4 ms·

Linux is the just kernel. Everything else in a distro is software running on top of it. Kernel bugs are generally hard to exploit remotely and typically have to

Linux is the just kernel. Everything else in a distro is software running on top of it. Kernel bugs are generally hard to exploit remotely and typically have to be chained with other exploits. That's why there's so many specific payouts for common enterprise apps. Windows is a complete, highly integrated OS with a wide array of attack vectors baked right into it. Plus sketchy companies like Zerodium major customers are nation-state actors who are primarily interested in data exfiltration and the application data stores themselves.

hospitalJail 3y ago
>Kernel bugs are generally hard to exploit remotely and typically have to be chained with other exploits. This is why its so valuable though.
- unilynx 3y ago
  But what’s the point ? Most vulnerable Linux servers are hosting blogs or dns servers. They’re only useful to run a crypto miner or host a phishing page, and for that you probably don’t need to go further than exploit a wordpress bug. No need to go for the kernel or even root. Whereas a desktop often has users on it who enter banking details or corporate login credentials. Much juicier targets.
  - toast0 3y ago
    Can be a good DDoS source, lots of bandwidth often. Bonus if they can spoof packets, which needs root.
- weare138 3y ago
  The payouts are based on what their 'clients' are willing to pay in turn for the exploits. There's just less of a market for Linux kernel exploits. If nation-state actors are involved in deep APT style attacks where they would leverage low level kernel exploits they are going to either develop the exploits themselves or acquire them through their own clandestine channels. Purchasing that stuff from a publicly facing company that could potentially be compromised themselves is high risk and leaves too obvious of a trail.

4 ms·

Linux is the just kernel. Everything else in a distro is software running on top of it. Kernel bugs are generally hard to exploit remotely and typically have to

by weare138 3y ago

hospitalJail 3y ago
>Kernel bugs are generally hard to exploit remotely and typically have to be chained with other exploits. This is why its so valuable though.
- unilynx 3y ago
  But what’s the point ? Most vulnerable Linux servers are hosting blogs or dns servers. They’re only useful to run a crypto miner or host a phishing page, and for that you probably don’t need to go further than exploit a wordpress bug. No need to go for the kernel or even root. Whereas a desktop often has users on it who enter banking details or corporate login credentials. Much juicier targets.
  - toast0 3y ago
    Can be a good DDoS source, lots of bandwidth often. Bonus if they can spoof packets, which needs root.
- weare138 3y ago
  The payouts are based on what their 'clients' are willing to pay in turn for the exploits. There's just less of a market for Linux kernel exploits. If nation-state actors are involved in deep APT style attacks where they would leverage low level kernel exploits they are going to either develop the exploits themselves or acquire them through their own clandestine channels. Purchasing that stuff from a publicly facing company that could potentially be compromised themselves is high risk and leaves too obvious of a trail.