3 ms·

It's not illegal to try to log in to an ssh server. Or many. Apart from that I think the map from the article is mostly matching the number of internet-connecte

It's not illegal to try to log in to an ssh server. Or many. Apart from that I think the map from the article is mostly matching the number of internet-connected devices per country/region. So I think you can replace "some" by "almost all" in your statement. I mean, find a vulnerable iot device, use it for scanning/botnet.

chgs 2y ago
In what country? I suspect that given the intentions it would be a breach of the U.K. computer misuse act for example. Holding the perpetrator to the law is another matter of course.
- iforgotpassword 2y ago
  > given the intentions Exactly. If I just nilly willy connect to your server, try a password and it works and I immediately disconnect, will that get me in trouble in the UK? That would be worrying.
  - chx 2y ago
    1. mens rea probably applies 2. But if you make a stab at shoplifting and you are successful and give back the item, did you break the law? I am not a lawyer I am just asking.
    - KomoD 2y ago
      > But if you make a stab at shoplifting and you are successful and give back the item, did you break the law? Well, yeah?
      - wizzwizz4 2y ago
        The Theft Act 1968 defines theft as dishonest appropriation of “property belonging to another with the intention of permanently depriving the other of it” (and then waxes lyrical about what, exactly, that means: https://www.legislation.gov.uk/ukpga/1968/60/crossheading/definition-of-theft https://www.legislation.gov.uk/ukpga/1968/60/crossheading/de...). Just going by that law, I would say "it depends".
  - chgs 2y ago
    Technically yes. You were trying to get unauthorised access to a server But the law is never black and white. Programmers think the law is some code to run. It’s not.
jeroenhd 2y ago
It is where I live. If I know your username and password, using those credentials knowing you didn't intend to share them would be a crime. Of course, the probability of someone getting arrested for logging into your SSH server is as close to 0 as you can possibly get, but that doesn't make it legal.
bongodongobob 2y ago
Yes it is, in the same way you can't just walk into someone's house if the door is unlocked. They might not press charges but they certainly could.
alephxyz 2y ago
You may want to familiarize yourself with the Computer Fraud and Abuse Act
wtfwhateven 2y ago
it is absolutely illegal

chgs 2y ago

In what country? I suspect that given the intentions it would be a breach of the U.K. computer misuse act for example. Holding the perpetrator to the law is another matter of course.

iforgotpassword 2y ago
> given the intentions Exactly. If I just nilly willy connect to your server, try a password and it works and I immediately disconnect, will that get me in trouble in the UK? That would be worrying.
- chx 2y ago
  1. mens rea probably applies 2. But if you make a stab at shoplifting and you are successful and give back the item, did you break the law? I am not a lawyer I am just asking.
  - KomoD 2y ago
    > But if you make a stab at shoplifting and you are successful and give back the item, did you break the law? Well, yeah?
    - wizzwizz4 2y ago
      The Theft Act 1968 defines theft as dishonest appropriation of “property belonging to another with the intention of permanently depriving the other of it” (and then waxes lyrical about what, exactly, that means: https://www.legislation.gov.uk/ukpga/1968/60/crossheading/definition-of-theft https://www.legislation.gov.uk/ukpga/1968/60/crossheading/de...). Just going by that law, I would say "it depends".
- chgs 2y ago
  Technically yes. You were trying to get unauthorised access to a server But the law is never black and white. Programmers think the law is some code to run. It’s not.

jeroenhd 2y ago

It is where I live. If I know your username and password, using those credentials knowing you didn't intend to share them would be a crime. Of course, the probability of someone getting arrested for logging into your SSH server is as close to 0 as you can possibly get, but that doesn't make it legal.

bongodongobob 2y ago

Yes it is, in the same way you can't just walk into someone's house if the door is unlocked. They might not press charges but they certainly could.

alephxyz 2y ago

You may want to familiarize yourself with the Computer Fraud and Abuse Act

wtfwhateven 2y ago

it is absolutely illegal