full-disclosure - Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: nicob at nicob.net (Nicob)
Subject: Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties,
 Technical details, Exploits ...)

On Fri, 2004-04-09 at 18:51, Chris Wysopal wrote:

> >From: "Richard M. Smith" <rms@...puterbytesman.com>
> >
> >Would this new French law apply to an American (or other foreigner) who
> >travels to France for business or on a vacation if this person has
> >published exploit code on a Web site?
> 
> Will it apply to any web site with exploit code/tools accessible from
> France?

>From the Yahoo case, it seems that the simple fact of providing to
French users something forbidden in France (here nazi materials) is
forbidden.

In France, presumption of innocence is the rule, expect for hacking. In
this case, the fact of manipulating tools is enough :

* you* now have to provide a *legitimate reason* in order to "hold,
offer, yield, place at the disposal [tools] conceived or especially
adapted to make the facts envisaged by articles 323-1 to 323-3",
articles 323-1 to 323-3 being the classical French anti-hacking laws.

-- 
Nicob <nicob@...ob.net>