Re: [Full-disclosure] IE7 Zero Day

[bkfsec <bkfsec@xxxxxxxxxxxxxxxx>]

0x80@xxxxxxx wrote:

> The vulnerabilities I have for sale could be used in such a way but 
> I am in no way responsible for what the purhcaser uses it for.  Are 
> bullet manufacturers responsible when someone shoots someone else?
>
>
>  
You don't understand the law in most Western countries very well 
(although you may not be from a Western country).  But in most 
countries, intent and motive count. 

Is the bullet manufacturer responsible just because they sold the 
bullet?  No. 

But, if the same bullet manufacturer sold bullets and advertised them as 
"for mugging and killing people" then yes, they would be party to the 
crime in most nations.  So, yes, if your exploit were to be used to 
commit a crime, at this point in time since you have promoted its sale 
for that purpose, you would be party to the crime in a number of nations.

         -bkfsec


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/