I agree with what Benjamin wrote.
I'd just like to add the lesson we all better have learned from Randal
Schwartz's horrible traumas: CYA. In the case of running something like nmap
against a server, the way I'd read that is, if it's not your server, then
document, in writing, your intention to the management that's responsible for
the server, before you run the scan, or else Don't Get Caught. If the target
doesn't have deep pockets, you might be unlikely to be persecuted to the full
potential of loosely-written laws, but who needs to risk it?
-Bennett
Received on Feb 23 1999