full-disclosure - FrSIRT Puts Exploits up for Sale

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.58.0603170831370.5180@dione>
Date: Fri Mar 17 07:44:24 2006
From: lcamtuf at dione.ids.pl (Michal Zalewski)
Subject: FrSIRT Puts Exploits up for Sale

On Fri, 17 Mar 2006 rembrandt@...erlin.de wrote:

> If you puplish something without a license it is OPEN DOMAIN
> That means people can use it, modify it, sell it...

That's nonsense. If I publish a book or a photo or a newspaper article
without a lengthy license attached, you can copy it at will, too? The
requirement of a license or a copyright notice is a long-running myth - it
is good to have these, but they are not a legal requirement.

All your private writing, recording, coding, photography, etc is protected
by copyright, period. Unless you explicitly allow others to use your work,
it is not legal to do so, with certain specific common-sense exceptions
(fair use clauses vary from place to place, but usually involve
applications that are either entirely non-commercial, or benefit the
society).

In some places, it can be successfully argued that by deciding to release
information during a press conference, on a mailing list, etc, grants some
entities an implicit permission to do certain things with that
information, but it's generally rather tricky (and subject to individual
interpretation by the court). In any case, this just means that because
you posted to a mailing list, the server can reasonably process and store
your message, and distribute it to the intended audience. It does not
necessarily mean that others can grab it for unrelated purposes and sell
it to third parties.

/mz