full-disclosure - IE7 Zero Day

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4461FD79.7020105@sdf.lonestar.org>
Date: Wed May 10 15:49:39 2006
From: bkfsec at sdf.lonestar.org (bkfsec)
Subject: IE7 Zero Day

0x80@...h.ai wrote:

>The vulnerabilities I have for sale could be used in such a way but 
>I am in no way responsible for what the purhcaser uses it for.  Are 
>bullet manufacturers responsible when someone shoots someone else?
>
>
>  
>
You don't understand the law in most Western countries very well 
(although you may not be from a Western country).  But in most 
countries, intent and motive count. 

Is the bullet manufacturer responsible just because they sold the 
bullet?  No. 

But, if the same bullet manufacturer sold bullets and advertised them as 
"for mugging and killing people" then yes, they would be party to the 
crime in most nations.  So, yes, if your exploit were to be used to 
commit a crime, at this point in time since you have promoted its sale 
for that purpose, you would be party to the crime in a number of nations.

          -bkfsec