This gets into the entire controversial business of selling exploits to "Security companies." Often these companies are just brokers, sometimes selling to state

This gets into the entire controversial business of selling exploits to "Security companies." Often these companies are just brokers, sometimes selling to states, but also to criminals. Years ago at Ruxcon in Melbourne, this came up in a panel discussion. One of the members, Ranty Ben, talked about how exploit sales were part of his career/income. The talk was originally here, but it seems to be gone now: https://www.youtube.com/watch?v=xlJ1DQdjVHM https://www.youtube.com/watch?v=xlJ1DQdjVHM