← Back to context

Comment by bmenrigh

13 hours ago

Calling vuln scanning from a non-profit a felony is a bit of a stretch. Many for-profit companies do similar vuln scanning and then threaten companies with security "scorecards". That is borderline extortion.

If the non-profit was walking down the road and rattling everybody’s door lock to see which are unlocked, and having a look around the windows to see if any are open, would that be a crime?

Because that is exactly what all of these vulnerability scanning companies are doing, and all of us sort of just… let them.

  • If the neighborhood was constantly being canvased by criminals checking doorknobs, so your concerned neighbor went over to your house to check your doorknob, and then let you know if you accidentally left it open, would you also accuse your neighbor of being a criminal trying to break in?

    • Yes.

      I have personally done this before, the correct sequence of moves is:

      1. Call your neighbor, ask for permission. 2. Check the door 3. Lock the door

      If you don’t have their phone number, you are not on good enough terms to touch their lock.

      3 replies →