Is it legal to access information inside a private network such as a computer's name, IP address, MAC address, etc? I was told yesterday that a certain program used may be trying to get the name and ID of the PC's in private home networks to verify account security. I was always lead to believe that a reason for internal and external IPs was to hide the network from the outside. I don't really believe they are doing it because it feels like more trouble than the service really would go through. Not entirely sure though. Don't really like the idea of them harvesting information they don't really need when my network is controlling what goes where.

closed as off-topic by AndrolGenhald, Steffen Ullrich, forest, Xander, multithr3at3d Jun 13 '18 at 21:25

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – AndrolGenhald, Steffen Ullrich, forest, Xander, multithr3at3d
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 3
    This is really a question for an attorney. Much of the answer to this question is going to depend on the jurisdiction which you are located in, as well as any legal agreements which you have signed (including EULAs). – user52472 Jun 8 '18 at 17:18
  • 1
    For questions about legality see Law. "I was always lead to believe that a reason for internal and external IPs was to hide the network from the outside." - the "hiding" is done by using private addresses which are not routable to the internet and thus cannot be accessed directly from the internet. It is not really done by keeping the internal IP secret, in fact it is often easily predictable which IP gets used in the network given that one of the predefined private networks is used. – Steffen Ullrich Jun 8 '18 at 17:42

Are they information security auditors? These will most of the time run a network mapping tool such as nmap to check on the security of the internal network. A general scan by the IT security team is acceptable as long as it does not interfere with normal network operations. This is however for companies. For home networks that's a whole different story, but then the ISP will already have this information. Who is really doing the scan here?

  • Not really that kind of thing. Imagine outlook requesting your internal PC names or IPs on your network. That is basically the equivalent. I don't want to mention who it is so it can be dealt with without a lot of fuss. I.E. an external party requesting that information from my private home network. – Bondanr Jun 8 '18 at 18:05

Not the answer you're looking for? Browse other questions tagged or ask your own question.