Questions tagged [security]

This tag is for questions about protection of tangible and intangible property. For financial instruments use the [securities] tag instead.

Filter by
Sorted by
Tagged with
1
vote
1answer
87 views

Would a private business be liable for false warrant canary?

Suppose there is a private business whose business model is based on the trust of its customers that it has not been served with a secret government subpoena. That is, if the customers knew (or could ...
2
votes
1answer
96 views

Can I add a deadlock to the front door of my unit?

I have recently bought a unit in a rough area. The front door to the apartment complex does not click shut properly so anyone from the general public can walk in. The door to my unit has one of those ...
1
vote
0answers
55 views

Is transporting people into the countryside and leaving them a legal response for private security?

It is reported that three 16-year-olds were found without appropriate authorisation within the camping zone of Reading Festival, UK. Despite police telling festival organisers no further action would ...
15
votes
4answers
4k views

Has it been Legally Confirmed that A Website is not Liable if passwords stolen from it are used on other sites?

Security Experts the world around all agree that you should not reuse passwords across sites. This is simply a matter of best practice, and it protects you such that if your StackExchange password is ...
0
votes
1answer
50 views

What legal recourse does Huawei have to have the U.S. remove it from their blacklist?

https://www.ft.com/content/978f169a-8175-11e9-b592-5fe435b57a3b China has lashed out at the US over its blacklisting of Huawei, accusing it of abusing national security exceptions to global trade ...
1
vote
1answer
34 views

Foreclosure on Deed of Trust securing a non-monetary obligation

When a deed of trust is made to secure the trustor's performance of a contractual obligation, how does the beneficiary go about foreclosing on it? When the obligation is just a monetary debt, the ...
9
votes
4answers
4k views

Does The Crown have the authority to restrict the rights of a Royal family member?

An issue that somehow got lost in the recent Meghan and Harry allegations is the claim that Meghan had to give up her driver's license and keys. The only reference to legality of this action I found ...
0
votes
1answer
29 views

Howey Test for Real Estate Business vs. Farm Land?

I have no education in legal matters and was only thinking about some investments. I stumbled on something called the Howey Test and tried to read a little about it. I still don't understand it, and ...
1
vote
0answers
73 views

Is it legal to covertly record (CCTV) a credit card pin number?

My local Supermarket (one of the top 3 in the UK) has modified its self-service checkout tills to include a CCTV camera about 1.5 meters vertically above the credit card reader pointing straight ...
1
vote
0answers
54 views

Where in the world is decompilation and reverse engineering for security research legal?

Disclaimer: IANAL, the following is just my research up to now. I understand that in many jurisdictions, reverse engineering - and especially decompilation of software without explicit permission from ...
1
vote
0answers
34 views

What are the rules and laws for guards and loss prevention in NYC during Covid-19 in NYC?

What are the rules and laws for guards and loss prevention in NYC during Covid-19 in NYC? I've read that security guards and loss prevention are not allowed to detain people, essentially false ...
31
votes
3answers
10k views

Is it legal for Microsoft to install software without user approval?

On several occasions, Microsoft had misled their users to forcefully install updates or unwanted programs (like Windows 10 on Windows 7 here, here, here, and here), it also has forcefully installed ...
1
vote
1answer
95 views

Video surveillance of dedicated laboratory rejected by single employee [Germany]

We have a dedicated laboratory with very expensive and sensitive equipment. When handled incorrectly, they can cause serious harm to the user or others in the laboratory. Our department consists of 5 ...
0
votes
0answers
90 views

Is it illegal to refuse to fix a hacked website?

Suppose there's a website or a server that has been hacked. There is no personal data stored anywhere, so there hasn't been a real data breach, because basically there's no valuable data to steal at ...
-1
votes
1answer
737 views

Storing Bank Account Number and Sort-code in the Database [closed]

I need to store UK Bank Account Number and Sort Code in my MYSQL database to send the users payments. The PHP/Laravel site will be hosted on AWS with SSL & off-course the Account Number and Sort ...
-1
votes
2answers
180 views

The right to hide one's password

It's well known that you should never reveal your password to anyone -- including your boss, your sysadmin, etc. My friend's former boss has sued her, demanding (among other things) the password to ...
0
votes
1answer
60 views

Is any attempt to access restricted information on the web considered an attack?

This article reports that a person who "gained access to the admin portal by simply altering the website’s URL" is now under investigation by FBI for "exploiting personal information". I want to ...
0
votes
1answer
2k views

Does "insider trading" apply to private companies?

In America, "pitching" to investors is how capital is often raised. What I don't understand is why this is legal: You supply private information to the investor, who decides to buy stock in your ...
4
votes
1answer
287 views

Is it against law to implement security theaters?

In cybersecurity, we have a subject called "security theater" which means implementing a feature that only looks like a real security mechanism but doesn't do anything literally. Is it against the ...
1
vote
1answer
228 views

Covid tracking app, forcing citizen to install it on insecure devices

Here's the hypothetical scenario, which in some countries might not be hypothetical after all: The app. Because of Covid-19, the government decides that some citizens must install an app on their ...
0
votes
2answers
276 views

What legal recourse do we have against Clearview AI's collection of our personal data and terrifying privacy policy?

TL;DR: how do we get the data this company collected on us without also giving them our government-issued IDs that they could potentially keep and tie to our "profiles"? A week ago (January ...
1
vote
1answer
133 views

In Australia is it illegal for a company to sell substandard security?

In Victoria (Australia), is it illegal for a company to sell substandard security? Physical security (locks, access devices, keypasses, etc.) Digital security (data encryption, login credentials, etc....
2
votes
1answer
71 views

A technician injected malware into my computer without my knowledge

So this fixer that I asked to fix my busted front audio ports injected my PC with KMS-R@in in order to get rid of the activate windows watermark without my consent/knowledge, and it gave me Floxif.E ...
0
votes
1answer
85 views

What can a victim company do when it's hard to differentiate between a Physical Pentest from a Criminal Physical Penetration

Red Team: Adversary Simulation. A team of penetration testers (a red team) is hired to legally break into a facility to test its security. Since the job of Red Teaming and Penetration Testing, ...
0
votes
1answer
68 views

Hiding order invoice information, GDPR

I have a software where we can show order invoice information by typing in the order number and buyer email. Now the thing is that I need to hide the sensitive order information like: Name Surname ...
3
votes
0answers
51 views

If i run a VPN service (paid) in the UK, do i by law have to keep logs?

So i want to start my own VPN company. Already have it setup and working etc but i'm based in United Kingdom (my servers are based in US though). Because i am based in the UK, i know that law ...
1
vote
4answers
361 views

Can a one-time-pad provide legal immunity - (make data inadmissible) -?

IMPORTANT NOTE: This question is quite niche, I am not sure if this stack is the most relevant place, please inform me if there is a better place for it. To explain the question: I am asking if, a ...
2
votes
2answers
7k views

Can a neighbor point cameras at our backyard and the back of our house?

We live in the hills. And the way our neighborhood is designed is as you go up the hill, there will be a house below you, and a house above you (which are side by side to your property). The elevation ...
0
votes
1answer
227 views

Is it required for a website/file-sharing site to log the IP of downloads?

MediaFire claims they keep no logs of who downloads or accesses your folders. Is this legal and if it's not true, could they get into any legal trouble from it? The first image is there support ...
6
votes
1answer
182 views

Can tech companies wishing to prevent secret backdoors discriminate in hiring against Australians?

Australia has passed a law which apparently requires tech workers to develop backdoors which can defeat a company's encryption and security features, without informing their employer, if ordered to do ...
0
votes
2answers
143 views

Is employer liable for theft of personal property

If I bring say my headphones to my work, and they are stolen under the following circumstances, can I legally sue my employer and prevail, i.e. they have a duty to provide reasonable safety and ...
1
vote
2answers
1k views

Can the warranty on a laptop be transferred to a new owner?

I'm currently interested in selling my laptop so that I can use the money to help purchase one that better satisfies my needs. It's still in very good condition (no mark or dents) and has only been ...
1
vote
1answer
552 views

What does the law say about the cloning of RFID tags?

In the UK, what does the law say regarding the legality of cloning RFID tags that you own, but did not generate? I'm particularly interested in cases like the Mifare Classic tags, where you may need ...
0
votes
1answer
54 views

Passwords stolen from web portal

Recently a website which provides e-mail service, kind of like gmail, but a smaller Estonian version of it got breached. The hackers got access to my e-mail and therefore all the accounts I have ...
0
votes
1answer
52 views

Legal Reverse Engineering for Security Review in US for Korean Provided Module

My company has received a command-line stand-alone (ELF) executable from a Korean company that provides a service for validating Korean users. It took them a few tries to get us a version that runs on ...
1
vote
1answer
63 views

Are security pentesting services and software legal in Hong Kong?

I am planning to open a HK company that will specialize in selling software that is meant to test one's IT defense as well as tools for penetration testers/red teams and similar. I've heard that some ...
2
votes
1answer
163 views

What are the legal limitations of private security, regarding the use of physical force?

I am just wondering what are the legal limits to the extent to which private security can use physical force? For example, if I am in a private establishment (let's say, a shopping mall); a security ...
1
vote
1answer
522 views

Are employers liable for employee safety if the workplace is declared a "gun free" zone?

If a company prohibits their employees from carrying a firearm while on their property, are they legally liable for the safety of their employees in an active shooter situation? If they refuse to ...
1
vote
1answer
139 views

Could an executive selling shares be considered a breach of fiduciary duty?

When major executives sell large numbers of shares, these sales are often very public. Generally, massive stock dumps are a sign that the executive feels the value of the company has peaked, and is ...
1
vote
2answers
477 views

Legal consequences for crime in a non-extradition/hostile country?

We all know that Russia (and China,Iran,etc) refuses to extradite or punish cybercriminals, no matter how bad, as long as they don't attack their country. Is the reverse also true? In other words, ...
2
votes
1answer
5k views

Is it legal for an employer to ask for SIN number over email?

I live in Ontario and recently my SIN Number changed. I notified my employer about the change and they asked me to email them the new sin number. I do not want to do so and I prefer to update my sin ...
0
votes
1answer
152 views

Use of public DNS servers for private DDOS stress test

I read on this Cloudflare's blog post that hackers use misconfigured DNS servers to amplify their attacks. The principle is to flood the DNS with queries, and "ask" the DNS to forward their answer to ...
3
votes
1answer
99 views

Does the EU "2-year guarantee" apply to security vulnerabilities?

As we all know, Android security is a mess. Google fixes security bugs, but it's a matter of luck whether your vendor or carrier decides to deploy the fix to your phone or tablet. In the European ...
1
vote
1answer
247 views

Can the POTUS be impeached for endangering the security of the state?

Can the President of the United States be impeached for endangering the security of the state? "Endangering the security of the state" defined as leaking or telling sensitive information to other ...
0
votes
1answer
69 views

Amazon account security breach

I have received an email from Amazon reporting a security breach on my account (which I do not believe it is genuine and it happens often because of my dynamic IP). I have requested further details (...
4
votes
1answer
238 views

Legality of secretly micro-chipping coins?

In the UK, we are less than a week away from the new £1 coin coming into circulation, which has been billed as 'the most high-tech coin in the world'. In an effort to reduce counterfeit, they have ...
1
vote
2answers
108 views

Universal 2 factor authentication (U2F) and pleading the fifth amendment

Back in 2013, WIRED stated that using fingerprint authentication on a phone may not prevent authorities (in the US at least) to gain access to one's phone without their agreement, whereas a memorized ...
-2
votes
2answers
180 views

Are immigration officers who grant visas to a convicted terrorist guilty of a crime?

I'm not a lawyer or an expert on laws, but from what I know it is the visa officers' first and foremost responsibility to screen applicants/referrals and filter out potentially dangerous ones. They ...
3
votes
1answer
854 views

Landlord responsibility to replace locks after possible break-in

I just received word from my flatmate about a possible break-in. The building is secured by an outermost door, behind which lie doors to our flat and one other. These doors are also kept locked, but ...
-2
votes
3answers
409 views

Sue a university for armed robbery

My friend was robbed the other day on university campus at night. He lost his laptop and his mobile phone. So, all of his work is now gone. He is having a mental breakdown at the moment. So, I want ...