3 ms·
> Not really if you live in a high cost-of-living (HCOL) country. Vulnerability weaponization is a very globalized industry and sufficiently easy that there is
by _kbh_ 3y ago
> Not really if you live in a high cost-of-living (HCOL) country. Vulnerability weaponization is a very globalized industry and sufficiently easy that there is a oversupply from LCOL countrys. The real money is in deployment and usage as that requires the much rarer and more local criminal and money laundering skill sets.
A single iOS or Android full chain still goes for between, 2-2.5 million USD.
https://zerodium.com/images/zerodium_prices_mobiles.png https://zerodium.com/images/zerodium_prices_mobiles.png
https://zerodium.com/images/zerodium_prices.png https://zerodium.com/images/zerodium_prices.png
if someone was skilled they could easily live in a HCOL area making 1-1.25 million USD a year.
- pclmulqdq 3y agoA full chain is a difficult attack to create, and probably worth a lot more than $2.5 million - beyond the reach of one person. You need at least two novel, serious exploits. That's why they are so valuable.
- _kbh_ 3y ago> A full chain is a difficult attack to create, and probably worth a lot more than $2.5 million - beyond the reach of one person. You need at least two novel, serious exploits. That's why they are so valuable. Depends if you're publicly selling via Zerodium as much, but if you sell privately it might be worth more. > beyond the reach of one person It's going to be difficult but I don't think its beyond one person, but even if it was you could easily just go for a less difficult tier to make less money more often. The real problem would be how lumpy the payments would be, you'd effectively get nothing until you found something and most people cannot afford to that.