2 ms·

I thought that too, at first, but it seemed to blatantly illegal to believe. Going by their site, it's mostly for government agencies against other agencies?[1]

by ward 15y ago

I thought that too, at first, but it seemed to blatantly illegal to believe. Going by their site, it's mostly for government agencies against other agencies?[1] I'm not proficient enough at law to comment on the legalities of it. Another possibility I had in mind is that they want to get paid by people wanting to fix this vulnerability on their systems. eg, company X will have to come to them if they want their IE browsers to receive the patch against this bug. [1] http://www.vupen.com/english/services/lea-index.php http://www.vupen.com/english/services/lea-index.php

Tossrock 15y ago
I'm not proficient at law either, but I don't think selling exploits is illegal. Unauthorized computer access is, but as long as they aren't doing that access themselves, I think they're in the clear. The analogy I first think of would be a gun store owner not being responsible for the crimes his customers commit. Although perhaps he'd be an accessory if he knew they had criminal intentions? I'm not sure.