I don't know if this is the right place to ask this but oh well. I wrote some proof of concept code that can do stuff to computers on my school network if the user has admin privileges. If I publish this on Github and someone finds it and uses it to do bad things, can I get into trouble?
-
1Does this answer your question? Am I legally responsible for being a developer of a code, if my customer uses it illegally? – Feb 10 '20 at 09:54
-
I think the qualifier "if the user has admin privileges" is key here. If the user has admin privileges then they can do all sorts of bad things without the benefit of any code at all. Its a bit like saying "With this bag I could burgle your house if I had a key". – Paul Johnson Feb 10 '20 at 11:27
2 Answers
Lawmakers have recognized that technology develops rather quickly, and do not try to prescribe the exact technical boundary between what's allowed and what's not. Even the distinction between code (software) and hardware is not made, and that's a good thing. Things like FPGA's would blur such a distinction.
Instead, we generally consider best practices. You're not the first person to write concept code for exploits, and there is some consensus about dealing with it. The general term is "responsible disclosure", and just publishing your code on Github would not classify as responsible. You are very much expected to first inform any organisation which you know is vulnerable, and give them time to fix the issue.
- 5,629
- 14
- 18
You know it's dangerous, or you wouldn't as. You're worried about criminals as well. At the very least you can excpect to be sued by a victim, which can cost you a lot of money even if you win, depending on where you are. With good chances that you lose. And many potential employers wony ever consider you.
Now tell us what is in your opinion the upside for you.
- 34,028
- 2
- 46
- 88