You need to know how to carry out a cyberattack before you can devise a way to stop it, so CS students need to be taught how to do cyberattacks to learn about cybersecurity.
My CS security class had a virtual machine set up with vulnerabilities, such that each vulnerability you exploited would let you log in as a different user. It was quite fun!
That you can’t get or distribute or enable people to get applications that could enable people to commit cyber attacks.
Just sent the paragraph through deepl:
Any person who prepares to commit a criminal offense under § 202a or § 202b by
producing, obtaining for oneself or another, selling, transferring to another, distributing, or otherwise making available passwords or other security codes that enable access to data (§ 202a(2)), or
computer programs intended for the commission of such an offense,
shall be punished by imprisonment for up to two years or by a fine.
Glad we don’t have such a rule in the Netherlands. My school has “hack friday” every friday, where we come together with a few students and a teacher to do a HackTheBox challenge.
§ 202c Vorbereiten des Ausspähens und Abfangens von Daten
(1) Wer eine Straftat nach § 202a oder § 202b vorbereitet, indem er
Passwörter oder sonstige Sicherungscodes, die den Zugang zu Daten (§ 202a Abs. 2) ermöglichen, oder
Computerprogramme, deren Zweck die Begehung einer solchen Tat ist,
herstellt, sich oder einem anderen verschafft, verkauft, einem anderen überlässt, verbreitet oder sonst zugänglich macht, wird mit Freiheitsstrafe bis zu zwei Jahren oder mit Geldstrafe bestraft.
The issue remains that according to 202a ff, basically any hacking is a crime. If you don’t differentiate there, you don’t differentiate in the 202c either.
In Germany, all forms of hacking are officially prohibited: Sections 202a–c of the Criminal Code (StGB) criminalize the spying on and interception of data, as well as the preparation thereof and the possession of so-called hacking tools. Ethical hacking is thus prohibited.
Den letzten Satz hast du komplett falschrum übersetzt.
Ethisches Hacken ist damit außen vor
Außen vor ≠ Ausnahme aus dem Verbot
Der Schwerpunkt ist wahrscheinlich, ausgeschlossen bedeutet Verbot oder Exklusion.
Keine Sorge, ich war letztes Jahr in Deutschland und dachte, das mit Absicht und aus Versehen das gleiche bedeutet, was zu einer peinliche Situation gelitten ist.
Those basically say that unauthorized access to confidential/protected data is illegal. (I’m not a lawyer but check out this article presumably by lawyers)
What is the law? That you can’t prepare against cyber attacks?
You need to know how to carry out a cyberattack before you can devise a way to stop it, so CS students need to be taught how to do cyberattacks to learn about cybersecurity.
My CS security class had a virtual machine set up with vulnerabilities, such that each vulnerability you exploited would let you log in as a different user. It was quite fun!
Which is why the so called hacker paragraph is so very controversial.
I hate proto-fascists so fucking much.
deleted by creator
Liberals, larval fascists, the shield arm of fascism.
That you can’t get or distribute or enable people to get applications that could enable people to commit cyber attacks.
Just sent the paragraph through deepl:
Emphasis mine.
Glad we don’t have such a rule in the Netherlands. My school has “hack friday” every friday, where we come together with a few students and a teacher to do a HackTheBox challenge.
So it’s only illegal if you intend to commit a criminal offense.
This seems like a pretty standard law regarding tools which can be used to commit crimes.
IANAL, but the German wording is ambiguous enough for this to not be clear.
Really? Is this ambiguous?
Citation from German law
Emphasis mine.
Edit: Lawyers’ opinion
The issue remains that according to 202a ff, basically any hacking is a crime. If you don’t differentiate there, you don’t differentiate in the 202c either.
Part of the article in the German comp sci assc magazine:
Den letzten Satz hast du komplett falschrum übersetzt.
Außen vor ≠ Ausnahme aus dem Verbot
Der Schwerpunkt ist wahrscheinlich, ausgeschlossen bedeutet Verbot oder Exklusion.
Keine Sorge, ich war letztes Jahr in Deutschland und dachte, das mit Absicht und aus Versehen das gleiche bedeutet, was zu einer peinliche Situation gelitten ist.
Fair enough, hopefully fixed now?
That’s how I read it too but it does depend upon the wording of 202a and 202b that define what a criminal offence is in this context.
Those basically say that unauthorized access to confidential/protected data is illegal. (I’m not a lawyer but check out this article presumably by lawyers)
How is that different from it being illegal to possess the key to someone’s house unknowingly, and to use it for criminal purposes?
So having a password is illegal in Germany??
If you’re not authorized.
Fortunately only if it “enables access to data”.
It’s safer if you stop talking about it, or we’re going to have to report you to the authorities.