized mobile devices and thereby download the ...
3
votes
1answer
3k views

Is it legal to hack my wifi hotspot's password?

I'm gonna explain it exactly: Parents divorced, I have a laptop from mom, and a smartphone from my father (with subscription contract), with internet access, and hotspot capable. My question is: If i ...
3
votes
1answer
807 views

What legal action can I take if someone who had access to my personal hard disk copied all my personal pictures into his computer?

A few months ago I had a temporary guest in my residence. During this time he, without my permission, went through my personal hard disk and copied all of my pictures onto his personal computer. (...
3
votes
1answer
134 views

Can I attack a VPS I am renting?

I live in France and I would like to know if it was legal to attack the Virtual Private Server I am renting in the US.
3
votes
1answer
203 views

Are we legally liable for negligence if a breach in a 3rd party happens due to us giving extra visibility to a vulnerable system?

TL;DR - Found a dangling DNS record that was pointing to an IP address we don't own, the server found on that IP address was running a vulnerable piece of software. Wondering if attackers found & ...
3
votes
1answer
601 views

Legality of scanning a site with SSLLabs SSL Server Test in order to find and report weaknesses

I am wanting to scan a site (which I do not own) to see if they are vulnerable to anything like Heartbleed or the POODLE attack, not because I want to exploit any such vulnerabilities for malicious ...
3
votes
1answer
157 views

Is reverse engineering for research legal?

I want to look at the code of a certain app, without modifying it. Is that fine accordingly to EU laws ? Btw, sorry if I posted this in the wrong place.
2
votes
3answers
196 views

Can I use a workaround I developed to bypass the internet filter at work?

I found a workaround (by writing some code) to bypass the internet filter at work. Is that considered hacking? Or perhaps violating the company's rules. Am I the one to be blamed for finding a ...
2
votes
2answers
267 views

Can academics break the law with their research?

Are there any U.S. or U.K. laws that prevent academic research papers or journals from being published? Can academics outline the methodology of illegal activities? For example, could a computer ...
2
votes
2answers
89 views

Am I liable for problems caused by unendorsed software modification on my products?

Imagine the following hypothetical. My firm produces electronic controllers for a variety of products. Let's focus, say, on a commercial washing machine. We design the electronics and develop the ...
2
votes
1answer
1k views

Which US laws would webcam spying break?

In the United States, which laws would spying on someone using their computer's webcam, without their permission and in private areas, break?
2
votes
3answers
439 views

Is CNN Chris Cuomo right about Clinton's emails: “it's different for the media”?

In 2016, CNN reporter Chris Cuomo, said about Hillary Clinton's hacked emails: Also interesting is remember...it's illegal to possess the stolen documents. It's different for the media. So ...
2
votes
1answer
440 views

Is it legal to replace something's firmware?

I'm a software/hardware hacker and I am wondering about how legal it is to replace the firmware of something. This something can be a car a chinese quadcopter a phone a Canon EOS 5D a (connected) ...
2
votes
1answer
97 views

Found exploit at my hosting provider

I have a paid shared server and figured out that a php reverse shell is possible. I moved up a few directories from my home directory and have seen some folders named like domain-names. At this time I ...
2
votes
1answer
109 views

Is it legal to disclose a technical vulnerability publicly that might cause a monetary loss to millions of people?

I'll cite an example that came to my mind to crisply explain the essence of my question. It might contain some extreme assumptions not rooted in real world examples. Computer scientist John Doe who ...
2
votes
2answers
276 views

In the United States (Michgan) is it legal to publish IP Addresses that were trying to hack my web server?

I have a private web server that gets attacked a lot (brute forces, nmap scans). I would like to compile a list of the IP addresses that were trying to hack my server and publish them on my website. ...
2
votes
1answer
184 views

Does attempting to hack into a system constitute a cybercrime by itself?

If someone tries to attack or gain unauthorized access to a given system but fails eventually, could that person get arrested for the mere attempt? I know laws differ from one state/country to ...
2
votes
1answer
139 views

Evil Wifi Terms of Service [duplicate]

It's a well know fact that very few people read the Terms of Service when accessing a public WIFI network. The internet is full of hilarious stories like: 22,000 people agree to clean toilets for ...
2
votes
0answers
1k views

Is it illegal to perform wifi hacks on your own home network using tools like WiFiPhisher, Aircrack, and Wireshark?

Apologies if this has been asked countless times. I've seen it a few times around here however they usually pertain to someone having written permission. And I don't... Or if someone could post a ...
2
votes
1answer
254 views

Is using method below against the eula of pubg?

I made a generic tool/application to terminate the foreground window on windows systems. It is written in c++. It uses functions from windows.h: HWND foo = GetForegroundWindow(); GetWindowText(foo,...
2
votes
0answers
336 views

Legal to share malware code/sell malware products?

I program / rewrite (from security analysis / reverse engineering) different kinds of malware software as a hobby. Those include some pretty malicious things like ransomware extortion viruses, banking ...
2
votes
0answers
558 views

As a Developer how should my contract be worded to protect against hacking

I am a web developer and have a contract for client based projects that has been improved over years and many projects. However after reading it this month I think that upgrading the section that ...
2
votes
2answers
109 views

Can an e-commerce site owner be guilty of a crime if the site is hacked?

Are there any crimes that could apply to a site owner if his e-commerce site is hacked?
1
vote
3answers
172 views

Is unintentional one-time bug abuse illegal?

Concrete examples : Someone making API requests through a banking platform, withdrew many times in succession, and through some miracle bug they all went through. Someone unaffiliated with a ...