3 ms·
>Zerodium is known for buying zero-days and selling them to government agencies and law enforcement. So how much is Zerodium getting for these Zero days? If al
by jaxtellerSoA 8y ago
>Zerodium is known for buying zero-days and selling them to government agencies and law enforcement.
So how much is Zerodium getting for these Zero days? If all you care about is money then aside from the fear that you might end up getting investigated by one of these agencies, why wouldn't you sell directly to them for more money than Zerodium is giving you.
Otherwise if you actually care about the security of systems, then disclose it to the developers, give them reasonable time to fix/patch and submit it as a CVE.
- INTPenis 8y agoThe concept of government contractors is quite common. If zerodium can guarantee auditing and safe zeroday acquisition then I don't see anything different in governments using a broker to attain their exploits. The same attractions would apply as when they're dealing with other government contractors rather than individual actors. The really sad thing here is that those exploits might be put to use against the people of the world.