Are DDoS attacks legal in many countries?