Metasploit mailing list archives

Criminalisation of security tools


From: jerome.athias at free.fr (Jerome Athias)
Date: Wed, 28 Mar 2007 20:45:11 +0200

0x90 at hushmail.com a ?crit :
Framework 3.0 release is all over the news. I came across 
http://www.heise-security.co.uk/news/87442 and what I found 
interesting is the last paragraph that states:

"However, recent amendments to information security legislation, 
which include the criminalisation of the manufacture, provision, 
distribution or procurement of hacker tools will make the use of 
tools such as Metasploit problematic. It could even become unlawful 
to perform internal tests to check the security of your system or 
to check whether vendor patches really fix vulnerabilities as 
promised."

Going back to typical "Security through obscurity" approach? 
Anyway, I never heard about such legislation. If true, which 
state(s) will adopt it? Anyone has more info?
  
For UK, i don't know. But in France and Deutschland it is the case. :-(
Cheers,
/0x90

PS: HD Moore, thank you very much for such a great tool.
  
True! :-) Thanks to all the Metasploit Team and community

/JA



Current thread: