←back to thread

Taking over 60k spyware user accounts with SQL injection

(ericdaigle.ca)
228 points mtlynch | 1 comments | 03 Jul 25 14:56 UTC | HN request time: 0.193s | source
Show context
blueplanet200 ◴[08 Jul 25 16:41 UTC] No.44501690[source]▶
From sqlmap

> Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program"

I don't know the legal footing these spyware apps stand on, but this blog post seems like exhibit A if Catwatchful ever decided to sue the author, or press criminal charges. Hacking, even for reasons that seem morally justified, is still illegal.

replies(6): >>44501792 #>>44501947 #>>44502094 #>>44504388 #>>44505059 #>>44505234 #
1. nelgaard ◴[09 Jul 25 00:27 UTC] No.44505234[source]▶
As someone noted, there is the issue of jurisdiction.

But Daigle probably did consider being liable and what would be morally justified.

It must have been tempting to try to use the Catwatchful app to notify the victims that they are being stalked. E.g., by getting phone numbers or social media handles and then SMS/DM the victims (if the app reveals the victims handles in the recorded conversations)

Or getting the IMEI numbers and handing them over to network operators or local authorities who could do the notification.

It would probably help many victims, but it could go wrong in some cases.