5 ms·

If you've got root RCE can't you use it to "close" the implant and make sure noone gets hurt like some have been doing to counteract IoT botnets? How is leaving

If you've got root RCE can't you use it to "close" the implant and make sure noone gets hurt like some have been doing to counteract IoT botnets? How is leaving a gaping hole better? EDIT: To those saying it would be a legal liability risk, isn't it a criminal offense in your jurisdiction if you know about a danger to someone else, not to do something about it if only warn them? (non-assistance à personne en danger, in french law) Or couldn't you partner with a security research lab with better legal counsel?

waihtis 5y ago
depends if you want to take the risk of being prosecuted for illegitimately accessing multiple computer resources
_8j50 5y ago
That's illegal. You can't break into someones house to kick out a burglar. The people that have counteracted and kicked out bots from botnets broke laws in several countries (fed crime in US), which is why they don't publicize their identity (even if they did, prosecutors may not come after them). You need the consent of the system owner to help them with the intrusion, otherwise anyone can hack into someone else's computer and say they were there to get rid of some malware.
user-the-name 5y ago
You would be taking on a lot liability and responsibility if you did that.
jdavis703 5y ago
> isn't it a criminal offense in your jurisdiction if you know about a danger to someone else, not to do something about it if only warn them? In America where the NSA is located? I’ve never written “lol” on this site, but this time called for it. Since you’re in France I’ll now explain nicely. Not even our cops have any legal requirement to intervene: both when there’s an active crime or even if they see another cop committing a crime in the line of duty (e.g. excessive force). And civilians (in the American press both military and “deputized” police are called non-civilian) will frequently ignore all manner of crimes, from shootouts to a person overdosing on drugs.
- taway9001 5y ago
  US LEO here. This is not exactly correct. At least this bit: "both when there’s an active crime or even if they see another cop committing a crime in the line of duty (e.g. excessive force)." Cops generally have no duty to protect anybody. That's not their job, no matter what the decals on the squad say. But if you're on duty, and you witness a crime being committed right in front of you, especially if it's something as serious as a violent felony, and literally ignore it, and anybody finds out, you'll at least probably be fired. Depending on the jurisdiction and totality of circumstances, it may also be a crime.
  - edoceo 5y ago
    Doesn't work like that in Seattle. Police actively ignore drug use in the (clean) parks, even with complaining witness. Police point and laugh at homeless fighting each other. Source: my eyes.
    - orangepurple 5y ago
      That behavior comes from the police chief and district attorney explicitly telling street level cops what they can't police.
      - edoceo 5y ago
        I know where it comes from. And regardless of management, my observations are counter to the parent comment, claiming an LEO would be fired for ignoring violent crime.
  - Abekkus 5y ago
    "Protect and serve" (the incumbent power structures, not arbitrary citizens)
  - leoqa 5y ago
    Off topic, but I’ve been curious about moving from tech to working in LEO (cyber, fraud, etc) but the FBI/SS requirements around mobility are untenable for me. I’d be interested to hear your experience and any advice around opportunities (in Texas) that are compatible with family life.

waihtis 5y ago

depends if you want to take the risk of being prosecuted for illegitimately accessing multiple computer resources

_8j50 5y ago

That's illegal. You can't break into someones house to kick out a burglar. The people that have counteracted and kicked out bots from botnets broke laws in several countries (fed crime in US), which is why they don't publicize their identity (even if they did, prosecutors may not come after them). You need the consent of the system owner to help them with the intrusion, otherwise anyone can hack into someone else's computer and say they were there to get rid of some malware.

user-the-name 5y ago

You would be taking on a lot liability and responsibility if you did that.

jdavis703 5y ago

> isn't it a criminal offense in your jurisdiction if you know about a danger to someone else, not to do something about it if only warn them? In America where the NSA is located? I’ve never written “lol” on this site, but this time called for it. Since you’re in France I’ll now explain nicely. Not even our cops have any legal requirement to intervene: both when there’s an active crime or even if they see another cop committing a crime in the line of duty (e.g. excessive force). And civilians (in the American press both military and “deputized” police are called non-civilian) will frequently ignore all manner of crimes, from shootouts to a person overdosing on drugs.

taway9001 5y ago
US LEO here. This is not exactly correct. At least this bit: "both when there’s an active crime or even if they see another cop committing a crime in the line of duty (e.g. excessive force)." Cops generally have no duty to protect anybody. That's not their job, no matter what the decals on the squad say. But if you're on duty, and you witness a crime being committed right in front of you, especially if it's something as serious as a violent felony, and literally ignore it, and anybody finds out, you'll at least probably be fired. Depending on the jurisdiction and totality of circumstances, it may also be a crime.
- edoceo 5y ago
  Doesn't work like that in Seattle. Police actively ignore drug use in the (clean) parks, even with complaining witness. Police point and laugh at homeless fighting each other. Source: my eyes.
  - orangepurple 5y ago
    That behavior comes from the police chief and district attorney explicitly telling street level cops what they can't police.
    - edoceo 5y ago
      I know where it comes from. And regardless of management, my observations are counter to the parent comment, claiming an LEO would be fired for ignoring violent crime.
- Abekkus 5y ago
  "Protect and serve" (the incumbent power structures, not arbitrary citizens)
- leoqa 5y ago
  Off topic, but I’ve been curious about moving from tech to working in LEO (cyber, fraud, etc) but the FBI/SS requirements around mobility are untenable for me. I’d be interested to hear your experience and any advice around opportunities (in Texas) that are compatible with family life.