http://www.techworld.com/security/news/index.cfm?newsID=6990&pagtype=all - (broken link) Security professionals at risk from hacking laws - by Jeremy Kirk
"Company networks could be made less secure if projected computer crime legislation is introduced in several European countries. According to several security professionals, that would be the unintended consequence of anti-hacking laws.
The UK and Germany are among the countries that are considering revisions to their computer crime laws in line with the 2001 Convention on Cybercrime, a Europe-wide treaty, and with a similar European Union measure passed in early 2005."
This is a worrying possible change in the law for the UK and Germany, if the politicians get it wrong with the changes to the Computer Misuse Act as discussed in this article then it could become dodgy for security testers. The bigger implications suggested in this article is that it would effectively become illegal to own hacking tools. Would that mean that it would become illegal to disclose exploits and security holes? afterall they could be used to commit an offense! if the laws change how would anyone legally check their systems for secure configurations or have a penetration test performed by third parties if te tools used are illegal or the information pertaining to potential exploits is also made illegal? -
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "Ethical hacking in Oracle"] [Next entry: "Oracle promises tighter security for SOAs"]
September 2006
- Nice post on an undocumented function - Reverse - 09/01/2006 by 09/01/2006
- Interesting post about protecting PL/SQL - 09/03/2006 by 09/03/2006
- I will be speaking at the IT Underground in Rome - 09/04/2006 by 09/04/2006
- Nice idea on audition using trace events - 09/05/2006 by 09/05/2006
- Pete Finnigan podcast interview on Oracle security - 09/07/2006 by 09/07/2006
- Nice network trace tool - 09/08/2006 by 09/08/2006
- Identity theft is becoming main stream - 09/09/2006 by 09/09/2006
- IT Underground conference in Rome cancelled at last minute - 09/12/2006 by 09/12/2006
- Cache missing for fun and profit - 09/15/2006 by 09/15/2006
- Pete Finnigan at UKOUG 2006 - 09/18/2006 by 09/18/2006
- Exploit screencasts - 09/19/2006 by 09/19/2006
- Two years of Oracle Security blogging and still going strong - 09/20/2006 by 09/20/2006
- Only 6% of identity theft can be attributed to data theft. - 09/22/2006 by 09/22/2006
- Eddie on another undocumented function - 09/25/2006 by 09/25/2006
- Security Inside - 09/28/2006 by 09/28/2006
- Security professionals at risk from hacking laws - 09/29/2006 by 09/29/2006
Archives
Syndication
Powered by gm-rss 2.0.0
