Printable View
LAS VEGAS--Security researchers and black-hat hackers could face legal troubles if they publish detailed information about vulnerabilities and exploits, according to a presentation at a conference
Read the full story here http://news.com.com/2100-1009_3-5058918.html?tag=fd_top
SO MUCH FOR THE 1RST AMMENDMENT.....
I agree with full disclosure and think its the best way for system admins to understand what exactly the exploit is all about, and how to patch it. But I have heard it discused that code should'nt be considered a freedom of speech because it can be compiled into a working distructive program. An example i heard it compared to is someone writing a tutorial discribing how to build a bomb, and supplying the parts needed to complete the task. I totaly disagree with this but was wondering what everyone here thought.
I believe that we should know what the exploit effects, and what causes it. I believe that it would just make it harder for admins to effectively patch their systems.
Think about it. It would be like telling a sys admin that there is a exploit out that if executed properly will bring down an entire network, but not tell him how it works, and what area it effects. This would pretty much leave us guessing what is vulnerable.
But thats just my opinion.
And also, who's going to follow such rules? The good guys, white-hats and the security specialists. And who's not going to follow the same rules. The bad guys, the crackers and script kiddies. And so who's going to suffer?
Well as and old person in age here all I can say is under the Home Land Security act and what the gov can do. I'd say they had the ways and means to know of 9/11 and sort of let the ball go flat let alone pass info interagency. Fact is the bill of rights has been eroded steped on and pushed aside in the name of National Security. One of my new bosses happened to be intered during WWII in America for nothing more then being or shall we say his parents immigrated from Japan. Research info now cannot be read many things not published and the goverment only has to say you posed a threat to National Security now, forget talking to an attorney in private the gove here has now gave it's self the right to listen. So voting is on in a year elect whom ya want to but vote and after 30 years of voting ask hard questions. World is not gonna change because of an OS, or hunks of wire and chips. Infom yourself of the issues at hand, the media just spins it all for viewing numbers. It is a sad time in America is my belief for our rights our bill of rights so much eroded...I gotta go hug a tree <---my humor actually gonna go vote. CA hope Arnold Pumps Ya Up...lol
freedom of speech should still be the #1 priority. for every person that knows how to build a bomb, theres 10(example) that don't. this leaves them defenseless and vulnerable. You need to know specifics, to compete or defend. someones eventually gonna get the info., their just delaying the inevitable.(don't think i spelt that rite)
If Hackers and security professionals don't publish their findings the holes will go unpatched and alot of systems will become compromised. then all hell is going to break lose and then alot of pissed off people will start pointing fingers at courts and legislators for saying you can't publish the security vulnerabilities you found.
By the way pixiepunk you did spell it right :)