Re: Draft Convention on Cybercrime

[Tyler Allison <allison () mail arc nasa gov>]

>         I, for one, maintain a defaced Web site archive.  I run an OS
> fingerprint to deterine the OS for inclusion within the archive.  Should
> I be thrown in jail for this?

You make it into our "radar" system with your scan and you will at least
get a nasty email from our security group. At the minimum it would get
your IP address (if not the entire class C) blocked at our border, usually
the ISP closes the account that did the scan.

That's just the way the fed works. It's not like the fed lets you walk around
and jiggle the handle on the doors in federal buildings. You should expect
some flack when you "scan" a .gov or .mil site. If you dont mind the flack
keep on scanning ;)

Personally we use NMAP and other scanning tools internally all the time.

-Tyler
Security putz at NASA Ames