>Look: a bread knife can be put to good as well as >to bad uses. Still, the bread knife isn't illegal >/per se/. Killing someone with it is, of course.

>Knowledge about flaws is all the same. You nay >use this knowledge to avoid security holes, to >fix the product or (GASP!) to avoid the product >altogether. Is that illegal?

You don't make a convincing argument with your butter knife analogy. It is very difficult to compare physical objects to computer-based technology. Going along you unfitting analogy, taking a butter knife on an airplane used to be forbidden. (until just recently)

This vulnerability could be used improperly. If the winner of the auction chose to use the vulnerability for a virus, it's possible that no one else would find out until a considerable amount of damage was caused. Don't use a comparison of a butter knife. Depending on the specifics of this vulnerability, this problem could cause damage. It's not beneign.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11363/32863#32863