Questions tagged [security]
This tag is for questions about protection of tangible and intangible property. For financial instruments use the [securities] tag instead.
72
questions
2
votes
3
answers
130
views
What are the powers of a retail security guard compared to a police officer?
I watched a video about the legality of security guards doing random compulsory receipt and bag checks and it raised a question for me. So of course they can stop you in the act to prevent an imminent ...
- 1,588
3
votes
1
answer
78
views
Can GDPR force public sector workers to fix an exploit they were notified of?
I live in some EU country and I rely on social security provided by the regional government. There is a website for residents who can sign up and claim benefits without physically visiting an office. ...
- 31
1
vote
0
answers
107
views
EIN number(s) for an Estate - Are two needed?
A person dies with money in individual brokerage accounts and a living revocable trust which has brokerage accounts.
Given these facts, it is my claim that to settle the estate, you should get two EIN ...
- 1,165
11
votes
2
answers
2k
views
May putting others at peril worsen the sentence?
Bob the Burglar specializes in fencing of stolen safety equipment (fire extinguishers, AEDs, etc.).
One night, he breaks into a factory and steals the fire extinguishers and a fire hose. The theft is ...
- 4,865
1
vote
0
answers
74
views
Is it mandatory for companies to patch security vulnerabilities?
I read that the Cybersecurity and Infrastructure Security Agency (CISA) often issue orders to federal agencies to patch certain vulnerabilities.
I was wondering if there are similar laws in France and ...
- 11
-1
votes
1
answer
79
views
can i write in my portfolio about a critical security bug in my last job? [closed]
I want to write about how i found a critical security bug when i was working at a company. Am going to stop working there in about a month and was just updating my portfolio with the things i did ...
- 141
2
votes
1
answer
126
views
Is Crypto the same as any foreign currency?
A foreign currency exchange is nothing new. On the other hand cryptographic currency ("crypto" i.e. Bitcoin) is relatively new, as are their exchanges.
https://abcnews.go.com/Business/...
- 6,955
1
vote
1
answer
100
views
Legal implications of unsecure bluetooth device
I have recently learned about a high-tech premium bed base that incorporates Bluetooth speakers, plus massage actuators and other features controllable via a smartphone app.
Like many insecure ...
- 111
2
votes
0
answers
44
views
Search engine data breaches, osint
Such a search engine that is deliberately created for the purpose of collecting open source information about security related incidents including data breaches and including a link to the source that ...
- 43
0
votes
1
answer
128
views
Decoding and publishing lock combination
Many combination locks can easily have their combinations decoded, even while the lock is shut. Suppose someone decoded the combination to a lock, wrote down the combination on a piece of paper, and ...
- 159
12
votes
3
answers
7k
views
Is it illegal to download passwords in bulk from the dark web to make a password checking tool to help people?
I remember some password managers like Google's would give me a warning about passwords that have been compromised.
My question is this. How is Google or any company able to see that the password I ...
- 237
9
votes
4
answers
7k
views
Is it legal to sell security vulnerabilities you found while working with a company to that company?
Suppose you were working at a company for a few years, and during your time there you found a few computer security vulnerabilities that could be used by potential attackers. If you were to compile ...
- 614
1
vote
1
answer
44
views
What’s the internal DPO access level?
Since the internal Data Protection Officer (DPO) should be independent, he needs to have access to all company files. But should he have access to everything at all time, or can the company only allow ...
- 137
-2
votes
2
answers
118
views
i find a security vulnerabilities but my company dont put time to fix it
I work as Developer in a big company,
I found security vulnerabilities that let me login to any user accounts in the system.
I told my team and my boss for about 9 mounts ago.
my project manager and ...
- 141
0
votes
3
answers
200
views
Can Bob provide translations to copyrighted articles on his websites?
Consider a scenario: Bob is an owner of a website.
Bob plans to stream the translation of a copyright-subject article on the website. Is permission from the copyright holder needed for Bob to stream ...
- 85
1
vote
2
answers
357
views
Is it legal to use a drone to photograph a power plant?
Assume the drone is launched from from outside the property of the plant and does not fly over the property boundary of the plant. Location is the United States. (If laws by state differ then focus on ...
- 19
1
vote
1
answer
180
views
Would a private business be liable for false warrant canary?
Suppose there is a private business whose business model is based on the trust of its customers that it has not been served with a secret government subpoena. That is, if the customers knew (or could ...
- 25.8k
3
votes
1
answer
386
views
Can I add a deadlock to the front door of my unit?
I have recently bought a unit in a rough area. The front door to the apartment complex does not click shut properly so anyone from the general public can walk in. The door to my unit has one of those ...
- 133
1
vote
0
answers
60
views
Is transporting people into the countryside and leaving them a legal response for private security?
It is reported that three 16-year-olds were found without appropriate authorisation within the camping zone of Reading Festival, UK. Despite police telling festival organisers no further action would ...
- 817
14
votes
3
answers
5k
views
Has it been Legally Confirmed that A Website is not Liable if passwords stolen from it are used on other sites?
Security Experts the world around all agree that you should not reuse passwords across sites. This is simply a matter of best practice, and it protects you such that if your StackExchange password is ...
- 183
0
votes
1
answer
66
views
What legal recourse does Huawei have to have the U.S. remove it from their blacklist?
https://www.ft.com/content/978f169a-8175-11e9-b592-5fe435b57a3b
China has lashed out at the US over its blacklisting of Huawei,
accusing it of abusing national security exceptions to global trade
...
- 5,170
1
vote
1
answer
142
views
Foreclosure on Deed of Trust securing a non-monetary obligation
When a deed of trust is made to secure the trustor's performance of a contractual obligation, how does the beneficiary go about foreclosing on it?
When the obligation is just a monetary debt, the ...
9
votes
4
answers
4k
views
Does The Crown have the authority to restrict the rights of a Royal family member?
An issue that somehow got lost in the recent Meghan and Harry allegations is the claim that Meghan had to give up her driver's license and keys. The only reference to legality of this action I found ...
- 161
0
votes
1
answer
52
views
Howey Test for Real Estate Business vs. Farm Land?
I have no education in legal matters and was only thinking about some investments. I stumbled on something called the Howey Test and tried to read a little about it. I still don't understand it, and ...
- 103
2
votes
0
answers
160
views
Is it legal to covertly record (CCTV) a credit card pin number?
My local Supermarket (one of the top 3 in the UK) has modified its self-service checkout tills to include a CCTV camera about 1.5 meters vertically above the credit card reader pointing straight ...
- 1,231
1
vote
0
answers
155
views
Where in the world is decompilation and reverse engineering for security research legal?
Disclaimer: IANAL, the following is just my research up to now.
I understand that in many jurisdictions, reverse engineering - and especially decompilation of software without explicit permission from ...
- 111
1
vote
0
answers
47
views
What are the rules and laws for guards and loss prevention in NYC during Covid-19 in NYC?
What are the rules and laws for guards and loss prevention in NYC during Covid-19 in NYC?
I've read that security guards and loss prevention are not allowed to detain people, essentially false ...
- 612
34
votes
3
answers
10k
views
Is it legal for Microsoft to install software without user approval?
On several occasions, Microsoft had misled their users to forcefully install updates or unwanted programs (like Windows 10 on Windows 7 here, here, here, and here), it also has forcefully installed ...
- 467
1
vote
1
answer
114
views
Video surveillance of dedicated laboratory rejected by single employee [Germany]
We have a dedicated laboratory with very expensive and sensitive equipment. When handled incorrectly, they can cause serious harm to the user or others in the laboratory. Our department consists of 5 ...
- 111
0
votes
0
answers
101
views
Is it illegal to refuse to fix a hacked website?
Suppose there's a website or a server that has been hacked. There is no personal data stored anywhere, so there hasn't been a real data breach, because basically there's no valuable data to steal at ...
- 1,828
0
votes
1
answer
2k
views
Storing Bank Account Number and Sort-code in the Database [closed]
I need to store UK Bank Account Number and Sort Code in my MYSQL database to send the users payments.
The PHP/Laravel site will be hosted on AWS with SSL & off-course the Account Number and Sort ...
- 111
-1
votes
2
answers
196
views
The right to hide one's password
It's well known that you should never reveal your password to anyone -- including your boss, your sysadmin, etc. My friend's former boss has sued her, demanding (among other things) the password to ...
- 99
0
votes
1
answer
82
views
Is any attempt to access restricted information on the web considered an attack?
This article reports that a person who "gained access to the admin portal by simply altering the website’s URL" is now under investigation by FBI for "exploiting personal information".
I want to ...
- 1,345
0
votes
1
answer
3k
views
Does "insider trading" apply to private companies?
In America, "pitching" to investors is how capital is often raised.
What I don't understand is why this is legal: You supply private information to the investor, who decides to buy stock in your ...
- 1,284
4
votes
1
answer
297
views
Is it against law to implement security theaters?
In cybersecurity, we have a subject called "security theater" which means implementing a feature that only looks like a real security mechanism but doesn't do anything literally.
Is it against the ...
- 143
1
vote
1
answer
282
views
Covid tracking app, forcing citizen to install it on insecure devices
Here's the hypothetical scenario, which in some countries might not be hypothetical after all:
The app. Because of Covid-19, the government decides that some citizens must install an app on their ...
- 1,828
1
vote
3
answers
511
views
What legal recourse do we have against Clearview AI's collection of our personal data and terrifying privacy policy?
TL;DR: how do we get the data this company collected on us without also giving them our government-issued IDs that they could potentially keep and tie to our "profiles"?
A week ago (January ...
- 137
1
vote
1
answer
164
views
In Australia is it illegal for a company to sell substandard security?
In Victoria (Australia), is it illegal for a company to sell substandard security?
Physical security (locks, access devices, keypasses, etc.)
Digital security (data encryption, login credentials, etc....
- 363
2
votes
1
answer
81
views
A technician injected malware into my computer without my knowledge
So this fixer that I asked to fix my busted front audio ports injected my PC with KMS-R@in in order to get rid of the activate windows watermark without my consent/knowledge, and it gave me Floxif.E ...
- 21
0
votes
1
answer
117
views
What can a victim company do when it's hard to differentiate between a Physical Pentest from a Criminal Physical Penetration
Red Team: Adversary Simulation. A team of penetration testers (a red team) is hired to legally break into a facility to test its security.
Since the job of Red Teaming and Penetration Testing, ...
0
votes
1
answer
114
views
Hiding order invoice information, GDPR
I have a software where we can show order invoice information by typing in the order number and buyer email. Now the thing is that I need to hide the sensitive order information like:
Name Surname
...
- 103
3
votes
0
answers
67
views
If i run a VPN service (paid) in the UK, do i by law have to keep logs?
So i want to start my own VPN company. Already have it setup and working etc but i'm based in United Kingdom (my servers are based in US though).
Because i am based in the UK, i know that law ...
- 31
3
votes
4
answers
468
views
Can a one-time-pad provide legal immunity - (make data inadmissible) -?
IMPORTANT NOTE:
This question is quite niche, I am not sure if this stack is the most relevant place, please inform me if there is a better place for it.
To explain the question:
I am asking if, a ...
- 43
2
votes
2
answers
11k
views
Can a neighbor point cameras at our backyard and the back of our house?
We live in the hills. And the way our neighborhood is designed is as you go up the hill, there will be a house below you, and a house above you (which are side by side to your property). The elevation ...
0
votes
1
answer
502
views
Is it required for a website/file-sharing site to log the IP of downloads?
MediaFire claims they keep no logs of who downloads or accesses your folders. Is this legal and if it's not true, could they get into any legal trouble from it?
The first image is there support ...
- 27
6
votes
1
answer
342
views
Can tech companies wishing to prevent secret backdoors discriminate in hiring against Australians?
Australia has passed a law which apparently requires tech workers to develop backdoors which can defeat a company's encryption and security features, without informing their employer, if ordered to do ...
- 4,838
0
votes
2
answers
254
views
Is employer liable for theft of personal property
If I bring say my headphones to my work, and they are stolen under the following circumstances, can I legally sue my employer and prevail, i.e. they have a duty to provide reasonable safety and ...
- 1,473
1
vote
2
answers
2k
views
Can the warranty on a laptop be transferred to a new owner?
I'm currently interested in selling my laptop so that I can use the money to help purchase one that better satisfies my needs. It's still in very good condition (no mark or dents) and has only been ...
- 11
1
vote
1
answer
2k
views
What does the law say about the cloning of RFID tags?
In the UK, what does the law say regarding the legality of cloning RFID tags that you own, but did not generate?
I'm particularly interested in cases like the Mifare Classic tags, where you may need ...
- 179
0
votes
1
answer
91
views
Passwords stolen from web portal
Recently a website which provides e-mail service, kind of like gmail, but a smaller Estonian version of it got breached. The hackers got access to my e-mail and therefore all the accounts I have ...
- 103