Post #3134772
2024-01-18 12:50 UTC
Replies (3)
-
@husjon@fosstodon.org 2024-01-18 12:52
@thisismissem@hachyderm.io @WPalant@infosec.exchange you could also twist it a bit more and say you left your key under your door mat, not even explicitly giving them the key.
-
@WPalant@infosec.exchange 2024-01-18 12:55
@thisismissem@hachyderm.io Difficult. If we spin this analogy further: you gave me your key for a specific purpose (e.g. pizza delivery while you were out), after which I returned it to you. You didn’t allow me to make a copy of this key and use it later to rearrange the furniture for example. Abusing hardcoded credentials can definitely constitute hacking and cause perfectly justified criminal charges. But intention and damage caused definitely need to go into the equation, not merely “circumvention of protection mechanisms.”
-
@JRFreeman@stranger.social 2024-01-18 21:57
@thisismissem@hachyderm.io @WPalant@infosec.exchange It's more like someone found a key hidden in a very obvious place. Like, if you call the plumber because of a leak in your yard, he can't find it, so he let's himself in with a key under the mat and finds the problem in your house. He was doing the job you hired him to do, but you might be a little uncomfortable learning he's taken liberties with your locks in order to do so. Now, whether that discomfort means a crime has occurred is another matter.