5 ms·
I know SecLists Full Disclosure exists, but it is a shell of it's former self: https://seclists.org/fulldisclosure/ https://seclists.org/fulldisclosure/ What a
by thrownaway954 7y ago
I know SecLists Full Disclosure exists, but it is a shell of it's former self: https://seclists.org/fulldisclosure/ https://seclists.org/fulldisclosure/
What are other places can someone report a vulnerability that will get companies to actually listen and fix the issues reported? Is there a Google Project Zero for the rest of us?
- appleflaxen 7y agoWow! those numbers have really fallen. It's a bit off-topic for the larger discussion of this bug, but how come?
- wolf550e 7y agoI guess managed bug bounty programs
- Chris2048 7y agoPerhaps the dark-web should set up shop and bid with foreign/bad actors for these disclosure. Then these companies might care to put in a bid, and long for the days they could have gotten them for free.
- abfan1127 7y agoEbay for Zero Days? that's actually interesting.
- adtac 7y agohttp://zerodium.com/ http://zerodium.com/
- delinka 7y agoIs this not how it works already? I'm not a darkweb participant, so I'm pretty clueless - I'd have assumed something like this exists.
- Chris2048 7y agoIt's not exactly consumer friendly. Maybe there's space for a "darknet broker" that assumes the risk of selling on the DW and prices up info for you.