full-disclosure - Re: Nmap Online

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 1 Dec 2006 03:13:38 -0500
From: "Mike Huber" <michael.huber@...il.com>
To: "Jason Miller" <jammer128@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Nmap Online

first of all, IANAL, but the TOS seem to cover the basics...  However, I am
unsure whether they would hold up under strict legal scrutiny.  As far as I
can tell, they may hold up under US criminal law, but not under civil law,
as tort law has its own wonderful little eccentricities.  The best safeguard
they seem to have is that they must log the source IP of all scan
requests...  As far as I know, anyone who takes the time to read the nmap
man page should be able to craft a scan which won't be detected by the
scanned host (can someone be a definitive source on this point?), and anyone
taking malicious action ought to be taking sufficient precautions to avoid
detection anyway.  None-the-less, my 8-ball sees litigation in their future.

On 11/30/06, Jason Miller <jammer128@...il.com> wrote:
>
> im detecting legal actions already.
>
> On 11/28/06, David Matousek <david@...ousec.com> wrote:
> >
> > Hello,
> >
> > For all Nmap fans, our group have implemented Nmap Online service.
> > Its address is http://nmap-online.com/. The interface allows you to
> > perform custom
> > Nmap scans from our server with only a few limitations in the syntax.
> > The service is free and can be used immediately, no registration is
> > required.
> >
> > Please direct your questions and suggestions to our emails.
> >
> >
> > Regards,
> >
> > --
> > David Matousek
> >
> > Founder and Chief Representative of Matousec - Transparent security
> > http://www.matousec.com/
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/