4 ms·
Regardless, the diagram on the Zerodium website (at http://zerodium.com/program.html http://zerodium.com/program.html, under "ZERODIUM Payouts for Mobiles") doe
by marcellus23 4y ago
Regardless, the diagram on the Zerodium website (at http://zerodium.com/program.html http://zerodium.com/program.html, under "ZERODIUM Payouts for Mobiles") does not seem to indicate that iOS exploits are cheaper. Am I missing something?
- Veserv 4y agoThe most serious category of attack, a Zero Click FCP, has Android at $2.5M and iOS at $2M. To be fair, the difference is negligible and both are only about as expensive as starting a new McDonalds and easily fall within the scope of a standard small business loan. So yeah, trivially hacking any phone in the world is only within the financial means of around 60 million people in the world.
- mlinksva 4y agoThe main difference on that page isn't between iOS and Android, but server/desktop and mobile. Former is cheap! Is there anywhere that tracks more current prices?
- pseudo0 4y agoZerodium buying mobile exploits for $2-2.5M does not mean that a buyer can go out shopping for an exploit and find one in that price range. Exploits are a highly illiquid market and there is going to be a big bid-ask spread. Plus a lot of middlemen are restricted in various ways in terms of who they sell to. Then there the issue of building an actual capability around the base exploit... There's a reason why we don't have thousands of NSO-like small businesses running around.
- deleted 4y ago[deleted]