From the government's perspective, posting to BugTraq has the same effect as sending the email to the users. That effect is notifying would-be script-kiddies of the vulnerability, thus "impairing the integrity" of the network. Since this effect is the "probable" outcome of either action, it is defined by federal statute to be your intent in performing either action. As such, you could be prosecuted under the same statute for posting to BugTraq. This implication is why the author writes in the third paragraph, "If it does, it could mean a dramatic decline in postings to Bugtraq, CERT, or other public fora. "

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/179/21816#21816