[Full-Disclosure] Re: Full-Disclosure is now ILLEGAL in France ! (Vulnerabilties, Technical details, Exploits ...)

[Nicob <nicob@xxxxxxxxx>]

On Fri, 2004-04-09 at 18:51, Chris Wysopal wrote:

> >From: "Richard M. Smith" <rms@xxxxxxxxxxxxxxxxxxxx>
> >
> >Would this new French law apply to an American (or other foreigner) who
> >travels to France for business or on a vacation if this person has
> >published exploit code on a Web site?
> 
> Will it apply to any web site with exploit code/tools accessible from
> France?

>From the Yahoo case, it seems that the simple fact of providing to
French users something forbidden in France (here nazi materials) is
forbidden.

In France, presumption of innocence is the rule, expect for hacking. In
this case, the fact of manipulating tools is enough :

* you* now have to provide a *legitimate reason* in order to "hold,
offer, yield, place at the disposal [tools] conceived or especially
adapted to make the facts envisaged by articles 323-1 to 323-3",
articles 323-1 to 323-3 being the classical French anti-hacking laws.

-- 
Nicob <nicob@xxxxxxxxx>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html