Modify firmware on purchased device to improve security
<p>Scenario:
I purchase a device (Chinese IP camera) from an online retailer (Amazon) that has a number of security vulnerabilities.</p>

<p>The firmware file is publicly accessible from the OEM's website and is basically a file system image that can be extracted. The webpages could potentially be modified to fix the issue.</p>

<p>From a legal perspective:</p>

<ol>
<li>Can I modify the webpage and upload it to my device?</li>
<li>What about if a free tool was created to perform this modification on the firmware file that the user must first download from the OEM's site (not distributing the firmware with the tool)?</li>
<li>What if that tool was monetised/commercialised in some way?</li>
</ol>

<p><strong>Physical example</strong></p>

<ul>
<li>I purchase a pen.</li>
<li>I modify the pen to better suit my needs.</li>
<li>I then give it away as a free sample.</li>
<li>I buy more pens, modify and then sell them.</li>
</ul>

<p>The product was not copied at any point, just altered.</p>

<p>I realise that it is very difficult to never create a copy of the software as even loading it into memory creates a copy.</p>

<p>In this particular example no license was contained in the packaging, on the retailer's site (contract formed through purchase) and there was no license agreement displayed on the device when using the inbuilt website.</p>

<p>Country in question is England, but interested in any country.</p>

<h2>Computer code is protected by copyright</h2>

<p>This gives the owner the <em>exclusive</em> right to make derivatives of the work - like changing the web page.</p>

<p>If you make the change for personal use only, you are protected by the fair use/dealing exemption. If you distribute your changes, you aren’t.</p>

software