Full Disclosure mailing list archives
Re: InfoSec sleuths beware, Microsoft's attorneys may be knocking at your door
From: Blue Boar <BlueBoar () thievco com>
Date: Wed, 18 Feb 2004 13:06:44 -0800
Bernie, CTA wrote:
Could Microsoft's attorneys go after sleuths who are, have been disclosing vulnerabilities in Microsoft's software and allege that the individual had discovered the vulnerability because they downloaded the code and examined it? Good tactic to impede pen testing, security research, or disclosure of security threats, which in the past have cast a ominous shadow on MS, is it not? It may be wise for security sleuths to fully document their vulnerability / exploit discovery process, when, how, what, why. I'm sure Microsoft's attorneys will be serving production of documents request upon a select group. Note that under US Federal law, limited discovery to perpetuate testimony regarding any matter can be performed before a lawsuit is actually filed.
There are clear, admitted cases of reverse engineering by vulnerabiity researchers, which are prohibited by EULA, and which MS has so far declined to pursue. Why should this be different? MS afraid the EULA restrictions wouldn't hold up? BB _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- InfoSec sleuths beware, Microsoft's attorneys may be knocking at your door Bernie, CTA (Feb 18)
- Re: InfoSec sleuths beware, Microsoft's attorneys may be knocking at your door Blue Boar (Feb 18)
- Re: InfoSec sleuths beware, Microsoft's attorneys may be knocking at your door Cael Abal (Feb 18)
- Re: InfoSec sleuths beware ... Gregory A. Gilliss (Feb 18)
- Re: InfoSec sleuths beware ... Nancy Kramer (Feb 18)
- RE: InfoSec sleuths beware ... Aditya, ALD [Aditya Lalit Deshmukh] (Feb 19)
- Re: InfoSec sleuths beware ... madsaxon (Feb 18)
- Re: InfoSec sleuths beware ... Byron Copeland (Feb 18)
- Re: InfoSec sleuths beware ... madsaxon (Feb 18)
- Re: InfoSec sleuths beware ... Exibar (Feb 19)
- Re: InfoSec sleuths beware ... Dave Horsfall (Feb 19)
- Re: InfoSec sleuths beware, Microsoft's attorneys may be knocking at your door Blue Boar (Feb 18)