Examining malware will be illegal in Canada
June 19th, 2010 by p1, Filed under: Commentary, Corporate Security, Encryption, Law, malware, Virus
We’ve got a new law coming up in Canada: C-32, otherwise known as DMCA-lite.
Lemme quote you a section:
29.22 (1) It is not an infringement of copyright for an individual to reproduce a work or other subject-matter or any substantial part of a work or other subject-matter if
[...]
(c) the individual, in order to make the reproduction, did not circumvent, as defined in section 41, a technological protection measure, as defined in that section, or cause one to be circumvented.
Now, of course, if you want to examine a virus, or other malware, you have to make a copy, right? So, if the virus writer has obfuscated the code, say by doing a little simple encryption, obviously he was trying to use a “technological protection measure, as defined in that section,” right? So, decrypting the file is illegal.
Of course, it’s been illegal in the US for some years, now …



