Arrest of WannaCry researcher sends chill through security community

Re:Arrest of WannaCry researcher sends chill through securit... by tptacek on Friday August 04, 2017 @04:27PM (#14931940)

That's not what he's saying. He's saying that independent of how easy it is to do, it's also something that professional security people do routinely. And he's right. But that's not the basis of the charge against Aurenheimer.

[ Parent | on HN ]

Re:Arrest of WannaCry researcher sends chill through securit... by wildmusings on Friday August 04, 2017 @04:27PM (#14931948)

>That's not what he's saying. He's saying that independent of how easy it is to do, it's also something that professional security people do routinely. And he's right. But that's not the basis of the charge against Aurenheimer.

It's certainly part of what he said:

>but it also wasn’t exactly hardcore hacking; IIRC he just changed a URL parameter.

The difficulty of carrying out an action is completely irrelevant to its legality.

[ Parent | on HN ]

Re:Arrest of WannaCry researcher sends chill through securit... by Ilurkyeahsowat on Friday August 04, 2017 @06:16PM (#14932825)

Even if he did attempt to sell the data, is it illegal to sell data that is freely available on the internet (honest question, I couldnt find a solid answer via googling)? It might be against TOS.

[ Parent | on HN ]

Re:Arrest of WannaCry researcher sends chill through securit... by tptacek on Friday August 04, 2017 @04:28PM (#14931960)

I agree with you that the "hardcoreness" of what Aurenheimer did is a red herring.

[ Parent | on HN ]