3 ms·
okay, when would you need to purchase a 0day vulnerability from someone else to exploit thousands of other systems as part of legitimate system engineering?
by munin 15y ago
okay, when would you need to purchase a 0day vulnerability from someone else to exploit thousands of other systems as part of legitimate system engineering?
- ktizo 15y agoWell, if working for a company where you are in charge of the security of thousands of systems, you might be asked to do exactly this. If I was running a massive company, I would want my network security team to be buying up the latest cracking tech and checking it against as much of the corporate systems as possible. Any corporation with any sense and lots of stuff they need to secure pays people to attack their corporate networks with anything and everything available, and then report back.
- tripzilch 15y agoWell, if they'd be considering to outlaw selling 0days on the black market, that'd be a whole different discussion. My first intuition would be all for it, actually. Though there might be some consequences I haven't considered. For all I know that could already be illegal? Anyone?
- ktizo 15y agoThe problem is defining the black market. Anyone with software affected by a 0-day is effectively a legitimate buyer of that bug.