4 ms·

I was thinking that might be it, especially since he kind of trashed Chinese and Russian marketplaces.

tamimio 3y ago
And that happened before snowden leaks, so anything that might “shake the trust” in the government or makes people question why the government is buying these zero days exploits in the first place, needs to be buried away from media spotlight.
- mattisj 3y ago
  Would the snowden leaks be useful to discuss in a thesis about zero-day exploits, and if so how would it be relevant?
  - tamimio 3y ago
    It might be, as before the leaks a lot of people had big trust in government and big tech in general, leaks showed otherwise, and how the government is willing and actively putting all efforts to spy and violate people’s privacy, either zero day exploits, pre-planted backdoors, laws and acts are shaped to serve that purpose like gag orders, patriot acts, etc., but eventually it depends on what conclusion you are trying to make anyway.
    - mattisj 3y ago
      yeah okay, I might not mainly just because i'm trying to write an overview on the zero-day marketplace, with case studies and getting as niche on specific things as possible. Talking of that, you seem like an expert, is there any super interesting things regarding the zero day marketplace I can research and write about? (in buying, selling, brokerage or anything really)
      - tamimio 3y ago
        >with case studies and getting as niche on specific things as possible. Then definitely you can touch on APT marketplace, unlike the usual zeroday ones, those are -as the name implies, advanced, and mostly are state sponsored, you can find some of these in this sheet [1], or other sources [2] or older ones [3]. Now, for other zero day exploits, you can dig into your typical threat intelligence feeds to have an idea, some of these are daily updated [4] [5] [6] among a lot more of other resources, there are also underground databases for zero day and even APT updated as of yesterday, and also online marketplaces for those where you can buy/sell compromised RDP servers / webmail / cPanels / etc., or even services like smtp-sms for phishing among others, unfortunately, I can’t and won’t list any of these in here for obvious reasons, however, if you dig a little deeper definitely you will find something, just don’t use the usual search engines and normal channels, and get the usual security precautions like sandbox/vpns/etc. when access any of these sites, preferably in an isolated OS too. And thanks, not expert enough for sure! [1] https://docs.google.com/spreadsheets/u/1/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml# https://docs.google.com/spreadsheets/u/1/d/1H9_xaxQHpWaa4O_S... [2] https://gist.github.com/Neo23x0/c4f40629342769ad0a8f3980942e21d3 https://gist.github.com/Neo23x0/c4f40629342769ad0a8f3980942e... [3] https://github.com/kbandla/APTnotes https://github.com/kbandla/APTnotes [4] https://bazaar.abuse.ch/browse/ https://bazaar.abuse.ch/browse/ [5] https://www.exploitalert.com/browse-exploit.html https://www.exploitalert.com/browse-exploit.html [6] https://threatfox.abuse.ch/browse/ https://threatfox.abuse.ch/browse/

And that happened before snowden leaks, so anything that might “shake the trust” in the government or makes people question why the government is buying these zero days exploits in the first place, needs to be buried away from media spotlight.

mattisj 3y ago
Would the snowden leaks be useful to discuss in a thesis about zero-day exploits, and if so how would it be relevant?
- tamimio 3y ago
  It might be, as before the leaks a lot of people had big trust in government and big tech in general, leaks showed otherwise, and how the government is willing and actively putting all efforts to spy and violate people’s privacy, either zero day exploits, pre-planted backdoors, laws and acts are shaped to serve that purpose like gag orders, patriot acts, etc., but eventually it depends on what conclusion you are trying to make anyway.
  - mattisj 3y ago
    yeah okay, I might not mainly just because i'm trying to write an overview on the zero-day marketplace, with case studies and getting as niche on specific things as possible. Talking of that, you seem like an expert, is there any super interesting things regarding the zero day marketplace I can research and write about? (in buying, selling, brokerage or anything really)
    - tamimio 3y ago
      >with case studies and getting as niche on specific things as possible. Then definitely you can touch on APT marketplace, unlike the usual zeroday ones, those are -as the name implies, advanced, and mostly are state sponsored, you can find some of these in this sheet [1], or other sources [2] or older ones [3]. Now, for other zero day exploits, you can dig into your typical threat intelligence feeds to have an idea, some of these are daily updated [4] [5] [6] among a lot more of other resources, there are also underground databases for zero day and even APT updated as of yesterday, and also online marketplaces for those where you can buy/sell compromised RDP servers / webmail / cPanels / etc., or even services like smtp-sms for phishing among others, unfortunately, I can’t and won’t list any of these in here for obvious reasons, however, if you dig a little deeper definitely you will find something, just don’t use the usual search engines and normal channels, and get the usual security precautions like sandbox/vpns/etc. when access any of these sites, preferably in an isolated OS too. And thanks, not expert enough for sure! [1] https://docs.google.com/spreadsheets/u/1/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml# https://docs.google.com/spreadsheets/u/1/d/1H9_xaxQHpWaa4O_S... [2] https://gist.github.com/Neo23x0/c4f40629342769ad0a8f3980942e21d3 https://gist.github.com/Neo23x0/c4f40629342769ad0a8f3980942e... [3] https://github.com/kbandla/APTnotes https://github.com/kbandla/APTnotes [4] https://bazaar.abuse.ch/browse/ https://bazaar.abuse.ch/browse/ [5] https://www.exploitalert.com/browse-exploit.html https://www.exploitalert.com/browse-exploit.html [6] https://threatfox.abuse.ch/browse/ https://threatfox.abuse.ch/browse/