Re: Just got port scanned!! (not illegal everywhere)

["Adam Alexander" <adam alexander lu>]

A.J. Clark:

There's a very strategically placed "or" in that sentence that makes you
wrong.

If it said "to probe, scan or test the vulnerability of a system or network
to breach security..." then you would be correct, but it does not.  It says
"to probe, scan or test the vulnerability of a system or network OR to
breach security..." meaning that it is talking about two different
activities.

1:  probing, scanning, or testing
2:  breaching security or authentication measures

Both of which would be considered a breach of the AUP.  Therefore, port
scanning FOR ANY REASON would be violating this AUP.

Just couldn't resist clearing that up  =)

Adam
------------------------------------------------------------------------
>> Unauthorized access to or use of data, systems or networks, including any
>> attempt to probe, scan or test the vulnerability of a system or network
or
>> to breach security or authentication measures without express
authorization
>> of the owner of the system or network.
>>
>> So, according to those rules, it is against their AUP for you to port
scan
>> another host on the internet.  If you do scan a host, and are reported,
if


A.J. Clark Writes:

>That's not what it says at all.  Read carefully - "...to breach security
>or authentication measures..."
>
>If you're port scanning for other purposes, it doesn't fall into a breach
>of the AUP.