Nmap Announce mailing list archives

RE: legality of port-mapping


From: "Chris St. Clair" <chris_stclair () hotmail com>
Date: Mon, 01 Mar 1999 13:03:41 PST

The fact, however, is that you are contacting services which you >don't 
have authorization for.  You *are* connecting to those >services, and 
you will cause the CPU in question to consume cycles >dealing with you 
and possibly even fork().  Under "normal" "bug-free" >circumstances this 
does not cause any harm, *however* you are using a >resource on that 
machine.  I think that legally the argument could >very easily be made 
that you are *using* resources that you have no >rights to.

So, given the previous statement on unauthorized use of resources (cpu 
cycles), a ping of a system would be just as illegal as a port scan?
Is anyone arresting Cheswick?
GTFOH.

You can't know that "Unauthorized access to this system is restricted" 
until after you open a connection and get the banner.

If you stick a box on a public network (never forget it's a public 
network), with ports available to anyone (no ACLs), you might as well be 
operating a store on Main St. USA with your front door propped open. 
Sure, you can reserve the right to refuse anyone service, but it's not 
illegal for them to walk in.

Now, if you want to lock your door, only give certain people that key, 
and install an alarm system that's great. You actually have some 
security now (no, it's not free sorry if you can't afford it).


______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com


Current thread: