full-disclosure - VBScript/JScript.Encode Decoder

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3F69C12F.5000801@onryou.com>
From: lists at onryou.com (Cael Abal)
Subject: VBScript/JScript.Encode Decoder

> i ( we ) ( illmob.org ) released the first windows compiled rpc-dcom exploit
> into the wild weeks before msblaster used the basic version of this, and we
> live in the US.
> since when did releasing non propagating code constitute a crime???
> 
> morning_wood

I'm not a lawyer but as far as I know tools which can be used for
Circumvention of Copyright Protection Systems are expressly forbidden by
the US Digital Millenium Copyright Act.  It could be argued that
Andreas' VBS decrypt tool released Tuesday is one of these.  I wasn't
commenting on the legality of exploits, just Andreas' VBScript /
JScript.Encode Decoder tool.

My comment was really only me poking a bit of fun at US laws -- that of
all the ethically-dubious information which come through
Full-Disclosure, something so innocent as Andreas' pascal code might be
actually be illegal.  Remember Sklyarov?

take care,

Cael

> ----- Original Message -----
> From: "Cael Abal" <lists@...you.com>
> To: <full-disclosure@...ts.netsys.com>
> Sent: Tuesday, September 16, 2003 8:25 PM
> Subject: Re: [Full-Disclosure] VBScript/JScript.Encode Decoder
> 
>>>VBS_DEC.PAS ->
>>>
>>>program vbs_dec;  { Decrypts encrypted VBScript and JScript programs }
>>>                  { Copyright (c) 09/2003 Andreas Marx /
>>>http://www.av-test.org }
>>
>>Greetings Andreas,
>>
>>I hope you aren't intending to visit the US any time soon -- you've just
>>released into the wild a tool which can be used for Circumvention of
>>Copyright Protection Systems.
>>
>>Yay, DMCA!
>>
>>(Thanks, by the way.)
>>
>>Cael