Legal implications of countering botnets