4 ms·
People worried about the morality aspect could sell the exploit, donate the money and report the issue to the manufacturer anyways.
by lccarrasco 5y ago
People worried about the morality aspect could sell the exploit, donate the money and report the issue to the manufacturer anyways.
- doopy1 5y agoI don't think Zerodium payouts are lump sum... I believe they are staggered in order to mitigate against this stuff.
- tptacek 5y agoSo far as I know, essentially all grey market vulnerability sales are tranched, which is an important consideration when comparing bounty payouts to the grey market.
- DSingularity 5y agoWhat makes you think the seller’s donation is going to counterbalance the harm of his now-weaponized exploit?
- krater23 5y agoThe report to the manufacturer with the remark that there is a existing weaponized exploit will lead to a much faster fix. And why you are so sure that there was no weaponized exploit out there before?
- DSingularity 5y agoSo you are okay with submitting the exploit on a silver platter to people who murder dissidents because “you can’t be so sure that there wasn’t an existing weaponized exploit”?