3 ms·

> Compared to the zero third-party market value for such a bug Why would the third-party market value be zero? It seems tremendously valuable to many extremely

• willstrafach 9y ago
  This class of vulnerability specifically cannot be used independently for anything useful. You need either a low-level firmware vulnerability or a pre-lockscreen vulnerability that you can escalate to kernel, in order to actually utilize such a SEP vuln. You are not wrong, well-resources parties may be able to do this, but for much less work the SEP vuln can fetch $100,000 and immense branding value as a researcher.