Skip to Content.
Sympa Menu

internetworkers - RE: [internetworkers] ethical hacking

internetworkers AT lists.ibiblio.org

Subject: Internetworkers: http://www.ibiblio.org/internetworkers/

List archive

Chronological Thread  
  • From: "Shea Tisdale" <shea AT sheatisdale.com>
  • To: "'Internetworkers: http://www.ibiblio.org/internetworkers/'" <internetworkers AT lists.ibiblio.org>
  • Subject: RE: [internetworkers] ethical hacking
  • Date: Sun, 14 Sep 2003 16:08:44 -0400

Well, I guess it's your loss that you don't come to INW meetings. I
tend to think a healthy debate of issue such as these is beneficial.

You are correct that people can make mistakes. And he did.

Might I ask: If you aren't relying on the "colored media reports" then
where are you getting your information? And please be specific!

As to your other statements.

1. He had previously approached them trying to do computer security and
they declined. At that point he could taken one of a hundred different
courses that didn't involve breaking the law. Such as: he could have
written them an anonymous letter detailing how he noticed their access
point was open, but instead, he chose to break into their systems.

2. After breaking into the network, he broke into the computer systems
and copied confidential patient records.

3. Having gotten in to the patients records, he transmitted them to
third parties including other patients, the media, and other companies
that did business with the medical center. Oh, and BTW, how is that STD
you were treated for last year? And Dave, I don't know if anyone has
called you yet, but I've got some really strange news for you. You're
pregnant.

4. Having done all this he approached them again trying to get security
work for his business. He did all of this out of greed. He was trying
to make a buck for himself and his security consulting business.

He isn't a white hat and he isn't someone worthy of being praised. He's
an unethical person who tried to blackmail them into paying him. If he
was anything else, he would have found a legal way to help them.




-----Original Message-----
From: internetworkers-bounces AT lists.ibiblio.org
[mailto:internetworkers-bounces AT lists.ibiblio.org] On Behalf Of
brunkb AT ils.unc.edu
Sent: Saturday, September 13, 2003 12:35 PM
To: internetworkers AT lists.ibiblio.org
Subject: [internetworkers] ethical hacking

>i have to agree with Shea. not only was this guy NOT under contract
>with this clinic to do security scanning (which would have made it
>okay), he went the extra mile by exposing private data. a big NO-NO.

I guess this is why I don't bother with the INW meetings. Just another
bunch of beaten down statists. What did he steal? Who did he harm?
The
guy went to WRAL to warn everyone of the problem. I don't think he had
any
criminal intent and I wouldn't rely on any of the colored media reports
of
the incident. Whether or not he was trying to make a name for himself,
he
was being a good samaritan by trying to let them know that they are
radiating all kinds of confidential information in all directions. It's
a
"mistake" any one of you could make, which is why I posted it.

The people who should be arrested (or at least definitely FIRED) are the

idiots employed as network admins at the clinic! After all, it isn't
exactly rocket science to secure your wi-fi network. Incompetence.



Ben
---
Come and play at the InterNetWorkers Web site!
http://www.ibiblio.org/internetworkers/
You are currently subscribed to InterNetWorkers mailing list
To unsubscribe visit
http://lists.ibiblio.org/mailman/listinfo/internetworkers






Archive powered by MHonArc 2.6.24.

Top of Page