3 ms·
If you sell something to someone and they use it to commit a crime, you are culpable if you even had a wiff that it was going to be used for something illegal.
by twox2 5y ago
If you sell something to someone and they use it to commit a crime, you are culpable if you even had a wiff that it was going to be used for something illegal. So if you're selling 0days on the blackmarket, you can bet your ass they will come after you sooner or later.
The companies that immoral & legal, have paved their own way, but since you're not going to be selling to governments directly, don't count on being able to get away with it.
- SXX 5y agoCan you provide some examples in US / EU of people being charged for selling vulns on "black market"? Otherwise it's just baseless FUD. I guess far bigger problem for researcher would be to actually not being scammed while selling and this is why companies like Zerodium have their marketshare. Yeah someone could pay to you in crypto, but chances that you'll just gonna be scammed are extremely high.
- twox2 5y agoIt's not really baseless. There might not be a high profile "this dude sold a 0day and got arrested" case yet, but there are cases of folks selling software / hardware cracking tools getting indicted. There's also this really interesting story: https://www.wired.com/2013/03/alfred-anaya/ https://www.wired.com/2013/03/alfred-anaya/ Dude caught serious prison time just for making hidden compartments in cars and they put him away based on the fact that he knew his customers where in the drug business. Selling high impact 0days definitely seems like a risky business IMO.