Re:Yahoo Hacked
by derekp7 on Monday October 06, 2014 @03:29PM
(#8417734)
Out of curiosity, wouldn't this also apply to the security researcher at erratasec.com that did an earlier survey? That scan logged into peoples boxes and executed a ping going out. Now obviously there isn't any damage, but what legal theory is protecting these legit security researchers?
[ Parent
| on HN ]
Really this a question that can only be answered by a judge.
The CFAA in the US might apply, section a.2.c bit is pretty broad: information from any protected computer). The wikipedia article is full of interesting bits and bobs: http://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act
Though whether or not a DA would be bothered with investigating and building a case is a different story (probably not, unless there were lots of complaints and/or "serious" complaints).
I strongly doubt anyone, even at the FBI, is tasked with finding hackers independent of any complaints.
Re:Yahoo Hacked
by thefreeman on Monday October 06, 2014 @03:47PM
(#8417824)
Nothing is protecting them legally, and many people mentioned similar things on those threads. However the fact that this guy sent himself reverse shells and actively exploited the servers makes it much more likely that someone will try to prosecute him.