17 ms·
>And thereby accomplishing what, exactly? ...$$$$?
by vadfa 5y ago
>And thereby accomplishing what, exactly?
...$$$$?
- basisword 5y agoI could accomplish the same thing by robbing a bank - doesn’t make it the right thing to do.
- spicybright 5y agoDoesn't make free work for a for trillion dollar corporation something noble to do. By that logic, a grocery store giving away everything for free is the right thing to do. Doesn't lead to anything sustainable though.
- dpkonofa 5y agoWhat suggests that any of this is "free work for a trillion dollar corporation"? Apple hasn't acknowledged that this person discovered this bug yet. They've only acknowledged that it existed and that they were going to patch it in the future. Crediting someone for a bug bounty isn't as easy as you all are making it out to be.
- akomtu 5y agoUnless it's a mafia's bank.
- justshowpost 5y agoYou're also either a victim or an oppressor. No wrong can be done by anyone in the former group, and no good by the latter. Such ideas of victimization do nothing but justify the use of power and engender intergroup conflict.
- young_unixer 5y agoRobbing a bank is immoral, selling information about how a piece of software works, in my humble opinion, is not. Or if it is, then it's not even close to the level of "wrong" that is robbing a bank.
- mrtesthah 5y agoAnd what if that information gets weaponized against journalists in an authoritarian regime?
- ClumsyPilot 5y agoYou know what gets weaponised? Actual weapons our government sold to Saudi and other's.
- true_religion 5y agoAlso the software to subvert security on mobile devices, build firewalls on a national level, and inspect every internet packet for disloyal statements. All that is packaged and sold to our authoritarian allies with the full approval of the government the majority of people support. Selling a zero day would probably fall under a weapons clause.
- mrtesthah 5y agoOne of these things doesn't negate or excuse the other; both can happen at the same time. You're engaging in "whataboutism".
- ClumsyPilot 5y agoIf you sell a knife, and it's used for a stabbing, are you culpable? Thousands of people buy knives every day, and most of them don't stab anyone. So unless there was good reason to suspect something, we would say no. Most zerodays are probably not bought by china to spy on dissidents, they are more like knives. On the contrary, when we sell bombs to Saudis we can be 95% sure they will be used in Yemen.
- saagarjha 5y agoWhat exactly do you do with a zero day that isn't "use it against someone"?
- 5y ago
- Bud 5y agoExcept that as this thread demonstrates, there is no realistic possibility of this researcher actually making more $$$ in real life by trying to find another bidder.
- smoldesu 5y agoZerodium pays more for the exploits, and unlike Apple, is willing to compensate you in non-traceable currency.
- dpkonofa 5y agoNot for this exploit. They pay more for code-execution exploits. No one is going to pay the sums you guys are thinking they will over a bug that gives you someone's GameCenter contacts. It's not a trivial bug but it's also not a very valuable one.