On 15-Jan-2013 16:45:30 -0500, valdis.kletni...@vt.edu wrote:

 > > Also, what stops a person to file it under a company name if
 > > that's easier? I admit I'm not into this area, so I might be
 > > missing something fundamental...

 > If you publish an exploit as "BitWizard97", and somebody scarfs
 > it up and starts selling it,

Starts selling what? Already published exploit? Bwahahaha...

 > filing the suit to enjoin them from selling it without your
 > permission under a company name doesn't make it any easier
 > to prove that you, or the company, have any legal standing
 > to represent BitWizard97.

Digital signatures may help. Actually, you don't need to prove
that you are the BitWizard97 - you only need to prove that you
can act on his behalf (that means: read encrypted messages and
sign the replies with his key).

 > It's especially problematic if the local law enforcement
 > authorities want to have a little chat with BitWizard97
 > regarding some other activities...

They should want to ask those questions to another person -
say, BitBreaker12, who may be suspected in something illegal.


-- 
Alexey V. Vissarionov aka Gremlin from Kremlin <gremlin ПРИ gremlin ТЧК ru>
GPG key ID: 0xEF3B1FA8, keyserver: hkp://subkeys.pgp.net
GPG key fingerprint: 8832 FE9F A791 F796 8AC9 6E4E 909D AC45 EF3B 1FA8

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Reply via email to