3 ms·
That's only the Pwnium hack, though. The Pwn2Own vulnerability remains undisclosed and unfixed. Which leads me to the question: why aren't companies like Googl
by gcp 15y ago
That's only the Pwnium hack, though. The Pwn2Own vulnerability remains undisclosed and unfixed.
Which leads me to the question: why aren't companies like Google customers of companies like Vupen? Too many of them to make it cost-effective? Or does Vupen (for example) prefer if those holes are not fixed? You can sell a vulnerability many times, after all.
- throwaway3823 15y agoVupen sells 0day exploits so that they can be used to attack people: http://www.vupen.com/english/services/lea-index.php http://www.vupen.com/english/services/lea-index.php A patched vulnerability would not be worth nearly as much to them and their customers. P.S. Vupen sells to ASEAN. ASEAN includes Burma (Myanmar). Burma is not a happy place.
- dhbanes 15y agoHow hard would it be for Google to be a customer of Vupen without representing themselves as Google?