3 ms·
Not really shocking or new but kind of interesting. Why would they use 0days on security researchers. My guess is it's a test with upside. On the one hand if it
by kriro 3y ago
Not really shocking or new but kind of interesting. Why would they use 0days on security researchers. My guess is it's a test with upside. On the one hand if it works on a security researcher, you can go "live" because you got a good one and on the other hand you estimate that in the long run you'll get 1+x 0days out of the deal from said researcher.
As a security researcher it also presents an interesting situation. If you're careful enough and can pretend to be dumb enough, you might be able to harvest fresh attack vectors/0day etc. "for free" but the downside is if you overestimate yourself you'll get pwned.
- n0on3 3y ago> Why would they use 0days on security researchers. My guess is it's a test with upside Or just be after the accesses the targets have...
- saagarjha 3y agoSecurity researchers generally have more 0 days.
- pixl97 3y agoAlso being a security researcher doesn't necessarily mean you're any good at securing your own systems. If you can breakout of the quarantine area of the things the researchers know not to trust, you'll commonly find their own systems are insecure as hell.
- lll-o-lll 3y agoYes exactly. The fun bit is breaking stuff, securing stuff is soooo boring. There are different mindsets in this game. You want one type of person to find the holes in your system, and a different type of person to protect it.
- zemnmez 3y agoThis is absolutely because NK doesn't want to pay market rate for 0days.
- willsmith72 3y agoWhat is market rate for a 0-day?
- saagarjha 3y agoYeah, all the other sanctioned countries do a much better job at this.