Business Idea Legality Issue

[bildy]

What is the name of your state? New York

I have a question related to internet law. In short, can I scan a website for possible vulnerabilities (i.e. penetration testing) which would allow a hacker to possibly compromise a site without a companys permission, and then offer my services to fix them for a fee?

 

[JETX]

What is the name of your state? New York

I have a question related to internet law. In short, can I scan a website for possible vulnerabilities (i.e. penetration testing) which would allow a hacker to possibly compromise a site without a companys permission, and then offer my services to fix them for a fee?

As long as you tell them you are doing it first, yes.

 

[bildy]

So it would be illegal to do the testing and then provide the results without telling them?

 

[Crazed98]

So it would be illegal to do the testing and then provide the results without telling them?

That would be like breaking into someones house while sleeping to wake them up and hand them an ADT home security pamphlet.

Hacking a website is illegal unless the owner of the website is aware of it and permits you to do so.

 

[bildy]

Thak you, I appreciate the responses.

 

[EvilWizard]

Well port scanning a system isn't necessarily illegal unless you connect or cause a noticible degradation to services such as bandwidth utilization, but scanning a system and then going to the system owner with a proposal to fix vulnerability X could be construed as extortion. Its a bad idea in general unless you get a signed contract stating you are allowed to do X and Y.

 

[JETX]

Well port scanning a system isn't necessarily illegal unless you connect or cause a noticible degradation to services such as bandwidth utilization, but scanning a system and then going to the system owner with a proposal to fix vulnerability X could be construed as extortion. Its a bad idea in general unless you get a signed contract stating you are allowed to do X and Y.

Please change your name to 'EvilEcho'.... as that is all your posts do.... is echo comments already made (more clearly) by others.

 

[EvilWizard]

Well I didn't see where anyone above me had posted anything about port scanning being legal or the fact that connections have to be made or services affected to be illegal... But hey if you feel like acting like a child to make your inconsequential life a bit more pleasant than go right ahead. (I will still be smarter than you though.)