3 ms·

And if weev had seen the exploit, thought to himself, "heh, that's funny," and not gone back, he would not be headed to prison. But, that isn't what happened.

• rsingel 14y ago
  If he found it and then sold it to a government agency, he'd be rich and not in jail. Selling exploits to the government is a lucrative business. Google "CIPAV", for one.
  • tptacek 14y ago
    Are you suggesting that the government would have purchased a bug in AT&T's website?
    • rsingel 14y ago
      No. AT&T is willing to do anything the gov wants. Now, say it was a hole in Gmail? I bet there's government agencies, foreign and domestic, that would buy that for sure.
      • tptacek 14y ago
        There seems to be a pervasive notion that because mass-exploitable remote code execution vulnerabilities have a market value, all vulnerabilities do. That's not true.
        • rsingel 14y ago
          Agreed. I stand corrected.