4 ms·
Oh, you've done business with them then? Know someone who has?
by tptacek 3mo ago
Oh, you've done business with them then? Know someone who has?
- jnbcxdrun 3mo ago[dead]
- cmeacham98 3mo agoYes actually, I know someone who did business with them many years ago (before the advent of LLMs), although for a smaller sum than the advertised top payouts (the vulnerability they had was much less important). Why post these random unsubstantiated claims on HN?
- close04 3mo ago> Why post these random unsubstantiated claims on HN? To show everyone the Gell-Mann amnesia effect in action. When HN top karma poster and security professional posts something like this, doubles down, and can’t even be bothered to support it in any way (I’m open to learning and changing my opinion) it completely blurs the line going into social media influencer. Quantity over quality.
- StrauXX 3mo agoI do, as a matter of fact.
- monster_truck 3mo agoMy lawyer says I can't answer that
- parl_match 3mo agoYes, I have briefly done business with them as well. We also worked with Bekrar and Vupen briefly. Albeit, it was done through a broker. The second time around, we exited negotiations. Just because they're exclusive about their clients doesn't mean they're not real. Their impact and effectiveness is a separate topic though. I don't think they're still actively operating or taking new clients, at least. btw: "Oh, so you've done x?" What a snarky and confrontational way to ask someone something. Especially when it's asserting a well documented company and person is "not real".
- tptacek 3mo ago[flagged]
- ofjcihen 3mo agoWhy are you constantly responding to people like this? What makes you think you’re above the rest of HN?
- tptacek 3mo agoYou apparently work in the field. Do you take these "price lists" seriously?
- ofjcihen 3mo agoThey can be and they can not be depending on what you’re selling. But that’s besides the point. You straight up argued that one isn’t real in the most asinine way you could. Even if you were right that would be ridiculous. The fact that you’re wrong and have multiple people telling you you are makes it even worse. I’ve seen you replying in snide comments whenever someone disagrees with you before. Your status as…whatever you are doesn’t give you carte to treat randoms like they’re beneath you.
- tptacek 3mo agoI'm noticing you didn't answer my question.
- ofjcihen 3mo agoI did explicitly answer your question, yes. This is how all of these sites work. You would not get 500k for every exploit obviously. You would get that (or more) for great exploits. I’m noticing you haven’t addressed anything I mentioned at all. Is that just acceptance that it’s the truth or are you just having a bad day? Edit: Actually, let me add that for a 0click exploit on mobile devices that leads to root level permissions you’re very likely sitting on millions of dollars.