[Blake]

Quote

Why not make guns illegal or soldiers they could be used for bad things as well.

In some places they are ;)

hmm, plz avoid some strange comparaison likes guns ^^ (guns must be reserved to militaries or policeman, since it's dangerous)

I agree we aren't talking firearms here, but I don't agree they should be kept to the military or police. I was loved target shooting before I was in the military, and I have continued to love it since I seperated from the military. Fire arms don't kill people, people kill people. (hoe cliche is that :lol: )

Quote

looks like the French will be stepping back into the dark ages again. Back to a time when the bad guys could get together in a physical location, find exploits, and use them for ages without the security communities knowing they exist.

This is exactly what will happen. If anyone can remember this far back. (You have to be older than 16, no offense) Passing phone number back and forth to your friends or via fidonet to the best hacker bbs's which most of the time were hosted on warez boards. So sad in those days a 0 day vuln would be that way for months or years. At least now admins have a fighting chance. Hopefully the U.S. will think a little harder about this one, or else I might be out of a job.

[strohunter]

maybe its caused by my crappy english :lol:

like the source code of a patented standard, the patents apply on the binary only, not the source code, because you can't direcly use the source code, you have to make a binary first. I hope releasing the code source of a security scanner for example will stay legal, because you can't directly attack with a source code, you have to make the software first, and then you're are responsible.

But that was just a supposition.

[Killaloop]

you should rename this topic to: France about to ban ..
since this one still needs to hit the parliament before and there is no date in the article.

also this article talks about unlegitimate (we all know this word) use. so research and development will still be possible but you cannot make it public as before. so lets say only network admin can register on certain sites and review the information and download tools. anyone else knowing about the vulnerabilities is a criminal to this fact.
and also note: if this gets real everyone hit by a virus (and you will be hit since how would you know of a new vulnerability in france) is directly responsible for the harm his computer did to others.
meaning a privat person in france is not allowed to use vuln scanners, but once hit by a virus he gets into serious problems because his PC "autohacked" someone else.

this is the most stupid stuff I have ever read. but again, the last word isn't spoken!

[SCVirus]

Hypothetical situation.
All forms of full disclosure are banned across the world, if there is a security vulnerabilty the vendor fixes it when and if they find it, there are no public databases of vulnerabilities to warm admins before vulnerabilities are patched. However that does not change the ease of finding vulnerabilities. Any person who finds a unique vulnerability can exploit servers without being stopped, after all no one could disclose the vulnerability.

[Gurou]

yesterday the the "commission paritaire mixte" approved this law.

so it will be an official law before the end of this summer :angry:

full disclosure is dead in france ...

[Killaloop]

Gurou, on May 1 2004, 09:15 PM, said:

yesterday the the "commission paritaire mixte" approved this law.

so it will be an official law before the end of this summer :angry:

full disclosure is dead in france ...

it has really happened?
how stupid can they be.
did the line about that you are directly responsible for what your computer causes to others, even when used by a 3rd person/worm/bot, also pass?
that's not much fun for france computer owners in future.

[Nexcess]

Yeah, but fortunatly they cant police the whole internet so all the frenchies have to do is scamper over to babbelfish translations or a page like it and translate exploit pages to french :) Not like most people on the internet gives a flying one about what the government says they can or can't do :D

[8XyuVmUB]

I would ask you the following question. How are they really going to stop full disclosure from happening? There not. The internet does not stop at their borders. I will never be stopped.

[nemesis]

Quote

This article takes as an hostage the experts in computer security, consultants, journalistes/r�dacteurs of specialized, and enquiring magazines of faults. It is not thus possible any more to publish the technical details of a vulnerability, to publish or handle tools allowing the intrusive tests or the audits of safety... without being guilty of piracy or complicity of piracy!

totally right, but no one accepts it.

I live in france (belgian though :D ) and the magazines still publish source codes of virusses, exploits and whatever you want. The problem here (like they did many times before :angry: ) is that they vote laws without consulting the appropriate professionals. They always fight the problem in the wrong way, worse : in this case, there is no problem. We NEED 'any color' hats in order to progress in IT security. But they don't get it, i wonder if any deputee even knows what's a "port" :lol: So, any person having such a program will be punished as if he broke into a firm. Totally crazy!!!

An other example :
cannabis, in france, there is the highest concentration of weed consumers, but also the hardest repression.

sharing (emule etc.. ): a 61 year old person just got 3 months of prison and has to pay 6000€ for illegal downloading. A raper can get less (yes.. things aren't normal overhere).

So now you have a better view of France. It's going from bad to worse over here. I wonder when it will stop. I have no information concerning any future revisions of this law. But i'll keep my eyes and ears open. Anyways, all the security magazines will continue their job like they did, event it's illegal. :)

OK, some new infos :(rough traduction)This will be the wew text. Has to be approved though.

Quote

Detaining such programs will be possible only if you do research, IT security AND if they're hold by any public or private organism having proceeded to a declaration of this at the prime minister.

Wahoo, what a change. They still don't get that there are more "persons" who detain such programs than organizations. And if there were only the organizations, we still had a win98 like OS filled with holes :lol:. ANd i'm a lawbreaker, because i Have knoppix-std :huh: I will quit writing because it's getting on my nerves this french system.. <_<

[neb]

As french i must reply to this ....

I am disapointed by this new law , why ?

Most software companies can deliver us some real shit programms and everybody must buy it and say it s amazing look this is really good programms .....
This law is just a flash back 500 years ago when Inquisition said , read this book it's for ur culture it s good , don t read this one it s evil and writers will go in hell by our hands !
What s more !?

Tommorrow i ll buy a car with no brakes , crashing my ass and said Yeah this is a really good car , BUY IT !

now hackers must react to it because hackers are here for denounce the manipulations too !

PS : God please don t save The french Senators (Senils) !

[o0oKARo0o]

As usual, what else can we expect from those people, french always tried to be the united states of europe but in europe, everyone can�t stand them due to their stupid behaviuor, once more, they have demonstrated that they are a pain in the @ss
By the way, they aren�t any senators in france ;)

[nebojsa]

What sort of reply i must do for this :blink: :

Quote

As usual, what else can we expect from those people

Quote

everyone can�t stand them due to their stupid behaviuor

did ur mama f****d with French o0oKARo0o, or du have something special against French people to say this !?

Stop making generality plz !


(Xcuse me for my nervous bad english !)