Our responsibility answering questions?

So, what do you all think on this? Are you concerned that the advice and tips you post could help develop the next Slammer worm? Are you afraid that you might be credited as helping develop some new virus, just because you figured out some obscureRegistry pathing? Or am I just overly worried here?

Joe

Yep, had to make it at least 10000 points. :-)

PS: sorry, but all of my apostrophies were converted into question marks. Weird!

We've all posted replies for the linux/password bypass... but generally in order to accomplish this, the person must have physical access to the computer in question. If person has physical access, then security is a moot issue. If the person does not have physical access, in your example, then he/she cannot bypass that password using the linux method anyway.

I saw the question before you posted your answer, but choose not to reply to it in any way. I'm not sure how an ip address alone can "determine the function of a server" although entry into the sever can. But entry into the server should be the difficult part -- and that will vary.

Anything you pass on to others can be used for good or evil. If someone needs to find out something, he or she will find the answer that best meets their needs if they persist enough. Whether they find out through you or through someone else, persistance does usually generate results.

I answer when I feel comfortable with my answer... you should probably do the same... essentially listen to that voice inside you.

Well, the thread has been withdrawn and I missed both the question and answer.

I think Anna hit it with the voice inside of you. I would only add that when it doesn't feel right, you should question the motive. In at least some instances, the fact that someone questions the motive will be a sufficient prod to the concience of the poster.

Hi Joseph,

I agree that we need to be responsible with our answers.

I have answered a few questions in a similar manner.

I have also avoided a few questions that I was concerned about how the user might use the information.

I do admit, that I was not so limited in answering when I started. But have come to realize that some posters are looking for ways to get around licensing and security settings.

Maxwell answered one particularly abusive peer by giving him links to his own abusive comments.

Chas

Joe, I think that your question(s) of should you or should you not provide an answer is more your own judgement call. If you don't feel right about it, just don't answer or you CAN steer them to the hack world. mIRC is a great venue for that. Besides, if they have to ask here, they aren't true hackers.

My thing is, I don't answer questions that appear overtly asking for hack or breaking in information to a network (like recent requests for hack info on ISA servers)or that just seem so academic that anyone who has ever pushed the on button on a computer would know the answer. I figure either a). its some really young kid or more likey, b) someone who is asking just to screw with those who answer [which I see more and more of these days on Techrepublic. Sad but true].

First,the terms of Privacy Policy and Terms and Conditions of Usage are listed at the bottom of page,whether or not it adresses this issue directly is not seen.

It should be to the dicrestion of the TechRepublic member to uphold their own integrity to posting a answer to any question that lends to hackers or otherwise gain info that would help them gain info for their own dishonesty.I can only hold ones self to thy own integrity and select to not post when the question is obvious of ones intentions.
There is always some form of dishonesty that is being practiced even in TechRepublic will it happen,and has happened.

So,I only try to post an answer to those quesstions that will be helpful to members that are seeking help,and to ignorethose that I feel is otherwise,yes I have probably used certain sights to gain knowledge,yet I only use the tools or knowledge discretely.
Have a nice day and hold thy self in truth

Greetings Joseph,

I think you have smacked face-first into the quandary that many of us probably have (i.e. how will the information I provide be used?).

Despite the posted guidelines and acceptable use policy for this site, this forum is essentially unmonitored by the TR staff. Therefore, I think it is necessary that all of us who frequently answer questions hear exercise some restraint in the way we answer questions, IF we want to keep this an "honest" forum. This forum could EASILY degenerate into just another hacker site if we don't exercise that restraint.

Should you be worried? Just put it in perspective. Whenever I run across a question that appears (on the face of it) to be dubious at best, I tend to ask myself "What are the possible affects if the person asking the question is either one of my users, or has direct access to any of my computers?" This tends to quickly make clear how, or if, I should answer that question. If I do answer, I will either answer very generically, or recommend a solution that is commercially available (and usually costs some bucks).

BTW, I thought your answer was masterful.

For Oldefar, the thread is still there if you want to look at Joseph's answer. There is a space imbedded in the URL he provided (I always forget to look too).

I thought about what I wrote last night, and I wanted to clear up one small point. The websites I mentioned as ones I frequent to get "dark" info are all listed as above-the-board security sites. I think they are all moderated, and you can't just post a "how do I hack Windoze" question. You will get flamed and banned from those sites.
But, they are still a good place to start for issues that are not covered here at TR. TR is very clean and pure when it comes to content. Those other sites are a little more muddled.
But the ones I liste are NOT hacker sites!
I don't want to get a user of AO (for example) to start flaming me because of the inference of hacking and their site.
Ok, just wanted to clarify that. ;-)

That link did not work when I tied it. Took me back to this page.

I wanted to comment that I do not believe this is the type of place for hackers to find info. Ya, it is okay to help others with "cracking" a Window$ login password if something iswrong because Window$ problems will sneak up on any IT person when least expected. At work here, corruption happens where we lost WNT or W2k logins and needed to get in. I do not consider these "Cracks" but more like work arounds.

Trying to get ashareware program "cracked" by using a fake registration, ya, that should not be on this site (I do not believe this world should be obssessed with money but that is another story).

I would not help anyone, especially on a public forumn, to crackM$ Word, but if I can help them fix it with a work around, I would.

That is my viewpoint, besides, people would probably not be "hacking" if companies would not be so money hungry thinking everyone could afford their products. Again, my viewpoint.

Deep question.
If the information is public knowledge, should a hacker's job be made easier by pointing them towards an answer?
Is security by ignorance really security?
We all have to make a judgement if it's a kid trying to break into a grade book, or a company trying to recover documents left by a former employee.
I think you're right to mantain some vigilance.

_________________
Test
'Single Quotes' Pasted from Word
'Single Quotes' Pasted from Notepad

So how difficult would it be for someone like you to provide information on "How to hack" and for someother to profit from such inquiry? ...

it is not ... at all!

Everything a newbie cracker needs to know to break into Network is readily available on the Web following a brief search. Obviously, profiting from such information requires skill.

Getting inside a network is child's play. He might be a dangerous cracker, and one so clever that as part of his hacking strategy he has deliberately opted to use common tools and techniques to conceal his true, terrifying capabilities. But then again, he might not.

Usually the scenario goes something like this. A young fool with virtually no skills and little ambition, snapping up toolzand appz from the Web and feels his way blindly towards the cracker pantheon by asking questions on "how to" and "what is" in forums such like this. He will do no harm because he doesn't know how to do harm, but he thinks quite highly of his insignificant achievements. He will recall his modest exploits with fondness, boast about them in IRC h4x0r chatrooms hoping to impress some k1dd13 even lamer than himself, and get busted by one of the hundreds of Feds who regularly hang out in these venues...

If you are not that person,... just calm down!

We answer the questions with the intention of being helpful. We all know what our limits are I guess. Sometimes we need to remind others of the limits and doing that is good - you are still being helpful!

I think that first you must pose a risk vs. gain question to yourself. What is compelling you to answer the question? The points here are kind of worthless, status symbols at best. For some, they seem to be of grand importance, people go back andfind dormant unclosed questions to post a quick answer so they get points when the autoclose is activated. Unless your like that, the answer is easy, skip it and move on. I've been on this board for a very long time and I see questions about unlicensed software, the win2000 linux exploit, copying cds and so on. If I don't like the question, I skip it. Sometimes it's so blatant, like the guy wanting to know about sharing the cd drive recently, that I feel compelled to inform them that they are in violation of license agreements. I dont think this knowlege is secret, I just don't like helping people beat the system. Are we responsible, not really, it's just information, we're not condoning or encouraging the behavior. Could it be dangerous? Probably not, if they are asking the question here, they have very little talent most likely or are just unknowing that it is not legal. As far as the admin password crack, the question usually goes "I just got a second had computer from work or a friend, I need the admin password" etc. If this is the case, they should format and restore, if they dont have rights to the software, they need to obtain it. I don't know the right answer, I just skip a lot of questions.

Thanks for all of your comments. I knew that many shared my feelings on being cautious on how we respond, but is was good to have those thoughts reinforced.
I don't lose sleep worrying that someone will use one of my answers for evil purposes. But I will continue to be vigilant on what I say here. I realize that if a person were so inclined, there are many other web sites available that tell you how to hack and such. TR is not, and looks like it will continue to not be one of those.

And asfor the question that started this whole thing, I saw today that the poster closed the question, rejecting all answers and not posting any comments.

Looks like that person was scared off.

Thanks, everyone.
Joe

This question was closed by the author