05:45 PM
Robert Graham
Robert Graham

A Firsthand Piracy Experience

Limited government support of intellectual property helps, but not the strong protections in SOPA/PIPA

Much has been written about SOPA/PIPA today, but I thought I’d give a personal perspective.

Thirteen years ago, I created the “BlackICE” products: “BlackICE Guard” was the first network IPS and “BlackICE Defender” was (one of) the first personal firewalls. My ability to sell these products depended on the government’s protection of intellectual property. I experienced exactly the problems targeted by those laws.

For example, foreign sites would crack the license key and sell pirated copies of the personal firewall, whose users would then come to us for software updates and support. This is the reason for Microsoft’s “Geniune Advantage” program targeting "victims of software piracy." It doesn’t target the casual user who pirates his own copy of Windows and puts it on multiple machines. Instead, it’s copying the foreign resellers of pirated CDs selling them on the streets of Shanghai.

However, while piracy was a problem, it was also an opportunity for BlackICE. Our target market was corporations, not home users.

Corporations might pirate software in order to try it out, but eventually they have to pay for it. In one memorable incident, the CSO of a Fortune 500 company admitted to pirating a few copies of our personal firewall to test it out in his lab -- as he signed the check for 10,000 legitimate copies for the company. Indeed, most security professionals in our industry who got their start in the late 1990s pirated my software at one point or another.

So why not simply make a free trial version available, or a shareware version? Mostly, it was perception. When you give something away for free, customers expect it to be free. It’s hard convincing customers to pay for something if you are already giving it away on the Internet. Conversely, when your software becomes the most pirated software on the Internet (as BlackICE was for a time), it creates a perception of value.

The moral of this story is that, yes, we need limited government support of intellectual property. Without such support, we could never have sold any product and never would have developed it. But on the other hand, we neither needed nor wanted the strong protections in the SOPA/PIPA bills. We didn't want these laws then, and since so much cybersecurity content is created by collaboration, such laws will be damaging to our future.

Robert Graham is CEO of Errata Security.

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
User Rank: Apprentice
1/19/2012 | 5:34:17 AM
re: A Firsthand Piracy Experience
Sharing about your experience in the industry and your opinion about the government for intellectual property was interesting
Register for Dark Reading Newsletters
White Papers
Current Issue
Five Emerging Security Threats - And What You Can Learn From Them
At Black Hat USA, researchers unveiled some nasty vulnerabilities. Is your organization ready?
Flash Poll
Title Partners Role in Perimeter Security
Title Partners Role in Perimeter Security
Considering how prevalent third-party attacks are, we need to ask hard questions about how partners and suppliers are safeguarding systems and data.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
According to industry estimates, about a million new IT security jobs will be created in the next two years but there aren't enough skilled professionals to fill them. On top of that, there isn't necessarily a clear path to a career in security. Dark Reading Executive Editor Kelly Jackson Higgins hosts guests Carson Sweet, co-founder and CTO of CloudPassage, which published a shocking study of the security gap in top US undergrad computer science programs, and Rodney Petersen, head of NIST's new National Initiative for Cybersecurity Education.