Re: Web Defacement

Although we do not have laws regarding specifically "hacking activities" in Brazil, we do have laws against break-ins, information theft and information damage. Of course no one will be prosecuted if your website was defaced but if you can prove that this defacement has been the cause of financial losses for your company you can suit the hacker that have defaced your website in order to make he pay for it.

The main problem in a lawsuit regarding hacking activities is making the court accept the evidences. Logs can be forged.

Best regards,

Alberto.

Alberto Cozer
Security Outsource Manager, Future Technologies Digital Security IBM Certified AIX System Specialist
Checkpoint Certified Security Expert, CCSE NG acozer@fti.com.br
http://www.fti.com.br

                                                                                                                                          
                      Ricardo Castanho de                                                                                                 
                      Oliveira Freitas            To:       Michel Angelo da Silva Pereira , HggdH          
                                                                                            
                      est.com.br>                 cc:       Incidents                                        
                                                  Subject:  Re:  Web Defacement                                                           
                      14/02/2003 09:50                                                                                                    
                                                                                                                                          

On Qui 13 Fev 2003 20:58, Michel Angelo da Silva Pereira wrote:

Sorry to correct you but... being Brazilian also... I think I can!

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

(being a ex- LDP-br translator I can tell that!)

The original translation for the word "porra" is correct! Don't forget the
context!

Your translation will work out as an interjection, like those that you say
when you step on dog "doo-doo" (easily found on streets! ;-)

Your mileage may vary, though! ;-)

So, the defacer's English is right! Not his behaviour though....

According to our legislation the great difference is that we don't "need" to
have a specific law for electronic crimes, the closest match will do! As well as jurisprudence! Which at times is much 'stronger than the law"

Meanwhile.... our legislators are working on a "more specific" code!

As long damage (of any kind) and losses are implied... the "generic code"
(law).... will do the job!

Do you need more help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

IANAL, though!

regards,

Ricardo Castanho

> Here on Brazil we dosen't have laws about hacking, there is one
project
> on our congress to be approved, only problems with Credit Cards are
more
> investigated.
Brazil.
> Bye
> HggdH wrote:
Satans
> > home page. I did not go deep -- it runs ActiveX (and I don't), but
the
> > "Guest Book" has, as first entry "Sat4an1c Br41n". There it is
said
> > he/she is 15 years old, and that he/she is the author of the web
("foi eu
> > que criei porra!" -- "was I that created dammit"). As far as I can
provided by
> > www.hpg.ig.com.br, then you have one more Id to complain about --
> > brunopr@hpg.ig.com.br.
> > Other entries show what might be a list of hacked pages, mostly
.gov.xx.
> > It is highly possible he/she is indeed 15 years old -- leaving
traces
> > everywhere, valid e-mail addresses, etc. I do not know about
Brazil's
> > laws on hacking, thou.
> > ..hggdh..

--
==========================================================
Linux user # 102240 => Machine # 96125 => Seti@home user
==========================================================
http://counter.li.org/ & Get Counted!

Fri, 14 Feb 2003 10:04:00 -0200
 10:04am  up 5 days, 23:11,  6 users,  load average: 2.91, 3.04, 3.03
FORTUNE'S FUN FACTS TO KNOW AND TELL:                        #44
             Zebras are colored with dark stripes on a light
background.


----------------------------------------------------------------------------

This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
Can we help you?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related securityfocus.com Links
bugtraq
certification
focus-bsd
focus-ids
focus-ih
focus-linux
focus-ms
focus-sun
focus-unix-other
focus-virus
forensics
incidents
libnet
linux-secnews
ms-secnews
pen-test
secpapers
secprog
sectools
secureshell
security-basics
securityjobs
sf-news
vuln-dev
webappsec
Request more information about Pantek
and tracking system please see: 
http://aris.securityfocus.com






*********************************************************
Future Technologies Seguranca Digital

Esta mensagem e de responsabilidade de seu autor.
Seu conteudo nao reflete necessariamente a opiniao da
empresa.
*********************************************************


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com