From: bart@packetjunkie.com
Date: Thu May 11 2006 - 07:02:42 EDT
While I would love to see nothing more than for the public to recognize
that what this guy did was most likely of good intention, you have to
sit back and look at the big picture.
Testing an exploit on a University's server without explicit consent
from the University is illegal. Plain and simple. I don't care what
your intentions are. That is why we have Rules of Engagements and Get
Out of Jail Free cards in this business. For this guy to ignore those
rules, that tells me he is either not a professional, or his intentions
may have been tainted by his curiosity.
As a professional, one should understand the legalities of doing things
like this. I know personally, I would never try to do anything without
consent, especially after reading such stories as this.
This is probably the result of some overzealous incident response person
at the University working as an intern and not knowing fully what took
place. But, the fact of the matter is, this gentleman did not handle
himself the way he should have.
------------------------------------------------------------------------------
This List Sponsored by: Cenzic
Concerned about Web Application Security?
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's
Choice Award from eWeek. As attacks through web applications continue to rise,
you need to proactively protect your applications from hackers. Cenzic has the
most comprehensive solutions to meet your application security penetration
testing and vulnerability management needs. You have an option to go with a
managed service (Cenzic ClickToSecure) or an enterprise software
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can
help you: http://www.cenzic.com/news_events/wpappsec.php
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request@cenzic.com for details.
------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:56 EDT