Fedora Board Recap 2010-11-08

Rahul Sundaram metherid at gmail.com
Tue Nov 9 23:46:29 UTC 2010


On 11/10/2010 04:13 AM, Ricky Zhou wrote:
> On 2010-11-09 09:11:43 AM, Jared K. Smith wrote:
>> In the case of this particular application, it seems the authors have
>> gone out of their way to say "This is a tool for automating SQL
>> injection attacks so that you can exploit someone else's system", and
>> as such, does open Fedora up to some legal risk.  I'm not a lawyer,
>> but I know Spot (as the official Fedora legal representative) well
>> enough to know that if it makes him nervous, that I should probably be
>> a bit nervous as well.
> I disagree a bit here - while the author is very explicit about what the
> tool actually does, I think he makes it pretty clear as well that it's
> targetted at penetration testers.

I agree with this.   Unless Red Hat Legal has a strong opposition to
it,  I would ask the board to reconsider.  

Rahul


More information about the advisory-board mailing list