[NTLUG:Discuss] OT: What constitutes unauthorized access?

[Richard Geoffrion]

----- Original Message -----
From: "David" <david at hayes-family.org>
To: "NTLUG Discussion List" <discuss at ntlug.org>
Sent: Sunday, June 22, 2003 11:39 AM
Subject: Re: [NTLUG:Discuss] OT: What constitutes unauthorized access?
> You're focused on the front door.  Trespass has already occured, or
> not, by leaving the sidewalk and walking up to the door.
>
> > However, it's not clear in the world of the Internet where those
boundaries
> > lie.
> >
> >   1) If the computer responds to an http request for a page called
> >   'index.html',
> >      then there is clearly an expectation that this is an OK thing to
do.
> >
> >   2) Repeatedly trying random ssh passwords in order to gain root access
> >      clearly is NOT an OK thing to do.

OK..what about the case where spam is sent to an email server.  An ARIN
lookup shows it to be from a dialup segment...  A quick services-nmap scan
is made of that IP revealing that 5900 and 5800 (amongst other things) is
open.   A just for grins VNC connection is initiated to 5900 and
lo-and-behold...some bed and breakfast has their reservation system open for
all the world to see, hypothetically speaking of course.

So what does a good net'citizen do??  Leave them to their problems???  or
pop open a NOTEPAD in Windows and type in a friendly message stating that
spam is being sent from the IP address associated with their IP address,
that their computer is wide-open for use on the internet without any
passwords and they need to have a security review done on their system.

So...would connecting to the open/unpassworded VNC port constitute terrorism
and hacking?  Would notifying the clueless operator of that computer that
they are vulnerable constitue terrorism and hacking?? Just what *would* be a
felony?  Where does good and harmless INTENT come into play?  Is it illegal
these days to HELP someone??

It sort of sounds like someone walking into an unlocked business after-hours
to use their phone to call the owner to tell him that his business door is
unlocked.

'Oh for the return of the days of Opie and Aunt Bea!'

Damn the bad people in the world that spoil things!