📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Brainstorms - General  >>  Legal Concerns With An RCE Project

Topic created on: February 26, 2007 22:21 CST by kazster .

Hey guys,

I posted about this on some other RCE forums but I didn't get a straight answer. I recently reverse engineered the specs for a private file format used by an application. I want to publish my findings online as well as provide opensource plug-ins that will open that file format in other software of the same genre.

Does anyone know if this is legal to do in Canada/US? Any information would be helpful.

  junkcode     February 27, 2007 03:37.47 CST
DMCA Violation?

  aeppert     February 27, 2007 08:21.03 CST
DMCA would likely apply:

http://www.copyright.gov/legislation/dmca.pdf

All depends on the file format and who owns it.  That is where the DMCA is a bit of a crap-shoot - the owner has to bring it to bare against you.

  kazster     February 27, 2007 10:21.04 CST
I'm not too sure if I understand. I've seen software out in the public that allows the use of a variety of file formats that don't have open specs. For example OpenOffice will open a variety of different file types, but I doubt anyone gave the developers of OpenOffice permission to use those file formats.

  drew     February 27, 2007 10:33.00 CST
I am not a lawyer, nor do I play one on TV, but I believe the DMCA only applies to copyright protection mechanisms.  Reversing for interoperability appears to be allowed under the DMCA.

That is why it is fine for Sun (via Star/OpenOffice) to RE the MS Office file formats, but reversing the DVD copyright protection mechanism would be against the DMCA.

  aeppert     February 27, 2007 11:01.43 CST
Like drew, I make no attempt to pretend to be a lawyer.

But, my understanding of the DMCA, right or wrong, a person can raise it over very little.  Basically, it seems to being leveraged as a legal means of smashing competition and or the opening of a format by effectively "out-moneying" a smaller company or individual with legalese.  

I would say go for it, but I would do a cursory call of a lawyer just to cover yourself.  None of us here are lawyers, thus we are speculating on only what we have seen or heard.  Thankfully I have not met the DMCA face first.

  BillyBoBob   February 27, 2007 13:16.49 CST
IANAL. Outside of DMCA, *how* you RE'd seems to be of some issue. If, for example, you looked at the code for the file format, and then proceed to write some code, you open yourself to some problems.

Additionally, Canada and the US seem quite different. As far as I can tell, Canada is much more open to reverse engineering then the US at this time.

I think you need a lawyer, some insurance or some reckless disregard for your legal position. All are pretty valid options. You can reduce the recklessness of the latter by floating some trial balloons of partial information or the like and gauging the reaction, but it is only mitigation.

  nezumi     March 23, 2007 09:14.39 CDT
if the format uses at least one patent algorithm, you can't use it without direct permission, also formant might be patented by itself. if the format includes some protection mechanisms (like DVD), you can't use it free.
on the other hand, laws don't forbid to crating "compatible" software by third parties. for example: OpenOffice works with M$ Office files, Linux/BSD mounts NTFS volumes, and many third-parties utilities recover NTFS volumes. this is all about undocumented formats, but... M$ doesn't mind, despite OpenOffice decreases it sales. so, feel free to reverse format and use it, just don't tell how you obtain this particular information. my lawyer told me: if I confess that reversing taked place, I should dig a grave, but if I keep silence - all ok. (maybe I found this information on the net, how knows?) nobody can prove you was reversing it, but you, so, just don't cry peccavi.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit