4 ms·

If he found it and then sold it to a government agency, he'd be rich and not in jail. Selling exploits to the government is a lucrative business. Google "CIPAV"

by rsingel 14y ago

If he found it and then sold it to a government agency, he'd be rich and not in jail. Selling exploits to the government is a lucrative business. Google "CIPAV", for one.

tptacek 14y ago
Are you suggesting that the government would have purchased a bug in AT&T's website?
- rsingel 14y ago
  No. AT&T is willing to do anything the gov wants. Now, say it was a hole in Gmail? I bet there's government agencies, foreign and domestic, that would buy that for sure.
  - tptacek 14y ago
    There seems to be a pervasive notion that because mass-exploitable remote code execution vulnerabilities have a market value, all vulnerabilities do. That's not true.
    - rsingel 14y ago
      Agreed. I stand corrected.