3 ms·
> You could continue the bug bounty approach, which leads into vuln selling (with the attendant morality questions) Can you elaborate on this?
by pcthrowaway 4y ago
> You could continue the bug bounty approach, which leads into vuln selling (with the attendant morality questions)
Can you elaborate on this?
- liquid_stranger 4y agoLook into Zerodium https://zerodium.com/ https://zerodium.com/. They sell exploits to government agencies. They are one of the more legit outfits, but researchers can also sell exploits to NSO style bad actors.
- pcthrowaway 4y agoI know what Zerodium is, but why does security work "lead to" exploit selling? There are lots of researchers who don't do that.