Security Incidents: Re: Odd identd behavior

[Tomasz Papszun <tomek-incid () lodz tpsa pl>]

On Wed, 16 Nov 2005 at 10:31:22 -0500, Manuel Lanctot wrote:
> Ansgar -59cobalt- Wiechers wrote:
>
> > Very doubtful. I'm not aware of any law that forbids even portscans,
> >
> > much less network troubleshooting or the use of tools like nmap in
> > general.
> I can't find the related articles but I remember reading something about 
> a man who was arrested after portscanning a website because he donated 
> for a relief fund (after Katrina) and suspected it was a scam. I don't 
> remember if he was indeed charged but he was at least arrested, which is 
> pretty scary.
And he (Daniel Cuthbert) did _not_ scanned the website, just tried a
directory traversal (entering "higher" directories) by putting ../../../
in his browser URL field.

http://taint.org/index.php?tag=ids
http://www.samizdata.net/blog/archives/008118.html
http://news.zdnet.co.uk/internet/security/0,39020375,39226548,00.htm
http://www.theregister.co.uk/2005/10/11/tsunami_hacker_followup/
http://it.slashdot.org/article.pl?sid=05/10/07/1532241&tid=172
http://it.slashdot.org/article.pl?sid=05/11/11/228241&tid=167&tid=121&tid=223&tid=172&tid=220

-- 
 Tomasz Papszun    SysAdm @ TP S.A. Lodz, Poland    | And it's only
 tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros.
 tomek at clamav.net   http://www.ClamAV.net/   A GPL virus scanner