full-disclosure - Publishing exploit code ruled illegal in France?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050310092846.GD21170@DAPCVA.da>
From: varcher at denyall.com (Vincent Archer)
Subject: Publishing exploit code ruled illegal in France?

> in France some strange things happen:
> http://www.zdnet.com.au/news/security/0,2000061744,39183862,00.htm
...
> Researchers that reverse engineer software to discover programming flaws 
> can no longer legally publish their findings in France after a court 
> fined a security expert on Tuesday.

Well, if you get to read the exact ruling, you'll find out that the
decision of the court was based chiefly on the fact that the researcher
did all his work on an "unlicensed" copy of the software (read "pirate
copy"), not because he did reverse ingineering on it.

You can lawfully reverse engineer software you legitimately own, but not
the one you don't.

-- 
Vincent ARCHER
varcher@...yall.com

Tel : +33 (0)1 40 07 47 14
Fax : +33 (0)1 40 07 47 27
Deny All - 5, rue Scribe - 75009 Paris - France
www.denyall.com