Post #2579516
2026-05-07 08:06 UTC
I’m still completely lost with logic of JA4+ patent licensing and actual incompatibility with the copyleft-license. So it seems to be a patent-based license and really risky to implement if you want to keep your actual software open source.
Did someone explore alternatives to avoid this? and especially other format which are open source friendly?
#ja4 #ja3 #jarm #cti #opensource #patent #cti
#threatintel #cybersecurity
🔗 https://github.com/FoxIO-LLC/ja4/blob/main/License%20FAQ.md
Replies (1)
-
@DaveMWilburn@infosec.exchange 2026-05-07 13:07
@adulau@infosec.exchange I had once toyed with the idea of grabbing the underlying cipher negotiation features directly via Zeek, vectorizing them, and training up a ML model in lieu of using brittle one-way hashes. I didn't get very far, though. I couldn't find a whole lot in the way of training data, and the impression I had at the time was that nearly everything, including both benign and malicious activity, was converging on the same handful of nearly uniform cipher negotiations due to shared library usage. It might be worth another look, though. I'm curious what @hrbrmstr@mstdn.social thinks.