Re: [ml] bug research

break 0x90 wrote:
> Sono sempre rimasto affascinato dal reversing in generale, ....

> Mi sono sempre chiesto come si ricercano vulnerabilita' in software closed
> inquanto non e' possibile fare l'auditing dei sorgenti, se non facendo il debug.
>   


Segnalo solo che il reverse engineering in molti casi é illegale.

ad esempio:

http://www.microsoft.com/windowsxp/home/eula.mspx
4. LIMITATIONS ON REVERSE ENGINEERING, DECOMPILATION, AND DISASSEMBLY. 
You may not reverse engineer, decompile, or disassemble the Software, 
except and only to the extent that such activity is expressly permitted 
by applicable law notwithstanding this limitation

http://www.sun.com/software/solaris/licensing/sla.xml
5. Restrictions.
(d) Unless enforcement is prohibited by applicable law, you may not 
decompile, or reverse engineer Software.

http://www.oracle.com/technology/software/popup-license/xe-license.html
You may not:
- cause or permit reverse engineering or decompilation of the programs;


ciao



--
Marco Misitano | http://misitano.com

--
Marco Misitano | http://misitano.com