3 ms·
It would be interesting to see statistics on exploits sold in the black market lately, since it seems like these companies (Facebook, Google) are doing a thorou
by antsar 13y ago
It would be interesting to see statistics on exploits sold in the black market lately, since it seems like these companies (Facebook, Google) are doing a thoroughly good job at pushing independent researchers to do just that. I'm aware that the linked author wasn't a security researcher intentionally uncovering a flaw, but the outcome still sends a similar message.
- dsl 13y agoSuch numbers are really hard to come by (or disclose publicly). I can tell you that Google exploits on the black market are basically worthless unless 1) it allows Gmail read/send access or 2) facilitates emptying stolen cards in some way. For other types of exploits (a Facebook login bypass, or Windows RCE for example) are far more useful and the black market community really can't come up with the funds to compete with corporate or government buyers.