Hacker News Reader

Article 15 seems specific to pen testing at least thats what I think they mean by "public security organs"

> Article 13 Public security organs conducting Internet security supervision and inspection may conduct on-site supervision and inspection or remote inspection.

View on HN

That sounds to me like it's authorizing them to remotely "access" the computers and networks, and failing that they can perform an on-site inspection. So yeah pentests, not necessarily with the corporation's knowledge...

Article 16 says subjects must be notified of remote inspections, including the time and scope; or said inspections must be published ahead of time. Remote inspections must not disrupt normal functioning of the subject’s systems.

Again, I’m only talking about the written text of the law.

Where do you get pentesting from? This translation sounds like it could mean anything from an audit to full-packet capture.

Reply on news.ycombinator.com