4 ms·
Now iOS 0-day is worth up to $2,000,000 on gray market so Apple kind a take it seriously.
by SXX 5mo ago
Now iOS 0-day is worth up to $2,000,000 on gray market so Apple kind a take it seriously.
- walrus01 5mo agoIf you find a real iOS zero day that you think has a market value of 2 million, how do you (a) find a legit buyer for it, and (b) ensure you get paid, presumably in your own choice of cryptocurrency?
- moscoe 5mo agoAre you asking for step by step instructions?
- walrus01 5mo agono, I'm making the rhetorical point that the sort of persons that might have 2 million laying around to pay for an iOS zero day for blackhat type purposes might not be the most honorable or likely to actually pay you. And what recourse would you have?
- SXX 5mo agoThis depends on what you consider black hat. Israeli company that sells surveillance malware to dictatorships around the globe isnt exactly moral, but its legal business. Unlike Apple or Microsoft buying and selling exploits is their only source of income so they have no motivation not to pay. Reputation is much more important. Also legal system does work in Israel.
- cdud3 5mo agodictatorships are not there main customers. There are many, also western, governments and their agencies customers of such services.
- 7bit 5mo agoHe's asking for a friend
- teravor 5mo agohttps://en.wikipedia.org/wiki/Market_for_zero-day_exploits https://en.wikipedia.org/wiki/Market_for_zero-day_exploits https://en.wikipedia.org/wiki/Cyber-arms_industry https://en.wikipedia.org/wiki/Cyber-arms_industry
- SXX 5mo agoEven if you dont count obvious dark markets there is plenty of well known companies mostly from Israel buying exploits. You can even reach them via Linkedin and even demonstrate and sell in person with all paperwork. No risk here because they will re-sell them for much more. Having it both fully anonymous, safe and in crypto will be harder. You need to have a trusted friend with right connections in industry not to get scammed.
- pjmlp 5mo agoWhen someone says memory corruption is nothing special, they aren't the ones paying those amounts. Naturally there are other kinds of bugs as well. However reducing 70% of root causes, saves a bunch of money already.