The recently uncovered massive Heartbleed vulnerability affecting 66% of websites is currently being patched by many companies, but several online services already offer users the means to test whether a website is still affected by the Heartbleed vulnerability. However, checking to see whether a site uses flawed OpenSSL protocol is actually in violation of Internet laws and could land users in jail, at least theoretically, The Register reports. According to the U.S. Computer Fraud and Abuse Act, and the U.K. Computer Misuse Act, it is illegal to test the security of third-party websites without their permission. Therefore, Heartbleed testing, and any other security checks on a website such as the ones performed by security researchers, could be punished with jail time if such laws were actually enforced. “I would say
Trying to protect yourself from Heartbleed could land you in jail
11
Apr
2014
Comments are closed.
SUNDAY, FEBRUARY 23, 2025
WHITE PAPERS
Mission-Critical Broadband – Why Governments Should Partner with Commercial Operators:
Many governments embrace mobile network operator (MNO) networks as ...
ARA at Scale: How to Choose a Solution That Grows With Your Needs:
Application release automation (ARA) tools enable best practices in...
Latest Comments
-
04. 05. 2013 00:51 -
28. 03. 2013 13:30 -
27. 03. 2013 17:21