Re: [ml] bug research

On Wed, 2008-04-16 at 23:00 +0200, marco misitano wrote:
> break 0x90 wrote:
> > Sono sempre rimasto affascinato dal reversing in generale, ....
> 
> > Mi sono sempre chiesto come si ricercano vulnerabilita' in software closed
> > inquanto non e' possibile fare l'auditing dei sorgenti, se non facendo il debug.
> >   
> 
> 
> Segnalo solo che il reverse engineering in molti casi à illegale.
> 
> ad esempio:
> 
> http://www.microsoft.com/windowsxp/home/eula.mspx
> 4. LIMITATIONS ON REVERSE ENGINEERING, DECOMPILATION, AND DISASSEMBLY. 
> You may not reverse engineer, decompile, or disassemble the Software, 
> except and only to the extent that such activity is expressly permitted 
> by applicable law notwithstanding this limitation
> 
> http://www.sun.com/software/solaris/licensing/sla.xml
> 5. Restrictions.
> (d) Unless enforcement is prohibited by applicable law, you may not 
> decompile, or reverse engineer Software.
> 
> http://www.oracle.com/technology/software/popup-license/xe-license.html
> You may not:
> - cause or permit reverse engineering or decompilation of the programs;


E io ti segnalo che queste clausole sono spesso semplicemente nulle in
molte condizioni:
vedi LdA art 64 quater ad esempio. (come infatti sono costrette a
riconoscere queste clausole "Unless enforcement is prohibited by
applicable law", ecc..)