Questions tagged [hacking]

Non-normative tag for questions relating to the use of information technology, typically in unintended manners.

Filter by
Sorted by
Tagged with
9
votes
1answer
4k views

Exploiting online video games illegal, a tort, or allowable under the law?

Recently a news story came out about "Manfred", a hacker who makes a living exploiting bugs in online video games to make in-game currency (or items) which he then sells to other gamers. Here is a ...
0
votes
2answers
1k views

What legal consequences could an employee face who sabotages a company website?

A disgruntled employee who left our company a few weeks ago linked an external file that edits the DOM of our website for people who are not logged in and not on our IP Address (which prevented us ...
17
votes
1answer
2k views

Clean Hands doctrine and Plausible Deniability

There is a question on the Superuser forum wherein a bad actor is trying to trick someone into connecting to an access point, presumably so they can sniff information. They are doing this by setting ...
2
votes
2answers
270 views

Can academics break the law with their research?

Are there any U.S. or U.K. laws that prevent academic research papers or journals from being published? Can academics outline the methodology of illegal activities? For example, could a computer ...
4
votes
2answers
2k views

Is it legal to bypass location restrictions on web sites?

Some web sites refuse to offer content to connections which appear to them to be coming from certain countries (or all countries but one, or offer different content based on the apparent location of ...
0
votes
2answers
69 views

Regulations of Tempest protection of buildings

Tempest devices could via intercepting from far away the electro-magnetic waves coming out from one's computer detect what one does on the computer. Employing the Faraday cage principle, one could ...
2
votes
2answers
277 views

In the United States (Michgan) is it legal to publish IP Addresses that were trying to hack my web server?

I have a private web server that gets attacked a lot (brute forces, nmap scans). I would like to compile a list of the IP addresses that were trying to hack my server and publish them on my website. ...
2
votes
3answers
196 views

Can I use a workaround I developed to bypass the internet filter at work?

I found a workaround (by writing some code) to bypass the internet filter at work. Is that considered hacking? Or perhaps violating the company's rules. Am I the one to be blamed for finding a ...
3
votes
2answers
1k views

Is cracking software with server emulators illegal?

Let's say I have a program that needs you to login with a paid account in order to use it, and it sends authorization data to a server (username and pass) using this example link (I show example ...
4
votes
1answer
154 views

Privacy on stolen laptop

On slashdot.org the following case was discussed: A owns a laptop, and has software installed that allows to log into the laptop remotely. B steals the laptop, and uses it to log into their Facebook ...
2
votes
1answer
193 views

Does attempting to hack into a system constitute a cybercrime by itself?

If someone tries to attack or gain unauthorized access to a given system but fails eventually, could that person get arrested for the mere attempt? I know laws differ from one state/country to ...
1
vote
1answer
302 views

Can confession stories be used as evidence in court?

I would like to tell my story that contain things that may or may not be illegal. I planned to upload it to youtube for educational and entertainment purposes. I'm afraid though that I might be ...
0
votes
2answers
313 views

Is it illegal to bypass user agreement window?

I have a download page with many files. If a user clicks on the download button of a file, then a window with user agreements shows, and you can only download the file by pressing the I agree button, ...
2
votes
1answer
456 views

Is it legal to replace something's firmware?

I'm a software/hardware hacker and I am wondering about how legal it is to replace the firmware of something. This something can be a car a chinese quadcopter a phone a Canon EOS 5D a (connected) ...
1
vote
1answer
954 views

Does the “German Hacking law” deny the opportunity to do private penetration testing?

Would the possession of a Rubberducky Stick or an Pineapple router get you in trouble (even if you don't have evil intentions) with the new German anti-hacking law?
-1
votes
3answers
736 views

How to respond to a user requesting deletion of their online account

My website occasionally receives requests from users asking for their account to be deleted. The website itself is a dating site that stores messages between users, personal information they add to ...
4
votes
2answers
213 views

Is it legal to publish personal information obtained in public?

Lets say I built a device using some software like NFCProxy or a hardware/software kit like Proxmark3 and just stood in middle of a sidewalk with a high amount of foot traffic and I passively captured ...
2
votes
0answers
341 views

Legal to share malware code/sell malware products?

I program / rewrite (from security analysis / reverse engineering) different kinds of malware software as a hobby. Those include some pretty malicious things like ransomware extortion viruses, banking ...
6
votes
3answers
4k views

Is it legal to hijack online scammers accounts?

If someone were to start phishing scammers, hijacking their accounts and handing them over to the FBI, is there any protection for said vigilante? I think there is some precedence for the necessity ...
3
votes
1answer
3k views

Is it legal to hack my wifi hotspot's password?

I'm gonna explain it exactly: Parents divorced, I have a laptop from mom, and a smartphone from my father (with subscription contract), with internet access, and hotspot capable. My question is: If i ...
0
votes
1answer
2k views

Is it illegal to create and sell a exploit of a zero-day vulnerability?

The definition of an exploit: A software tool designed to take advantage of a flaw in a computer system, typically for malicious purposes such as installing malware. The definition of a zero-day ...
0
votes
1answer
101 views

Who can initiate the legal proceedings for hacking?

If a server is owned and maintained by Organization A, but almost fully installed and configured by Person A, who is a employee of Organization A, then who initiates the legal proceedings regarding ...
-1
votes
1answer
69 views

How to protect software server

In the our contract with our service provider, how do I protect us from having their server hacked and our personal information compromised?
1
vote
1answer
167 views

Posting leaked data

Is it legal to publicly share leaked data (for example, twitter.com user emails, names, and passwords)?
1
vote
1answer
47 views

Is a “drive-by-download” site liable for their content

There was an incident where forbes.com was delivering viruses through Javascript exploits found in their ads. This happened just by clicking a link (before you can "agree" to anything). Are they ...
1
vote
1answer
88 views

Is it legal to create a program intended to gain unauthorized access?

If I make a program which is unquestionably intended for other people to use to gain unauthorized access to a network, but I do not use the program myself except on my own network for testing, have I ...
1
vote
3answers
2k views

Can a hacker be arrested without investigating his computer?

So I would first like to state I'm not asking this because I'm trying to find out how much evidence it would take for law enforcement to arrest me (I'm not a hacker). From what I've gathered, law ...
4
votes
2answers
239 views

Guessing forgotten password and breaking into own online account

If you have an online account and forget the password, are you allowed to guess it? What if you automate the process, like in a brute force attack? Can other things, like the verification code be ...
0
votes
1answer
779 views

Is it illegal to hack twitter accounts and websites belonging to ISIS?

In particular, ISIS twitter accounts, networks, and propaganda sites. Would the US government condone such cybercrime? Would they even encourage people to try? I have heard stories of ISIS defaming ...
6
votes
1answer
174 views

In Apple's Case, Under the All Writs Act - What does “Judicial Tools” Available Mean?

Question: Under the All Writs Act, 28 U.S. Code § 1651 - Writs, it appears that it can only be invoked IF AND ONLY IF there are no other "Judicial Tools Available" -- What does this mean? In Apple's ...
0
votes
1answer
135 views

how much would a hacker be fined for using others online money?

how much would a hacker be fined for using others online money? (according to international law) Let's say for using $10,000, $1,000, $100, or $10.
0
votes
1answer
106 views

Would collecting personal information on a server you have access to be “hacking”?

Suppose you have an account on a local domain, but you were given it only to use a local server for personal storage. If you collect personal information of employees and users in this network (such ...
4
votes
2answers
464 views

How is authenticity of a given evidence determined?

I was reading this question on security SE. The title of the question is: "What are legal/ethical concerns to bear in mind, when hacking websites with open invitations?" This answer suggests to "log ...
-2
votes
2answers
209 views

Are phone spying apps illegal?

If someone sent a false picture message that contained a hidden app that allowed them to monitor calls,messages,photos etc... Are there any privacy laws being broken?This question applies only to the ...
0
votes
1answer
29 views

Can terminated licenses in EULAs be revived?

If a user hacks their video game while the EULA of their video game says that the license will be terminated upon hacking, is it possible in any way to gain back the license once it's terminated or is ...
2
votes
0answers
559 views

As a Developer how should my contract be worded to protect against hacking

I am a web developer and have a contract for client based projects that has been improved over years and many projects. However after reading it this month I think that upgrading the section that ...
4
votes
1answer
657 views

Is it legal to access open wifi networks without permission

Let's say if my neighbor keeps his/her wifi-network security open and my wifi settings are set to automatically connect to open wireless networks as they don't need any key to access. Then ...
2
votes
2answers
109 views

Can an e-commerce site owner be guilty of a crime if the site is hacked?

Are there any crimes that could apply to a site owner if his e-commerce site is hacked?
1
vote
1answer
188 views

Any reason not to out someone for having an Ashley Madison account?

Suppose I torrent the file and see the name and address of my neighbor associated with an Ashley Madison account. Suppose he is a somewhat prominent business owner or local politician. Can I be ...
2
votes
1answer
98 views

Found exploit at my hosting provider

I have a paid shared server and figured out that a php reverse shell is possible. I moved up a few directories from my home directory and have seen some folders named like domain-names. At this time I ...
3
votes
1answer
827 views

What legal action can I take if someone who had access to my personal hard disk copied all my personal pictures into his computer?

A few months ago I had a temporary guest in my residence. During this time he, without my permission, went through my personal hard disk and copied all of my pictures onto his personal computer. (...
17
votes
2answers
39k views

Is it legal to publish email that someone sent to me?

I'm not asking whether it is ethical - that would be a totally different question. I'm asking whether it is legal? In my book - in my way how I interpret consensual reality - once I press SEND ...
2
votes
1answer
1k views

Which US laws would webcam spying break?

In the United States, which laws would spying on someone using their computer's webcam, without their permission and in private areas, break?
3
votes
1answer
615 views

Legality of scanning a site with SSLLabs SSL Server Test in order to find and report weaknesses

I am wanting to scan a site (which I do not own) to see if they are vulnerable to anything like Heartbleed or the POODLE attack, not because I want to exploit any such vulnerabilities for malicious ...
4
votes
1answer
2k views

Is it illegal to reverse engineer an unsecured API

Is it legal to reverse engineer an unsecured API? Simple REST API used in Android app No SSL (just straight HTTP) Passwords are sent in plain text over this HTTP API I ran the Android app and ...
5
votes
1answer
400 views

How does Aaron Swartz's mass download from JSTOR constitute hacking?

I might be a bit late on this but I just got to know the story of Aaron Swartz, a phenomenal guy to say the least. The internet is filled with news posts, blogs, and even documentaries stating that "...
3
votes
1answer
134 views

Can I attack a VPS I am renting?

I live in France and I would like to know if it was legal to attack the Virtual Private Server I am renting in the US.
10
votes
3answers
483 views

Under what circumstances could law enforcement hack a server?

I recently read a wired article about Silk Road and the arrest of Ross Ulbricht. The article describes how an FBI agent attempted to discover the true IP address of the Silk Road Server: Tarbell [...
15
votes
1answer
690 views

Ethical Hacking

How is Ethical Hacking (Certified Ethical Hackers) defined by U.S. law? Is there any law which protects an Ethical Hacker for helping to find out bugs and security loopholes in online/digital ...
18
votes
1answer
513 views

Liability for damages in the U.S. for finding and disclosing “0-day” computer exploit

In the IT/Programming security world, usually people contact the vendor/owner of a particular software if they find a bug or security vulnerability and give them time to patch it before releasing the ...

1
2