C-61: Making us less secure

The Canadian DMCA (ie C-61) also contains a provision that makes it illegal for security researchers to do their work.

The legislation would make all security tools illegal - if it’s capable of circumventing DRM it’s no longer allowed. You are only allowed to attempt to crack / find security flaws in a program or an encryption scheme with the creator’s permission.

Companies don’t like to be told that their products have issues that need to be fixed (if they don’t respond to the concerns it gives them a rather bad image) and wouldn’t likely give permission for companies to probe their software for flaws.

Are the bad guy going to respect the law and not exploit these exploits.

No.

Without people finding and getting these problems fixed we’re all less secure.

Just another reason why C-61 needs to be killed and and something that actually makes sense be written.