3 ms·

"I am wondering whether it would be legal to try to automatically check for known exploits, in order to ‘p0wn’ the wannabe-attacker and disable their system ins

"I am wondering whether it would be legal to try to automatically check for known exploits, in order to ‘p0wn’ the wannabe-attacker and disable their system instead." Absolutely illegal. Don't do that. Also, if your setup is enough at controlling the nuisance, why bother? -- Good work though, liked the visualization of attacker IP locations! Have you considered running at least SSH on nonstandard port?

ganzuul 5y ago
What about hold your ground laws, or self defense? It may be time to consider these.
- LinuxBender 5y ago
  Those are generally for humans defending themselves in life threatening situations. I would suggest talking to a lawyer if you are going this route.
  - ganzuul 5y ago
    I'm not. I wish to consider if defending one's home might include defending one's electronic presence, however that may manifest itself. For example, you have a home security system that you monitor from your mobile device. Perhaps you have your pet at home, there have been break-ins in your neighborhood, and just after someone showed up on your doorstep the CCTV feed cuts. You are not at home and the cops are busy. - But you have the skills to defend your home's electronic presence. You suspect a life, your pet, may be in danger so you have a good motive. What then?
    - przemub 5y ago
      That's more of a question if protecting your pet's life constitutes a necessary defence in your jurisdiction.
    - LinuxBender 5y ago
      I totally get the idea and I agree with the intent. There are some places that allow defending a home using automation using non lethal force but even that comes with some risk of civil legal issues. This is why I suggest consulting with a lawyer. Even with non lethal means one would want to ensure it is legal in their location and that they have the proper signs with appropriate verbiage and mitigating controls in place first. Also understanding what laws are enforced and how they are enforced in your particular area is useful. My own personal solution was to move to a location that supports your idea and the Sheriff would likely high-five me if I take out the trash. There are trade-offs of course and hopefully such things are never required. There was talk at one point of creating laws that supported counter-hacking but those never happened and it is highly unlikely they would ever pass. Proper attribution is hard enough. There are endless rabbit holes of problems such laws would create. At a minimum there would be a vastly increased requirement on everyone's part to increase audit trails and data storage alone would become a booming business, far more than it already is.
      - kortilla 5y ago
        > There are some places that allow defending a home using non lethal force but even that comes with some risk of civil legal issues. You can defend your home with lethal force in many states in the US. No verbiage, signs or disclaimers required.
        LinuxBender 5y ago
        Agreed, though AFAIK only if it is you doing the defending of yourself and your family, not automation, not booby-traps. This discussion started around defending property remotely vs. defending ones own life in jeopardy.
- ohyeshedid 5y ago
  While ignoring the operators/carriers in between you and your target?
Topolomancer 5y ago
Thanks! I was debating the nonstandard port, but I left it like this to simplify connections for my users. If the traffic starts to continue like this, I might be forced to switch, though.

ganzuul 5y ago

What about hold your ground laws, or self defense? It may be time to consider these.

LinuxBender 5y ago
Those are generally for humans defending themselves in life threatening situations. I would suggest talking to a lawyer if you are going this route.
- ganzuul 5y ago
  I'm not. I wish to consider if defending one's home might include defending one's electronic presence, however that may manifest itself. For example, you have a home security system that you monitor from your mobile device. Perhaps you have your pet at home, there have been break-ins in your neighborhood, and just after someone showed up on your doorstep the CCTV feed cuts. You are not at home and the cops are busy. - But you have the skills to defend your home's electronic presence. You suspect a life, your pet, may be in danger so you have a good motive. What then?
  - przemub 5y ago
    That's more of a question if protecting your pet's life constitutes a necessary defence in your jurisdiction.
  - LinuxBender 5y ago
    I totally get the idea and I agree with the intent. There are some places that allow defending a home using automation using non lethal force but even that comes with some risk of civil legal issues. This is why I suggest consulting with a lawyer. Even with non lethal means one would want to ensure it is legal in their location and that they have the proper signs with appropriate verbiage and mitigating controls in place first. Also understanding what laws are enforced and how they are enforced in your particular area is useful. My own personal solution was to move to a location that supports your idea and the Sheriff would likely high-five me if I take out the trash. There are trade-offs of course and hopefully such things are never required. There was talk at one point of creating laws that supported counter-hacking but those never happened and it is highly unlikely they would ever pass. Proper attribution is hard enough. There are endless rabbit holes of problems such laws would create. At a minimum there would be a vastly increased requirement on everyone's part to increase audit trails and data storage alone would become a booming business, far more than it already is.
    - kortilla 5y ago
      > There are some places that allow defending a home using non lethal force but even that comes with some risk of civil legal issues. You can defend your home with lethal force in many states in the US. No verbiage, signs or disclaimers required.
      - LinuxBender 5y ago
        Agreed, though AFAIK only if it is you doing the defending of yourself and your family, not automation, not booby-traps. This discussion started around defending property remotely vs. defending ones own life in jeopardy.
ohyeshedid 5y ago
While ignoring the operators/carriers in between you and your target?

Topolomancer 5y ago

Thanks! I was debating the nonstandard port, but I left it like this to simplify connections for my users. If the traffic starts to continue like this, I might be forced to switch, though.