Full Disclosure mailing list archives
Re: Cisco's stolen code
From: Tobias Weisserth <tobias () weisserth de>
Date: Tue, 25 May 2004 18:08:52 +0200
Hi Brian, On Tue, 2004-05-25 at 17:28, Brian Toovey wrote: ...
Calm down - While I think it was kind of ignorant to post here asking for code and not grep IRC, I dont think this was "not sticking to the rules" or "not playing the game." If and when this source becomes available I hope decent coders will audit to find vulns and post here - if whitehats dont audit the code, who will? I find your response more ignorant.
Well, let's face the simple facts. Cisco's code is copyrighted and it's illegal to copy it, distribute it or even use it. There's no way around it. Whatever your intentions are the Cisco code is legally off-limits. This may stink and it may hinder security audits but if Cisco wanted you or anybody else to audit their code they would have licensed it to you. Since they didn't, this leaves you in a very shitty position if you touch their code. You may be able to find security flaws but you have broken laws to do so. Period. For me, breaking laws is NOT acceptable under ANY circumstance. I hope the majority of people on this list is with me on this. If this list evolves into a meeting place where copyrighted code is "negotiated" and its distribution organised then our goal of full disclosure of security flaws in IT is not met. You can't improve security by breaking laws. This renders this list and everybody posting here untrustworthy. If you want to audit code then stick to the code that is released under licenses that allow public code auditing. Don't even think to look at code that hasn't be released under an open license. Maybe this will motivate more vendors to license their products under an Open Source license. regards, Tobias W. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Securitytrap updated vertex (May 25)
- Cisco's stolen code B$H (May 25)
- RE: Cisco's stolen code Simon Hailstone (May 25)
- Re: Cisco's stolen code Tobias Weisserth (May 25)
- Re: Cisco's stolen code VX Dude (May 25)
- Re: Cisco's stolen code Brian Toovey (May 25)
- Re: Cisco's stolen code Tobias Weisserth (May 25)
- Re: Cisco's stolen code Nathan Bates (May 25)
- Re: Cisco's stolen code Brian Toovey (May 25)
- Re: Cisco's stolen code Seth Alan Woolley (May 25)
- Re: Cisco's stolen code Valdis . Kletnieks (May 25)
- Re: Cisco's stolen code Seth Alan Woolley (May 26)
- Re: Cisco's stolen code roman . kunz (May 26)
- Re: Cisco's stolen code Tobias Weisserth (May 26)
- Re: Cisco's stolen code Dave Horsfall (May 26)
- Cisco's stolen code B$H (May 25)
- Re: Cisco's stolen code ktabic (May 26)
- Re: Cisco's stolen code Azerail (May 27)