Home page logo

pen-test logo Penetration Testing mailing list archives

Re: Pentester Convicted
From: bart () packetjunkie com
Date: Thu, 11 May 2006 04:02:42 -0700

While I would love to see nothing more than for the public to recognize
that what this guy did was most likely of good intention, you have to
sit back and look at the big picture.

Testing an exploit on a University's server without explicit consent
from the University is illegal.  Plain and simple.  I don't care what
your intentions are.  That is why we have Rules of Engagements and Get
Out of Jail Free cards in this business.  For this guy to ignore those
rules, that tells me he is either not a professional, or his intentions
may have been tainted by his curiosity.

As a professional, one should understand the legalities of doing things
like this.  I know personally, I would never try to do anything without
consent, especially after reading such stories as this.

This is probably the result of some overzealous incident response person
at the University working as an intern and not knowing fully what took
place.  But, the fact of the matter is, this gentleman did not handle
himself the way he should have.

This List Sponsored by: Cenzic

Concerned about Web Application Security? 
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's 
Choice Award from eWeek. As attacks through web applications continue to rise, 
you need to proactively protect your applications from hackers. Cenzic has the 
most comprehensive solutions to meet your application security penetration 
testing and vulnerability management needs. You have an option to go with a 
managed service (Cenzic ClickToSecure) or an enterprise software 
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can 
help you: http://www.cenzic.com/news_events/wpappsec.php 
And, now for a limited time we can do a FREE audit for you to confirm your 
results from other product. Contact us at request () cenzic com for details.

  By Date           By Thread  

Current thread:
  • Re: Pentester Convicted bart (May 11)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]