Penetration Testing mailing list archives

Re: Reverse Engineering - Legality


From: AK <platsakos () gmail com>
Date: Thu, 01 Jul 2010 02:10:52 +0300

(from the sec-research dept.)
RE, EULA allowed or not, is a perfectly valid way to spot
vulnerabilities/assess code quality. I have done RE within the framework
of pen-tests and I have done RE in my "leisure time"

Go ahead for it and do not worry about the legalities!


On 06/30/2010 05:23 PM, chintan dave wrote:
Hi Experts,

I need a small help from you.

Is RE legal for security assessments of products purchased from vendors?

There has been a bit of confusion around RE topic.

I know it is illegal to do RE to steal the idea, however this one, I
need feedback from you folks.

If you can share some authoritative resources that could confirm on
the legality/illegality, it would be great.

  


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: