Oh no, another Research Paper, can you help?

Have you been caught "hacking" -- even though you were trying to do the "right thing?"


Howdy Everyone,

I'm finally writing that LAST (CapStone) paper for school. It needs to be on a controversial subject, with opposing points of view, plenty of research material available, and able to be applied to an ethical or moral theory (Kant, Aristotle, relativism, absolutism, etc.).

So, I'm doing a twist on a tired and old topic: Ethical Hacking. In that I believe if someone finds a security hole someplace, they are somewhat obligated to report it -- AND should NOT be put in jail for it! Or, they should not be threatened when they point out idiodicy like holding down the shift key to bypasses a lame copyright scheme.

I'm interested in some interviews, personal stories, testimonies, referrals (blogs, home pages, etc.) that will help with the insider view.

I'm not interested in stories of people finding issues, then extorting the company; but those stories of where someone stumbled across something, but either didn’t report it out of fear – or did report it and got into legal trouble. That’s my angle, the guy (or gal) that isn’t necessarily out looking for stuff, but finds it nonetheless, and wants to tell someone about it so it can be fixed.

Please email me off-line: [email protected] if you’re interested.

Thanks!
Mike

well google is always good friend and helping find what u looking for but here are some sites that most people know and they help too......

www.microsoft.com
www.symantec.com

but there is lots of stuff on this site that can help and find faster.....

ok

peace

WTF, Mate! That had absolutely nothing to do with the topic of the thread!

honestly hodzic, for the love of donuts, what in the name of god could you find out about ethical hacking on microsofts site? and symantec's too? better start posting better or this account will turn out like your last one, asmir....


slick

:) damn people i was joking around...... damn people chill......

peace

Sorry, Bro! Just thought ya were posting nonsense to be an a$$. My bad!

its aight........

Interesting. Well If i was you i'd get my hands on some books called "Hacker's Challenge". They deal with real-life scenarios of attacks on different corporations. They show in detail the way the attack occured and how it was dealt with by the admins. Really interesting and usefull books to read. They might give you more insight into hacking, perhaps give u some ideas to add to your paper.

Good Luck,

:D


BTW: Please, do not put titles to your threads that have nothing to do with the thread itself. They piss people off and you wont have a very nice experience here at AO :D

I am not sure if this is quite what you are looking for:

http://www.grc.com

Gibson Research Corporation, if the link works OK.

Read the account of the denial of service attack on Gibson's site. He used what I would consider hacking techniques to defend his site? like finding the private chat room where one of the guys was manipulating his bots?

It is an interesting read, and relates to a business rather than an individual (although GRC does seem to be a bit of a one man band from the philosophy viewpoint :) )

Hope this helps

Haven`t we discussed this many times already? there should be quuite a few threads on this subject, so I`m not sure if that is a 'twist' on an old topic, rather , that is in fact the old topic.

A book called "Stealing the Network: How to Own the Box" published by Syngress Press is filled with about a dozed fictional accounts of network intrusion, and some taken from the black hat, some from the white hat sides. The stories are written by security professionals, sysadmins, and hackers, and although fictional, there are some sailent discussion points you can draw from them. It may help guide your topic.

Besides, it's a fun read.

l00p

What may help you out in this regard would be to talk about previous prosicutions of hackers that did not meen to cause malicous harm and those who did. a good search in good with a string such as hacking + "ethical issues" brings up numerous wepages with many different opinions many from universities and individuals alike. It will just be a matter of finding the articles that suite the direction in which you would like your paper to go.
also 2600.com is a good starting point.

Try www.underground-book.com There's a version of the book available as a free download, and it's full of stories about the sort of activities you want information on. The best part is that all the stories are supposedly true...

Mykol,

I have thought a bit more and would suggest that you play down the actual "legal"side as the law is an ass and frequently gets it wrong.

A guy in th UK got away with it recently..........a member of a self-styled elite hacker group......how?, because he had a trojan on his computer so "It was not I, it was the cat wot done it" as we say over here :)

/ commercial break

It wasn't my tomcat either..............he has been far too busy writing Nimda IV in pure assembler

:D
/end commercial break

So here we have this elite hacker allowing a backdoor on his own machine? oh yeah? He was as guilty as hell, but the lawyers got him off (and I would have given him an extra ten for his arrogant expression and lousy haircut). Simply because there appeared to be reasonable doubt?

If I were you I would stick to the ethics and morality bit and leave actual court cases in the background.

As suggested, there are one or two cases of people being "accused" on this site.........look in General Chit Chat and Newbie Security Questions.

Cheers

I just recently read a pretty good book, Cybershock, which has a few chapters on the ethics, and such.

Quote:

---

Originally posted here by 576869746568617
Sorry, Bro! Just thought ya were posting nonsense to be an a$$. My bad!

---

Just remember, When you assume you make an ASS out of U and ME.