bugtraq - Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20040405154544.31482.qmail@search.securityfocus.com>
Date: 5 Apr 2004 15:45:44 -0000
From: K-OTiK Security <Special-Alerts@...tik.com>
To: bugtraq@...urityfocus.com
Subject: Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France


In-Reply-To: <20040403225951.GA3424@...sus.org>


>From: Renaud Deraison <deraison@...sus.org>
>Subject: Re: Bugfinder Being Indicted As Criminal ("Counterfeiter") in France
>
>This article now reads (roughly translated) :
>
>"Art. 323-3-1. - The fact of offering, of yielding or of placing at the
>disposal a data-processing program conceived to commit the offences
>envisaged by articles 323-1 to 323-3 is punished sorrows planned for the
>infringement itself or the infringement most severely repressed "
>
>This article is not applicable when the offering, the yelding or
>the placing at disposal is justified by the needs of scentific or
>technical research or by the needs of the security or protection
>of communication networks or information systems"
>
>[http://www.telecom.gouv.fr/internet/projet_len.html]
>
>Of course, the "needs" in question are a purely subjective notion, 
>which means that if a french citizen publishes an exploit, 
>he must expects to argue in front of a judge why doing so was 
>needed.

The second part of the article "..is justified by the needs of scentific or technical research .." do not exist any more (removed during the last vote).

They just added "This article is not applicable when the offering, the yelding ... is not intentional" (to protect hacked, or infected people).

http://www.senat.fr/leg/pjl03-144.html

Chaouki Bekrar - Security Consultant
http://www.k-otik.com