Making certain techniques, such as reverse engineering, illegal will only result in the work being published overseas rather than the United States. The true goal should be to write secure software in the first place. One Unix version, OpenBSD, gets all of its code audited for security bugs before it gets shipped. This work helps other Unix vendors because OpenBSD vendors do not hide problems they find, leaving other vendors free to follow suit. Microsoft, however, will continue to have a more difficult time because its code base is completely different and much larger.
Farrow is an independent security consultant.
His Web site , contains security links and information about network and computer security courses. An example of a vague CERT advisory is available from its archives at this link . The bulletin issued in response to the Guardent advisory is located here .