[Full-disclosure] SecurityFocus Article

2008-03-10 Thread

This might interest people in europe.





The Laws of Full Disclosure

by Federico Biancuzzi
2008-02-26

Full disclosure has a long tradition in the security community worldwide,
yet different European countries have different views on the legality of 
vulnerability research. SecurityFocus contributor Federico Biancuzzi 
investigates the subject of full disclosure and the law by interviewing lawyers 
from twelve EU countries: Belgium, Denmark, Finland, France, Germany,Greece, 
Hungary, Ireland, Italy, Poland, Romania, 
and the UK.
http://www.securityfocus.com/columnists/466

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] SecurityFocus Article

2007-07-11 Thread coderman
On 10 Jul 2007 22:40:09 -, [EMAIL PROTECTED]
<[EMAIL PROTECTED]> wrote:
> ...
> Germany is passing some new laws regarding cybercrime that might affect 
> security professionals.

"""
Q: I have heard from multiple sources that one of the worst aspects of
the new laws was that security tools such as nmap (a port scanner),
would become illegal. Just having them on your computer will be
enough. Is it true? Every detail about this topic would be
appreciated...

Marco Gercke: The risk is there. Unlike Art. 6 of Convention on
Cybercrime, Paragraph 202c Penal Code does not limit the
criminalisation to tools that are primarily designed to commit certain
computer crimes. Therefore it will be necessary to wait for the first
verdicts. It is very likely that the courts will limit the application
of the software with the result that the possession without link to
criminal activities will not be punished.
"""

this bullshit has already brought the end of phenoelit and ROCKate.
more to come, surely.

"very likely to limit application to criminal activities" doesn't give
much confidence in the face of a government antagonistic toward
security research and privacy enhancing technology.

http://www.phenoelit.de/202/202.html
http://archives.seul.org/or/talk/Jul-2007/msg00044.html

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


[Full-disclosure] SecurityFocus Article

2007-07-11 Thread

If you live outside Germany and think this doesn't affect you, wait!

The Convention
 on Cybercrime was signed by non EU and non European countries too, 
and East European Countries as well as African and Arabic countries are 
planning to sign and ratify the Convention.

You can read learn more reading the 
FAQ 
hosted by the United States Department of Justice, or the 
comments by 
EPIC (Electronic Privacy Information Center).





Achtung! New German Laws on Cybercrime

by Federico Biancuzzi
2007-07-10

Germany is passing some new laws regarding cybercrime that might affect 
security professionals. Federico Biancuzzi interviewed Marco Gercke, one of the 
experts that was invited to the parliamentary hearing, to learn more about this 
delicate subject. They discussed what is covered by the new laws, which areas 
remain in the dark, and how they might affect vulnerability disclosure and the 
use of common tools, such as nmap.
http://www.securityfocus.com/columnists/448

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/