3 ms·
Google directly competes with the grey market for vulnerabilities. They are competitive in a bunch of different directions: * They pay for vulnerabilities with
by tptacek 1mo ago
Google directly competes with the grey market for vulnerabilities. They are competitive in a bunch of different directions:
* They pay for vulnerabilities without reliable exploits (more for vulnerabilities that are demonstrably reliable).
* They don't require you to actually build a reliable exploit chain.
* They pay up front, not in tranches.
* They work with essentially all comers, unlike the grey market, where you're generally subcontracting to sell your first few.
- jeffbee 1mo agoThey pay in plain old money, too. On the market your counterparty will be a criminal who is trying to scam you every step of the way.
- tptacek 1mo agoNot so much, the grey market is pretty well structured.
- paulhebert 1mo agoIs there anywhere I could read more about this? Sound very interesting!
- nbk_2000 1mo agoThe Grugq has done several interesting interviews/articles on the industry. There's also a couple of Darknet Diaries episodes with similar interviews.