Legal Issues

by Mike Masnick

Imprison The Messenger

from the how-nice dept

Why does this keep happening? Security professionals publish info on some kind of exploit, and instead of people looking to the software company that designed bad software as being the problem, everyone blames the person who outed the vulnerability. Obviously, there is a question of whether or not a security researcher should first inform the company in question of a vulnerability, but the idea of blaming the messenger is absolutely ridiculous. It's a "head in the sand" approach, which guarantees that (a) security holes stay open longer and (b) it's easier for those who want to exploit holes for malicious purposes to use them. Over in France, a researcher who published some vulnerabilities is now facing jailtime for revealing some security flaws in an anti-virus program, and noting that their claim to protect users from 100% of viruses was clearly false. The company in question isn't suing him for some sort of security breach, but for copyright infringement. Yes, apparently, the company is using copyright infringement not to protect their intellectual property, but to defend the reasons why they wanted to keep their software insecure for a longer period of time.

Reader Comments

Subscribe: RSS

View by: Time | Thread

Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Use markdown for basic formatting. HTML is no longer supported.
  Save me a cookie
Follow Techdirt
Techdirt Gear
Shop Now: Copying Is Not Theft
Report this ad  |  Hide Techdirt ads
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Chat
Report this ad  |  Hide Techdirt ads
Recent Stories
Report this ad  |  Hide Techdirt ads


Email This

This feature is only available to registered users. Register or sign in to use it.