5 ms·
Let's play devil's advocate for a moment. Why should selling exploits be illegal? If I spend many weeks looking for an exploit and I find one, what do I get b
by mikevm 13y ago
Let's play devil's advocate for a moment.
Why should selling exploits be illegal?
If I spend many weeks looking for an exploit and I find one, what do I get by disclosing it, to say, Google? The Chrome project does pay a little, but I could probably get more in a bidding war. If Google wants the exploit, it should be able to outbid the other people who are willing to buy it.
Time is money after all, and by disclosing an exploit I worked so hard to find I'm basically giving it all away to Google... and for what?
For ethical reasons? What ethical reasons? Google is not a person, it's a corporation.
- ihsw 13y agoPeople use Chrome, that is the ethical issue. As long as we're not pretending that we're ethical hackers then that's fine with me. I find it extremely hypocritical to claim to be an ethical hacker and sell exploits at the same time.
- mikevm 13y agoWell, people look for exploits in popular software, so pretty much anything that is being exploited is being used by people. It's Google's job to secure Chrome, not the people out there that are looking for exploits. Why would you work for free (or almost for free)? Do you not need to pay for food & shelter? Frankly, I don't see why finding an exploit and then selling it to someone is unethical. (By the way, you can replace Google by Microsoft or your other favorite corporation)