Questions tagged [security]

This tag is for questions about protection of tangible and intangible property. For financial instruments use the [securities] tag instead.

Filter by
Sorted by
Tagged with
34 votes
3 answers
11k views

Is it legal for Microsoft to install software without user approval?

On several occasions, Microsoft had misled their users to forcefully install updates or unwanted programs (like Windows 10 on Windows 7 here, here, here, and here), it also has forcefully installed ...
Chico3001's user avatar
  • 467
17 votes
2 answers
51k views

Is it legal to publish email that someone sent to me?

I'm not asking whether it is ethical - that would be a totally different question. I'm asking whether it is legal? In my book - in my way how I interpret consensual reality - once I press SEND ...
Silly mistakes in the past's user avatar
14 votes
3 answers
5k views

Has it been Legally Confirmed that A Website is not Liable if passwords stolen from it are used on other sites?

Security Experts the world around all agree that you should not reuse passwords across sites. This is simply a matter of best practice, and it protects you such that if your StackExchange password is ...
Catachan's user avatar
  • 283
11 votes
3 answers
7k views

Is it illegal to download passwords in bulk from the dark web to make a password checking tool to help people?

I remember some password managers like Google's would give me a warning about passwords that have been compromised. My question is this. How is Google or any company able to see that the password I ...
devin's user avatar
  • 227
11 votes
2 answers
2k views

May putting others at peril worsen the sentence?

Bob the Burglar specializes in fencing of stolen safety equipment (fire extinguishers, AEDs, etc.). One night, he breaks into a factory and steals the fire extinguishers and a fire hose. The theft is ...
PMF's user avatar
  • 5,573
9 votes
4 answers
7k views

Is it legal to sell security vulnerabilities you found while working with a company to that company?

Suppose you were working at a company for a few years, and during your time there you found a few computer security vulnerabilities that could be used by potential attackers. If you were to compile ...
Blue Herring's user avatar
9 votes
4 answers
4k views

Does The Crown have the authority to restrict the rights of a Royal family member?

An issue that somehow got lost in the recent Meghan and Harry allegations is the claim that Meghan had to give up her driver's license and keys. The only reference to legality of this action I found ...
Probably's user avatar
  • 161
9 votes
3 answers
448 views

Can I distribute instructions on how to extract a private key?

I asked this question over on the reverse engineering Stack Exchange but was told to post it here instead, even though I felt the question didn't really fit here. To recap, I'm writing some (open ...
Grayda's user avatar
  • 233
6 votes
1 answer
350 views

Can tech companies wishing to prevent secret backdoors discriminate in hiring against Australians?

Australia has passed a law which apparently requires tech workers to develop backdoors which can defeat a company's encryption and security features, without informing their employer, if ordered to do ...
WBT's user avatar
  • 4,868
4 votes
1 answer
299 views

Is it against law to implement security theaters?

In cybersecurity, we have a subject called "security theater" which means implementing a feature that only looks like a real security mechanism but doesn't do anything literally. Is it against the ...
Amirreza Nasiri's user avatar
4 votes
1 answer
382 views

Legality of secretly micro-chipping coins?

In the UK, we are less than a week away from the new £1 coin coming into circulation, which has been billed as 'the most high-tech coin in the world'. In an effort to reduce counterfeit, they have ...
John Smith Optional's user avatar
4 votes
1 answer
89 views

What legislation in the UK or EU requires online services and software companies to care about security of their products?

... And to what extent? E.g. what is the minimum an online service or software vendor are required to do to protect personal data? Let's not talk about PCI-DSS and payments here.
G33K's user avatar
  • 141
3 votes
4 answers
528 views

Can a one-time-pad provide legal immunity - (make data inadmissible) -?

IMPORTANT NOTE: This question is quite niche, I am not sure if this stack is the most relevant place, please inform me if there is a better place for it. To explain the question: I am asking if, a ...
Reality's user avatar
  • 43
3 votes
4 answers
183 views

What are the powers of a retail security guard compared to a police officer?

I watched a video about the legality of security guards doing random compulsory receipt and bag checks and it raised a question for me. So of course they can stop you in the act to prevent an imminent ...
Ethan's user avatar
  • 1,750
3 votes
1 answer
510 views

Can I add a deadlock to the front door of my unit?

I have recently bought a unit in a rough area. The front door to the apartment complex does not click shut properly so anyone from the general public can walk in. The door to my unit has one of those ...
Jerome's user avatar
  • 133
3 votes
1 answer
124 views

Does the EU "2-year guarantee" apply to security vulnerabilities?

As we all know, Android security is a mess. Google fixes security bugs, but it's a matter of luck whether your vendor or carrier decides to deploy the fix to your phone or tablet. In the European ...
Heinzi's user avatar
  • 353
3 votes
2 answers
9k views

When can a person be kicked out of private property?

I know the short answer is "whenever". So does this mean if someone paid cover to get in somewhere it would be legal for them to be kicked out the minute they step inside (and didn't do anything)? I ...
SamT's user avatar
  • 315
3 votes
1 answer
82 views

Can GDPR force public sector workers to fix an exploit they were notified of?

I live in some EU country and I rely on social security provided by the regional government. There is a website for residents who can sign up and claim benefits without physically visiting an office. ...
swq08570's user avatar
3 votes
1 answer
1k views

Landlord responsibility to replace locks after possible break-in

I just received word from my flatmate about a possible break-in. The building is secured by an outermost door, behind which lie doors to our flat and one other. These doors are also kept locked, but ...
Jack's user avatar
  • 133
3 votes
0 answers
48 views

Search engine data breaches, osint

Such a search engine that is deliberately created for the purpose of collecting open source information about security related incidents including data breaches and including a link to the source that ...
J.G.'s user avatar
  • 53
3 votes
0 answers
73 views

If i run a VPN service (paid) in the UK, do i by law have to keep logs?

So i want to start my own VPN company. Already have it setup and working etc but i'm based in United Kingdom (my servers are based in US though). Because i am based in the UK, i know that law ...
Bob's user avatar
  • 31
2 votes
2 answers
12k views

Can a neighbor point cameras at our backyard and the back of our house?

We live in the hills. And the way our neighborhood is designed is as you go up the hill, there will be a house below you, and a house above you (which are side by side to your property). The elevation ...
Outdated Computer Tech's user avatar
2 votes
2 answers
439 views

Is it legal for a university to tell police and security to not stop a battery on campus?

There is an evidence video showing how BLM protestors invaded a closed, planned and paid event. The security did nothing to help the speaker who was assaulted and battered. According to newspapers, ...
Amabile Scientius's user avatar
2 votes
1 answer
127 views

Is Crypto the same as any foreign currency?

A foreign currency exchange is nothing new. On the other hand cryptographic currency ("crypto" i.e. Bitcoin) is relatively new, as are their exchanges. https://abcnews.go.com/Business/...
gatorback's user avatar
  • 7,145
2 votes
1 answer
12k views

Is it legal for an employer to ask for SIN number over email?

I live in Ontario and recently my SIN Number changed. I notified my employer about the change and they asked me to email them the new sin number. I do not want to do so and I prefer to update my sin ...
Arashsoft's user avatar
  • 159
2 votes
1 answer
81 views

A technician injected malware into my computer without my knowledge

So this fixer that I asked to fix my busted front audio ports injected my PC with KMS-R@in in order to get rid of the activate windows watermark without my consent/knowledge, and it gave me Floxif.E ...
user28820's user avatar
2 votes
1 answer
98 views

Are security pentesting services and software legal in Hong Kong?

I am planning to open a HK company that will specialize in selling software that is meant to test one's IT defense as well as tools for penetration testers/red teams and similar. I've heard that some ...
John's user avatar
  • 21
2 votes
1 answer
264 views

What are the legal limitations of private security, regarding the use of physical force?

I am just wondering what are the legal limits to the extent to which private security can use physical force? For example, if I am in a private establishment (let's say, a shopping mall); a security ...
Time4Tea's user avatar
  • 141
2 votes
0 answers
207 views

Is it legal to covertly record (CCTV) a credit card pin number?

My local Supermarket (one of the top 3 in the UK) has modified its self-service checkout tills to include a CCTV camera about 1.5 meters vertically above the credit card reader pointing straight ...
ConanTheGerbil's user avatar
1 vote
1 answer
613 views

Are employers liable for employee safety if the workplace is declared a "gun free" zone?

If a company prohibits their employees from carrying a firearm while on their property, are they legally liable for the safety of their employees in an active shooter situation? If they refuse to ...
Zephyr's user avatar
  • 165
1 vote
1 answer
138 views

Decoding and publishing lock combination

Many combination locks can easily have their combinations decoded, even while the lock is shut. Suppose someone decoded the combination to a lock, wrote down the combination on a piece of paper, and ...
isaacg's user avatar
  • 181
1 vote
3 answers
528 views

What legal recourse do we have against Clearview AI's collection of our personal data and terrifying privacy policy?

TL;DR: how do we get the data this company collected on us without also giving them our government-issued IDs that they could potentially keep and tie to our "profiles"? A week ago (January ...
Chris Cirefice's user avatar
1 vote
1 answer
117 views

Video surveillance of dedicated laboratory rejected by single employee [Germany]

We have a dedicated laboratory with very expensive and sensitive equipment. When handled incorrectly, they can cause serious harm to the user or others in the laboratory. Our department consists of 5 ...
bam's user avatar
  • 111
1 vote
1 answer
129 views

Legal implications of unsecure bluetooth device

I have recently learned about a high-tech premium bed base that incorporates Bluetooth speakers, plus massage actuators and other features controllable via a smartphone app. Like many insecure ...
bobflux's user avatar
  • 111
1 vote
1 answer
163 views

Foreclosure on Deed of Trust securing a non-monetary obligation

When a deed of trust is made to secure the trustor's performance of a contractual obligation, how does the beneficiary go about foreclosing on it? When the obligation is just a monetary debt, the ...
Diogenes Creosote's user avatar
1 vote
2 answers
545 views

Legal consequences for crime in a non-extradition/hostile country?

We all know that Russia (and China,Iran,etc) refuses to extradite or punish cybercriminals, no matter how bad, as long as they don't attack their country. Is the reverse also true? In other words, ...
Daniel Grover's user avatar
1 vote
1 answer
189 views

Would a private business be liable for false warrant canary?

Suppose there is a private business whose business model is based on the trust of its customers that it has not been served with a secret government subpoena. That is, if the customers knew (or could ...
Greendrake's user avatar
  • 27.5k
1 vote
1 answer
296 views

Covid tracking app, forcing citizen to install it on insecure devices

Here's the hypothetical scenario, which in some countries might not be hypothetical after all: The app. Because of Covid-19, the government decides that some citizens must install an app on their ...
reed's user avatar
  • 1,838
1 vote
1 answer
168 views

In Australia is it illegal for a company to sell substandard security?

In Victoria (Australia), is it illegal for a company to sell substandard security? Physical security (locks, access devices, keypasses, etc.) Digital security (data encryption, login credentials, etc....
CJ Dennis's user avatar
  • 363
1 vote
1 answer
2k views

What does the law say about the cloning of RFID tags?

In the UK, what does the law say regarding the legality of cloning RFID tags that you own, but did not generate? I'm particularly interested in cases like the Mifare Classic tags, where you may need ...
VortixDev's user avatar
  • 179
1 vote
1 answer
176 views

Could an executive selling shares be considered a breach of fiduciary duty?

When major executives sell large numbers of shares, these sales are often very public. Generally, massive stock dumps are a sign that the executive feels the value of the company has peaked, and is ...
TheEnvironmentalist's user avatar
1 vote
2 answers
140 views

Universal 2 factor authentication (U2F) and pleading the fifth amendment

Back in 2013, WIRED stated that using fingerprint authentication on a phone may not prevent authorities (in the US at least) to gain access to one's phone without their agreement, whereas a memorized ...
ChrisR's user avatar
  • 111
1 vote
1 answer
50 views

What’s the internal DPO access level?

Since the internal Data Protection Officer (DPO) should be independent, he needs to have access to all company files. But should he have access to everything at all time, or can the company only allow ...
borisrorsvort's user avatar
1 vote
1 answer
298 views

Can the POTUS be impeached for endangering the security of the state?

Can the President of the United States be impeached for endangering the security of the state? "Endangering the security of the state" defined as leaking or telling sensitive information to other ...
Max's user avatar
  • 11
1 vote
0 answers
218 views

EIN number(s) for an Estate - Are two needed?

A person dies with money in individual brokerage accounts and a living revocable trust which has brokerage accounts. Given these facts, it is my claim that to settle the estate, you should get two EIN ...
Bob's user avatar
  • 1,163
1 vote
0 answers
79 views

Is it mandatory for companies to patch security vulnerabilities?

I read that the Cybersecurity and Infrastructure Security Agency (CISA) often issue orders to federal agencies to patch certain vulnerabilities. I was wondering if there are similar laws in France and ...
molik's user avatar
  • 11
1 vote
2 answers
437 views

Is it legal to use a drone to photograph a power plant?

Assume the drone is launched from from outside the property of the plant and does not fly over the property boundary of the plant. Location is the United States. (If laws by state differ then focus on ...
Legalq's user avatar
  • 19
1 vote
0 answers
64 views

Is transporting people into the countryside and leaving them a legal response for private security?

It is reported that three 16-year-olds were found without appropriate authorisation within the camping zone of Reading Festival, UK. Despite police telling festival organisers no further action would ...
Dave's user avatar
  • 827
1 vote
0 answers
160 views

Where in the world is decompilation and reverse engineering for security research legal?

Disclaimer: IANAL, the following is just my research up to now. I understand that in many jurisdictions, reverse engineering - and especially decompilation of software without explicit permission from ...
plonk's user avatar
  • 111
1 vote
0 answers
54 views

What are the rules and laws for guards and loss prevention in NYC during Covid-19 in NYC?

What are the rules and laws for guards and loss prevention in NYC during Covid-19 in NYC? I've read that security guards and loss prevention are not allowed to detain people, essentially false ...
KingsInnerSoul's user avatar