full-disclosure - Symantec wants to criminalize security info sharing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: andy.wood at sptrm.com (Andy Wood)
Subject: Symantec wants to criminalize security info
	 sharing

	This is why SecurityFocus should not be considered a reliable
source.  

-----Original Message-----
From: Richard M. Smith [mailto:rms@...puterbytesman.com] 
Sent: Thursday, September 11, 2003 9:47 AM
To: full-disclosure@...ts.netsys.com

Hi,

Here's an interesting quote from John Schwarz, the COO of Symantec, in a
Wired.com article from today:

   Just Say No to Viruses and Worms
   http://www.wired.com/news/infostructure/0,1377,60391,00.html

   "But perhaps the most controversial suggestion came 
   from John Schwarz, president and COO of antivirus 
   firm Symantec, who called for legislation to criminalize 
   the sharing of information and tools online that can be 
   used by malicious hackers and virus writers." 

As we all know, when it comes to discussing information about computer
security vulnerabilities, it is difficult to separate security uses of this
information and hacking uses of the same information.

For example, if Symantec were to get this law passed, are they prepared to
see their employees who work on the Bugtraq email list go to jail?
;-)

Richard M. Smith
http://www.ComputerBytesMan.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html