technology

Another new way to bring the idea of software patents into disrepute, per eWeek/SecurityWatch:

Security researchers, are you tired of handing your vulnerability discoveries over to your employer, as if that were what you’re paid to do? Helping vendors securing their products—for free—so that their users won’t be endangered by new vulnerabilities? Showing your hacking prowess off to your friends, groveling for security jobs or selling your raw discoveries to middlemen for a fraction—a pittance—of their real value?

Take heart, underappreciated, unremunerated vassals, for a new firm is offering to work with you on a vulnerability patch that they will then patent and go to court to defend. You’ll split the profits with the firm, Intellectual Weapons, if they manage to sell the patch to the vendor. The firm may also try to patent any adaptations to an intrusion detection system or any other third-party software aimed at dealing with the vulnerability, so rest assured, there are many parties from which to potentially squeeze payoff.

Intellectual Weapons is offering to accept vulnerabilities you’ve discovered, as long as you haven’t told anyone else, haven’t discovered the vulnerability through illegal means or have any legal responsibility to tell a vendor about the vulnerability.

Also, the vulnerability has to be profitable—the product must be “highly valuable,” according to the firm’s site, “especially as a percentage of the vendor’s revenue.” The product can’t be up for upcoming phaseout—after all, the system takes, on average, seven years to churn out a new patent. The vendor has to have deep pockets so it can pay damages, and your solution has to be simple enough to be explained to a jury. …

The firm says it “fully [anticipates] major battles.”

(“New Firm Eager to Slap Patents on Security Patches”, Jun. 7; Slashdot thread).

Tagged as: deep pocket, technology

{ 5 comments }