Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Counter-Attacking hackers? Is this really a good idea?
From: "DAN MORRILL" <dan_20407 () msn com>
Date: Mon, 08 Mar 2004 16:45:41 +0000

It is interesting that this has come up.

Currently there are a number of folks considering an idea called "active defense" which is basically hacking the hackers. There have been a number of legal viewpoints on this from basically no, to a "tresspass" issue where in tresspass it is ok to then do what you need to do. There is interest from my knowledge only in this from the city/state/federal level because of critical infrastructure. IE If the hacker is owning your 911 system, then you have to take them out to get control of the 911 system back.

Admitted, keeping up to date on patches (regardless of OS), keeping in the loop in general is a good thing. But there are interesting papers on "active defense", and this has been circulating for more than a year that I am aware of. I was not aware that someone had made any progress on a technology other than policy/procedure.

Thanks for the info, liked this thread.
r/
Dan



From: Joe Stewart <jstewart () lurhq com>
To: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] Counter-Attacking hackers? Is this really a good idea?
Date: Mon, 8 Mar 2004 10:05:35 -0500

On Monday 08 March 2004 9:06 am, Harlan Carvey wrote:
> Oddly enough, this *has* been discussed...at length.
> That doesn't mean that it's not worth discussing
> more...

Here's one of the better papers I have seen on the ethics of the
counter-hack. And I'm not just saying that because a friend wrote it :)

http://www.lurhq.com/ethics.html


-Joe

--
Joe Stewart, GCIH
Senior Security Researcher
LURHQ http://www.lurhq.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_________________________________________________________________
Frustrated with dial-up? Lightning-fast Internet access for as low as $29.95/month. http://click.atdmt.com/AVE/go/onm00200360ave/direct/01/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]