Ask Fyodor Your Network Security Questions
Fyodor is the driving force behind Insecure.org and the top-rated Nmap network exploration and security auditing tool. He's also involved in The Honeynet Project (and is a coauthor of the project's book, Honeynet: Revealing the Security Tools, Tactics, and Motives of the Blackhat Community). One question per post, please. We'll run Fyodor's answers to 10 of the highest-moderated questions as soon as he gets them back to us.
When you are hacking into a juvinille troll's computers and savagely rooting their boxes because they called you a wanker, are you thinking you would prefer to be put in federal or state prison?
Also, do you trust yourself after you have shown a willingness to take personal disagreements and break federal laws to persue vengance? Thanks.
Thank you for taking the time to answer questions from the Slashdot community. A while back a Slashbot named Sub Duex Ex Machina (aka Sdem) created an account in the persona of a very attractive Linux booth babe. Apparently at some point there was some serious flirtation between you and this booth babe.
Once the truth was revealed, you were understandably angry at Sdem, and you proceeded to hack into his poorly secured W2K box. Although you did nothing malicious to it, you did post screenshots of his various goings-on to your website.
My question for you is this: Although Sdem's actions were rather sleazy, I'm wondering how far you can go to retaliate. Do you have a moral and ethical priviledge to access another persons computer? If so, how far can you go in your actions once you've accessed it? While meer screenshots are fairly harmless, would you have been justified in deleting his hard drive?
Thanks!
C - A language that combines the speed of assembly with the ease of use of assembly.
After the whole sdem incident, I have a question.
After someone has proven that they are willing to abuse their 'skills' to settle a personal vendetta, why should anyone in their right mind trust them? To put it more generically, after some one in the 'security community' crosses over the line, how do they come back from that. Or do they?
I lurked in trolltalk at the time, and I remember the whole thing clearly. Speaking just for myself, if I were to make the decisions about which tools were to be used in my company, nmap would be on my blacklist.