Questions tagged [hacking]

Non-normative tag for questions relating to the use of information technology, typically in unintended manners.

Filter by
Sorted by
Tagged with
36
votes
3answers
30k views

Is it legal to crack MD5 hashes?

I saw a website that involves programming problems. One problem asks to write a program that finds a string whose MD5 hash is given. Is it criminal to crack the MD5 hash by finding those strings?
18
votes
1answer
480 views

Liability for damages in the U.S. for finding and disclosing “0-day” computer exploit

In the IT/Programming security world, usually people contact the vendor/owner of a particular software if they find a bug or security vulnerability and give them time to patch it before releasing the ...
17
votes
1answer
2k views

Clean Hands doctrine and Plausible Deniability

There is a question on the Superuser forum wherein a bad actor is trying to trick someone into connecting to an access point, presumably so they can sniff information. They are doing this by setting ...
15
votes
2answers
32k views

Is it legal to publish email that someone sent to me?

I'm not asking whether it is ethical - that would be a totally different question. I'm asking whether it is legal? In my book - in my way how I interpret consensual reality - once I press SEND ...
15
votes
1answer
669 views

Ethical Hacking

How is Ethical Hacking (Certified Ethical Hackers) defined by U.S. law? Is there any law which protects an Ethical Hacker for helping to find out bugs and security loopholes in online/digital ...
12
votes
3answers
9k views

If I accidentally leaked my school's IP address and someone attempts a DDoS attack on my school am I at fault?

I found my schools IP address and if it accidentally got out and my school got a DDoS attack am I liable for damages? (I'm in Colorado if that helps.)
10
votes
3answers
371 views

Under what circumstances could law enforcement hack a server?

I recently read a wired article about Silk Road and the arrest of Ross Ulbricht. The article describes how an FBI agent attempted to discover the true IP address of the Silk Road Server: Tarbell [...
9
votes
1answer
3k views

Exploiting online video games illegal, a tort, or allowable under the law?

Recently a news story came out about "Manfred", a hacker who makes a living exploiting bugs in online video games to make in-game currency (or items) which he then sells to other gamers. Here is a ...
7
votes
2answers
645 views

Are publicly available password dumps legal under GDPR

When a company gets breached by hackers, often the contents of their databases will make its way onto the internet. Sometimes this will include obviously personal information such as email contents or ...
7
votes
3answers
866 views

Bypassing website's paywall by modifying HTTP request headers

Recently I see some debates about bypassing paywalls by modifying browser's HTTP request as stated on ghack. Most paywalled websites allow users to read a certain number of free articles before ...
6
votes
1answer
166 views

In Apple's Case, Under the All Writs Act - What does “Judicial Tools” Available Mean?

Question: Under the All Writs Act, 28 U.S. Code § 1651 - Writs, it appears that it can only be invoked IF AND ONLY IF there are no other "Judicial Tools Available" -- What does this mean? In Apple's ...
6
votes
2answers
218 views

Hacking devices to unlock features: Legal or not?

There are 2 models of multimeter, A and B. Physically they are absolutely identical, yet model B has some functions unlocked, that are locked in model A. B costs about $400 more than A. If one tampers ...
5
votes
3answers
3k views

Is it legal to hijack online scammers accounts?

If someone were to start phishing scammers, hijacking their accounts and handing them over to the FBI, is there any protection for said vigilante? I think there is some precedence for the necessity ...
5
votes
1answer
352 views

How does Aaron Swartz's mass download from JSTOR constitute hacking?

I might be a bit late on this but I just got to know the story of Aaron Swartz, a phenomenal guy to say the least. The internet is filled with news posts, blogs, and even documentaries stating that "...
4
votes
1answer
150 views

When is a permission required to attack a system?

Never attack something you don't have a permission for! This is one of the golden rules of penetration testing, yet it's surprisingly unclear. What exactly counts as an attack, and when do I need ...
4
votes
2answers
196 views

Is it legal to publish personal information obtained in public?

Lets say I built a device using some software like NFCProxy or a hardware/software kit like Proxmark3 and just stood in middle of a sidewalk with a high amount of foot traffic and I passively captured ...
4
votes
2answers
451 views

How is authenticity of a given evidence determined?

I was reading this question on security SE. The title of the question is: "What are legal/ethical concerns to bear in mind, when hacking websites with open invitations?" This answer suggests to "log ...
4
votes
1answer
144 views

Privacy on stolen laptop

On slashdot.org the following case was discussed: A owns a laptop, and has software installed that allows to log into the laptop remotely. B steals the laptop, and uses it to log into their Facebook ...
4
votes
1answer
2k views

Is it illegal to reverse engineer an unsecured API

Is it legal to reverse engineer an unsecured API? Simple REST API used in Android app No SSL (just straight HTTP) Passwords are sent in plain text over this HTTP API I ran the Android app and ...
4
votes
2answers
189 views

Guessing forgotten password and breaking into own online account

If you have an online account and forget the password, are you allowed to guess it? What if you automate the process, like in a brute force attack? Can other things, like the verification code be ...
3
votes
2answers
1k views

Is cracking software with server emulators illegal?

Let's say I have a program that needs you to login with a paid account in order to use it, and it sends authorization data to a server (username and pass) using this example link (I show example ...
3
votes
2answers
2k views

Is it legal to bypass location restrictions on web sites?

Some web sites refuse to offer content to connections which appear to them to be coming from certain countries (or all countries but one, or offer different content based on the apparent location of ...
3
votes
1answer
147 views

If a hacker is infected as a result of their actions, is the victim liable?

If a hacker gained unauthorized access to a computer network, downloaded a virus that was on a computer and infected their own system, would the victim of the hacker be liable for damages? Does it ...
3
votes
1answer
191 views

Are we legally liable for negligence if a breach in a 3rd party happens due to us giving extra visibility to a vulnerable system?

TL;DR - Found a dangling DNS record that was pointing to an IP address we don't own, the server found on that IP address was running a vulnerable piece of software. Wondering if attackers found & ...
3
votes
1answer
579 views

Is it legal to access open wifi networks without permission

Let's say if my neighbor keeps his/her wifi-network security open and my wifi settings are set to automatically connect to open wireless networks as they don't need any key to access. Then ...
3
votes
1answer
124 views

Can I attack a VPS I am renting?

I live in France and I would like to know if it was legal to attack the Virtual Private Server I am renting in the US.
3
votes
1answer
524 views

Legality of scanning a site with SSLLabs SSL Server Test in order to find and report weaknesses

I am wanting to scan a site (which I do not own) to see if they are vulnerable to anything like Heartbleed or the POODLE attack, not because I want to exploit any such vulnerabilities for malicious ...
3
votes
1answer
126 views

Is reverse engineering for research legal?

I want to look at the code of a certain app, without modifying it. Is that fine accordingly to EU laws ? Btw, sorry if I posted this in the wrong place.
2
votes
2answers
212 views

Can academics break the law with their research?

Are there any U.S. or U.K. laws that prevent academic research papers or journals from being published? Can academics outline the methodology of illegal activities? For example, could a computer ...
2
votes
2answers
85 views

Am I liable for problems caused by unendorsed software modification on my products?

Imagine the following hypothetical. My firm produces electronic controllers for a variety of products. Let's focus, say, on a commercial washing machine. We design the electronics and develop the ...
2
votes
1answer
880 views

Which US laws would webcam spying break?

In the United States, which laws would spying on someone using their computer's webcam, without their permission and in private areas, break?
2
votes
3answers
136 views

Can I use a workaround I developed to bypass the internet filter at work?

I found a workaround (by writing some code) to bypass the internet filter at work. Is that considered hacking? Or perhaps violating the company's rules. I don't recall signing anything when I got ...
2
votes
3answers
360 views

Is CNN Chris Cuomo right about Clinton's emails: “it's different for the media”?

In 2016, CNN reporter Chris Cuomo, said about Hillary Clinton's hacked emails: Also interesting is remember...it's illegal to possess the stolen documents. It's different for the media. So ...
2
votes
1answer
348 views

Is it legal to replace something's firmware?

I'm a software/hardware hacker and I am wondering about how legal it is to replace the firmware of something. This something can be a car a chinese quadcopter a phone a Canon EOS 5D a (connected) ...
2
votes
1answer
2k views

Is it legal to hack my wifi hotspot's password?

I'm gonna explain it exactly: Parents divorced, I have a laptop from mom, and a smartphone from my father (with subscription contract), with internet access, and hotspot capable. My question is: If i ...
2
votes
1answer
96 views

Found exploit at my hosting provider

I have a paid shared server and figured out that a php reverse shell is possible. I moved up a few directories from my home directory and have seen some folders named like domain-names. At this time I ...
2
votes
1answer
756 views

What legal action can I take if someone who had access to my personal hard disk copied all my personal pictures into his computer?

A few months ago I had a temporary guest in my residence. During this time he, without my permission, went through my personal hard disk and copied all of my pictures onto his personal computer. (...
2
votes
1answer
92 views

Is it legal to disclose a technical vulnerability publicly that might cause a monetary loss to millions of people?

I'll cite an example that came to my mind to crisply explain the essence of my question. It might contain some extreme assumptions not rooted in real world examples. Computer scientist John Doe who ...
2
votes
2answers
264 views

In the United States (Michgan) is it legal to publish IP Addresses that were trying to hack my web server?

I have a private web server that gets attacked a lot (brute forces, nmap scans). I would like to compile a list of the IP addresses that were trying to hack my server and publish them on my website. ...
2
votes
1answer
143 views

Does attempting to hack into a system constitute a cybercrime by itself?

If someone tries to attack or gain unauthorized access to a given system but fails eventually, could that person get arrested for the mere attempt? I know laws differ from one state/country to ...
2
votes
1answer
130 views

Evil Wifi Terms of Service [duplicate]

It's a well know fact that very few people read the Terms of Service when accessing a public WIFI network. The internet is full of hilarious stories like: 22,000 people agree to clean toilets for ...
2
votes
0answers
753 views

Is it illegal to perform wifi hacks on your own home network using tools like WiFiPhisher, Aircrack, and Wireshark?

Apologies if this has been asked countless times. I've seen it a few times around here however they usually pertain to someone having written permission. And I don't... Or if someone could post a ...
2
votes
1answer
239 views

Is using method below against the eula of pubg?

I made a generic tool/application to terminate the foreground window on windows systems. It is written in c++. It uses functions from windows.h: HWND foo = GetForegroundWindow(); GetWindowText(foo,...
2
votes
0answers
313 views

Legal to share malware code/sell malware products?

I program / rewrite (from security analysis / reverse engineering) different kinds of malware software as a hobby. Those include some pretty malicious things like ransomware extortion viruses, banking ...
2
votes
0answers
517 views

As a Developer how should my contract be worded to protect against hacking

I am a web developer and have a contract for client based projects that has been improved over years and many projects. However after reading it this month I think that upgrading the section that ...
2
votes
2answers
106 views

Can an e-commerce site owner be guilty of a crime if the site is hacked?

Are there any crimes that could apply to a site owner if his e-commerce site is hacked?
1
vote
3answers
2k views

Can a hacker be arrested without investigating his computer?

So I would first like to state I'm not asking this because I'm trying to find out how much evidence it would take for law enforcement to arrest me (I'm not a hacker). From what I've gathered, law ...
1
vote
1answer
87 views

Legality of Cyber Attack on illegal foreign website

I live in a country where website that provides pornography, illegal drugs, prostitution, illegal gambling, etc are forbidden (in Indonesia). But foreign websites (ex. from western countries) on those ...
1
vote
1answer
152 views

how are companies like metasploit and trustedsec and rapid7 legally protected?

rapid7 and trustedsec develop professional penetration testing software rapid7 also sells a pro version of metasploit...my question is that if someone uses their software illegally how are those ...
1
vote
1answer
892 views

Does the “German Hacking law” deny the opportunity to do private penetration testing?

Would the possession of a Rubberducky Stick or an Pineapple router get you in trouble (even if you don't have evil intentions) with the new German anti-hacking law?