4 ms·
Unless your name is Kevin Mitnick. Then you set up a business and play middlemen in selling them to anybody who wants to pony up for it. "When we have a client
by at-fates-hands 11y ago
Unless your name is Kevin Mitnick. Then you set up a business and play middlemen in selling them to anybody who wants to pony up for it.
"When we have a client that wants a zero-day vulnerability for whatever reason, we don’t ask, and in fact they wouldn’t tell us,” Mitnick tells WIRED in an interview. “Researchers find them, they sell them to us for X, we sell them to clients for Y and make the margin in between.”
http://www.wired.com/2014/09/kevin-mitnick-selling-zero-day-exploits/ http://www.wired.com/2014/09/kevin-mitnick-selling-zero-day-...
- eklavya 11y agoHow is this legal?
- SturgeonsLaw 11y agoBecause he's selling to governments, who operate under the "it's not illegal when we do it" principle.
- yuncun 11y agoWhat if it's the Chinese government that's buying, would it suddenly turn illegal?
- lawnchair_larry 11y agoWhy wouldn't it be? Someone looks at a program that they bought and paid for, and sees that it has a mistake. They didn't write the software or put the mistake there. How can it be a crime for them to become aware of behavior in someone else's program? Attacking others who use the software is an entirely different story of course.