full-disclosure

Open Source and information security mailing list archives

Message-ID: <20140406082414.GA27357@kludge.henri.nerv.fi>
Date: Sun, 6 Apr 2014 11:24:14 +0300
From: Henri Salo <henri@...v.fi>
To: Toni Korpela <admin@...fork.com>
Cc: fulldisclosure@...lists.org
Subject: Re: [FD] Legality of Open Source Tools

On Sat, Apr 05, 2014 at 01:23:51PM +0300, Toni Korpela wrote:
> Greetings from Finland.
> 
> I know that here it is illegal to import, manufacture, sell
> or otherwise distribute such machine or software which
> are designed to endanger or harm information and
> communication systems.
<snip>

Basic examples, which I have personally encountered:

1) Not allowed to port scan. Some ISPs are already monitoring and warning users
in case they do port scanning, but the reason for alerting might only be that
they monitor and try to get rid of malware in their networks.
2) Not allowed to list vulnerable systems. I can't for example list all
non-updated WordPress installations with their version numbers even this
information is available to anyone.

---
Henri Salo

Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives