Legal Aspect of Pentesting / CyberCrime Treaty

From: Christoph Puppe (puppe@hisolutions.com)
Date: Wed Sep 27 2006 - 04:09:27 EDT


Salve,

in Germany we are about to implement the cybercrime treaty in local law
with the number § 202 c. This change will make the possession, trafficking,
making available and producing of tools with the *intention* for hacking
and snooping traffic an offense punishable with up to a year in prison.

My questions for the list:

# does your country has implemented this treaty as well?
# what was your experience?

In my understanding, if we may not publish exploits to the web in general
anymore, we need new ways to trade them. The bad guys will do this as they
have always done. Now the professional pentesters need a B2B platform to
get this tools of the trade. The AV guys have done this right from the
start, with closed groups for exchange of new malware.

In the hope for a fun discussion!

-- 
Mit freundlichen Grüßen
Christoph Puppe
Security Consultant
We secure your business.(TM)
_______________________________________________________
HiSolutions AG     Phone:    +49 30 533289-0
Bouchéstrasse 12   Fax:      +49 30 533289-99
D-12435 Berlin     Internet: http://www.hisolutions.com
____________________________________________________
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:01 EDT