4 ms·

Yes, it is. Knowing this exploit was worth many orders of magnitude more to facebook. You can't think of the money as an absolute amount and say, "hey, that s

by jonahx 13y ago

Yes, it is. Knowing this exploit was worth many orders of magnitude more to facebook. You can't think of the money as an absolute amount and say, "hey, that sounds pretty good." It has a market value, both to fb and to blackhats, and that market value is far higher than $4500.

tptacek 13y ago
Have you sold a lot of vulnerabilities, then? Can I ask if you're speaking from experience here?
- qdpb 13y ago
  One other thing to consider here is that these $4,500 are not packaged with a felony.
  - daeken 13y ago
    Selling vulns/exploits may be distasteful, but it's not illegal.
    - ig1 13y ago
      If you sell an exploit to someone who then uses it for illegal purposes you could be prosecuted for your involvement in that crime.
      - crazypyro 13y ago
        Only if they can prove that you knew exactly who you were selling to and for what purpose. This is a pretty high standard to meet...
        tptacek 13y ago
        If you say so. I think you're probably wrong about this.
deleted 13y ago
[deleted]