all 26 comments

sorted by: hot top controversial new old
[–] 65 points 3 months ago (16 children)

is this in reference to something Im not aware of?

  • source
  • hideshow 16 child comments
  • [–] [S] 113 points 3 months ago (14 children)

    It's just the German law.

    Like... that's how it is. In Germany.

    Magazine of the German association of computer scientists recently did an article on it and we provided this... commentary.

  • source
  • parent
  • hideshow 14 child comments
  • [–] 43 points 3 months ago (13 children)

    What is the law? That you can’t prepare against cyber attacks?

  • source
  • parent
  • hideshow 13 child comments
  • [–] 83 points 3 months ago (4 children)

    You need to know how to carry out a cyberattack before you can devise a way to stop it, so CS students need to be taught how to do cyberattacks to learn about cybersecurity.

  • source
  • parent
  • hideshow 4 child comments
  • [–] [S] 34 points 3 months ago* (6 children)

    That you can't get or distribute or enable people to get applications that could enable people to commit cyber attacks.

    Just sent the paragraph through deepl:

    Any person who prepares to commit a criminal offense under Β§ 202a or Β§ 202b by

    1. producing, obtaining for oneself or another, selling, transferring to another, distributing, or otherwise making available passwords or other security codes that enable access to data (Β§ 202a(2)), or
    2. computer programs intended for the commission of such an offense,

    shall be punished by imprisonment for up to two years or by a fine.

    Emphasis mine.

  • source
  • parent
  • hideshow 6 child comments
  • [+] 10 points 3 months ago (2 children)
  • [–] 12 points 3 months ago

    So it’s only illegal if you intend to commit a criminal offense.

    That’s how I read it too but it does depend upon the wording of 202a and 202b that define what a criminal offence is in this context.

  • source
  • parent
  • load more comments (-1 replies)
  • [–] 47 points 3 months ago (3 children)

    In Germany you you cannot inform a website that it has a vulnerability, because in their eyes, vulnerabilities can only be found if you're intentionally looking for it. Therefore you must be a criminal.

  • source
  • hideshow 3 child comments
  • [–] 7 points 3 months ago

    What a stupid law. I can't actually understand why they would do this because their government helps Interpol all the time so the government is very technologically capable surely they understand the implications of not getting vulnerabilities disclosed like this....

    Is it illegal even if the company holds like a contest or something like that?

  • source
  • parent
  • [–] 18 points 3 months ago* (2 children)

    Ski masks instead of Guy Fawkes masks and hoodies? Smh probably won't learn much from this cyber security course

  • source
  • hideshow 2 child comments