My service provider, Mediaone, nearly revoked my access for running a portscan on my friend's computer to test his firewall (with his permission, even!) - and they claimed it was "hacking". After I called the manager of the callcenter up and explained things to him, that person talked to their legal department, and the problem vanished without a trace.
People don't understand security, hence they overreact when it is brought up. I could tell them there is a virus out there that affects *only* their computers and steals their proprietary information and passes it onto competitors was on their system, as well as have control over their HVAC systems and they would believe me - how realistic is it? Not very.
We've all BS'd to laypeople before, and we all know how easy it is to completely baffle them, get them upset, or make them buy stuff they don't need, etcetra. All it takes is one person pointing fingers and anyone they talk to who isn't knowledgeable about security will happily do their bidding.
This is a way of responding to those ill-advised people by saying, not only is it legal, but somebody was sued for reporting something stupid like that as a crime. It's total CYA (Cover Your Ass) material for us out in the field.
Society needs therapy. It's having
trouble accepting itself.
[ Parent ]