[Owasp-london] (no subject)

[Alex Mackey]

I wish Daniel all the best and I am sure there was no malicious
intention. 

I don't know what their "evidence" is against him but it got me thinking
what is the minimum amount of evidence the police services would need
against someone to take them to court. 

E.g. if I go to a website and enter a single quotation mark in a form
text field am I attempting a SQL injection hack? 
Or if I then append a sql statement to this quotation mark that prints
out the version number of the database server am I attempting to hack
the site?

I think the computer misuse act said something about unauthorized access
so appending the sql statement would probably potentially get you
arrested, even through obtaining the version number on its own wouldn't
allow you to do much. 



Alex 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.owasp.org/pipermail/owasp-london/attachments/20050401/c7d1e503/attachment.html