Another Researcher Hit With Threat Of German Anti-Hacking Law
German software firm warns researcher who disclosed a vulnerability in its software and offered his help Apr 27, 2011 | 02:38 PM By Kelly Jackson Higgins Darkreading Another security researcher is facing possible legal action based on the 3-year-old "hacker clause" in a German law that basically forbids anyone from selling and distributing hacking tools. An independent researcher who goes by "Acidgen" was recently threatened with a lawsuit by a German software company that he alerted about a buffer overflow vulnerability he discovered in the vendor's music application. Acidgen, who is based in Sweden, found a stack buffer overflow bug in Magix AG's Music Maker 16 software (version 16.0.2.4) and promptly passed the information to Magix. After several friendly email exchanges with the vendor in which Acidgen also provided Magix with what he describes as a "nonharmful" proof-of-concept (PoC) to demonstrate how the flaw could be exploited and h...