A friend of mine claims using this Bluetooth vulnerability tool to scan for Bluetooth networks is ethical hacking and harmless. He is sitting in the bus with a laptop and scanning for people's Bluetooth access points.
The only ethical hacking I know of is by Service Level Agreement; i.e. being professionally contracted to explore - with permission - a strict subset of company data for security improvement purposes.
However, I know that unauthorized scanning for data is illegal in many countries, including in the U.S. Such practices include port scanning. I warned him that what he is doing is unethical (probing without permission) and he could get sued for that.
What's the truth here? Is he performing illegal activities?
The only ethical hacking I know of is by Service Level Agreement; i.e. being professionally contracted to explore - with permission - a strict subset of company data for security improvement purposes.
However, I know that unauthorized scanning for data is illegal in many countries, including in the U.S. Such practices include port scanning. I warned him that what he is doing is unethical (probing without permission) and he could get sued for that.
What's the truth here? Is he performing illegal activities?