...been done just as effectively without infringing the law. As for the 60 PC DDoS, I think it's unlikely that a securitycompany's server would have collapsed so easily if it hadn't been set up to do so beforehand, for the purposes of demonstration...
http://www.computerweekly.com/blogs/stuart_king/2009/03/bbc-botnets2.html
...posed in a presentation given by one of the people I respect most in the security industry, Martin Smith, of The SecurityCompany. The correct answer is that the number should equal the number of people in your whole organisation. Unless everybody...
http://www.computerweekly.com/blogs/stuart_king/2008/07/breachmeter-itrc.html