4 ms·

I've always thought it would be a just punishment for a neutral, but government arbitrated, third party to hold a highest bid auction for zero-day exploits, whe

I've always thought it would be a just punishment for a neutral, but government arbitrated, third party to hold a highest bid auction for zero-day exploits, where the breached company has the opportunity to buy back their bad security at a market price. I feel as though making it public and legal would force larger targets to make better security decisions, instead of the current status quo of letting them off with tiny fines if anything at all.

andrewljohnson 12y ago
+1 for the creative thinking. We need the market forces improving security, but at the same time, brokering for profit seems imperfect.
- gfodor 12y ago
  Can be solved by funneling the profits into some other neutral cause.
- opendais 12y ago
  Eh, just require all profits above $XX million to go to paying down the national debt. Its a government sponsored monopoly that he is suggesting, its reasonable to cap its profits.
moggflunkies 12y ago
is the goal to make a mega corp think twice about adding a product of feature? Now they can cancel that feature in fear of having to buy a 0day back for a gorillion dollars?