Yes or No?

[W3WN]

So... while working on an issue for an employee who is trying to access the corporate network remotely from a hotel out of state, a co-worker mentioned that while he was on vacation recently, he noticed that they were using a very old and somewhat insecure DSL router.

He tried -- and succeeded -- in logging into the router as the router admin, using the factory default password, which he happened to know.

He then updated their security level and made some other minor "improvements" for performance & security reasons.

He never got around to telling them what he'd done.

So I said to him, "So you hacked their router?"

He says "No! I didn't hack it, I just accessed it!"

Obviously we disagree on this point, so let me ask you...

I say that even though he did it with the best of intentions, he did access the router and make changes without prior authorization or permission. Therefore, he hacked the router.

Am I correct? Yes or no?

...and no, I don't know where this alleged router is, and no, I'm not telling on him... I'm not a Gym Teacher, after all...

[K7SGJ]

NAh. If he had the password, default or otherwise, and "accessed" the router to insure the best security available for the router, I'd give him a pat on the back and say "well done, I should have thought of that myself. And then, forget about. I'm sure there are more important things that require your, and his, attention.

[W3WN]

NAh. If he had the password, default or otherwise, and "accessed" the router to insure the best security available for the router, I'd give him a pat on the back and say "well done, I should have thought of that myself. And then, forget about. I'm sure there are more important things that require your, and his, attention.

You didn't answer the question.

I understand why you did it.
Maybe the owner isn't clever enough to do it himself, or maybe he just let it for reasons we don't know.
Changing the parameters need his/her permission, if i leave the front door open it still is no invitation to enter my house.

You didn't answer the question either.

[K7SGJ]

You didn't answer the question.

You didn't answer the question either.

I think I did. Nah=no.

[PA5COR]

I understand why you did it.
Maybe the owner isn't clever enough to do it himself, or maybe he just let it for reasons we don't know.
Changing the parameters need his/her permission, if i leave the front door open it still is no invitation to enter my house.

[KG4CGC]

Which action that you may take would uphold your reputation with your reputation with your employer? It's not a right or wrong or agree or disagree situation.

[KD8TUT]

Legally it's unauthorized computer access according the the Computer Fraud and Abuse Act and it's amendments.

If you are an IT person... it would be a good idea to read the law.

[W2NAP]

Legally it's unauthorized computer access according the the Computer Fraud and Abuse Act and it's amendments.

If you are an IT person... it would be a good idea to read the law.

winner winner chicken dinner

[W3WN]

winner winner chicken dinner

Actually, with no disrespect to Bob Prince, the phrase is now "Winner Winner Catfish Dinner"

[W3WN]

Legally it's unauthorized computer access according the the Computer Fraud and Abuse Act and it's amendments.

If you are an IT person... it would be a good idea to read the law.

That, essentially, was my point to him.

I'm sure that the management of the establishment (which from his description appears to be clueless) either hasn't noticed or has called in their IT consultant (owner's nephew or something like that, from the sounds of it) to undo it. And no harm was intended. So no harm, no foul.

It's just the principle of the thing. Even if it's ethical hacking, IMHO, it's still hacking.