Yes or No?

[W3WN]

So... while working on an issue for an employee who is trying to access the corporate network remotely from a hotel out of state, a co-worker mentioned that while he was on vacation recently, he noticed that they were using a very old and somewhat insecure DSL router.

He tried -- and succeeded -- in logging into the router as the router admin, using the factory default password, which he happened to know.

He then updated their security level and made some other minor "improvements" for performance & security reasons.

He never got around to telling them what he'd done.

So I said to him, "So you hacked their router?"

He says "No! I didn't hack it, I just accessed it!"

Obviously we disagree on this point, so let me ask you...

I say that even though he did it with the best of intentions, he did access the router and make changes without prior authorization or permission. Therefore, he hacked the router.

Am I correct? Yes or no?

...and no, I don't know where this alleged router is, and no, I'm not telling on him... I'm not a Gym Teacher, after all...

[K7SGJ]

NAh. If he had the password, default or otherwise, and "accessed" the router to insure the best security available for the router, I'd give him a pat on the back and say "well done, I should have thought of that myself. And then, forget about. I'm sure there are more important things that require your, and his, attention.

[PA5COR]

I understand why you did it.
Maybe the owner isn't clever enough to do it himself, or maybe he just let it for reasons we don't know.
Changing the parameters need his/her permission, if i leave the front door open it still is no invitation to enter my house.

[W3WN]

NAh. If he had the password, default or otherwise, and "accessed" the router to insure the best security available for the router, I'd give him a pat on the back and say "well done, I should have thought of that myself. And then, forget about. I'm sure there are more important things that require your, and his, attention.

You didn't answer the question.

I understand why you did it.
Maybe the owner isn't clever enough to do it himself, or maybe he just let it for reasons we don't know.
Changing the parameters need his/her permission, if i leave the front door open it still is no invitation to enter my house.

You didn't answer the question either.

[KG4CGC]

Which action that you may take would uphold your reputation with your reputation with your employer? It's not a right or wrong or agree or disagree situation.

[KD8TUT]

Legally it's unauthorized computer access according the the Computer Fraud and Abuse Act and it's amendments.

If you are an IT person... it would be a good idea to read the law.

[WØTKX]

Don't do it. If the router is not yours or yours to control...

Use an endpoint firewall and real time AV

Just like you should on any "public network", FFS

DuH? Remember... Don't touch it, you broke it

[K7SGJ]

You didn't answer the question.

You didn't answer the question either.

I think I did. Nah=no.

[WZ7U]

Since he plays for the same team as you (right), all I would say about it is on first blush, no. Looking at it technically, perhaps. But Micheal brought up a good point too.

I suppose that's why I'm not an IT guy.

Fhwew

[W2NAP]

Legally it's unauthorized computer access according the the Computer Fraud and Abuse Act and it's amendments.

If you are an IT person... it would be a good idea to read the law.

winner winner chicken dinner