News for hackers. Stuff that matters.

A comment on Rewards of Up to $500K Offered for FreeBSD, OpenBSD, NetBSD, Linux Zero-Days. Parent comment

Re:Rewards of Up to $500K Offered for FreeBSD, OpenBSD, NetB... by xxs on Friday June 29, 2018 @09:55AM (#17424529)
> They buy vulnerabilities from researchers...

or provide an opportunity for the original developers to introduce an obscure backdoor and cash out

[ Parent | on HN ]
Re:Rewards of Up to $500K Offered for FreeBSD, OpenBSD, NetB... by pas on Friday June 29, 2018 @12:08PM (#17425303)
That's an interesting take on the situation.

Was there any instance of this? Are there disincentives against this? (I guess the entity offering the bounty could say, only software released before this day is available. Though malicious contributors can very certainly guess that there will be other future bug bounties too.)

[ Parent | on HN ]
Re:Rewards of Up to $500K Offered for FreeBSD, OpenBSD, NetB... by Zophike1 on Friday June 29, 2018 @03:25PM (#17427041)
> Was there any instance of this? Are there disincentives against this? (I guess the entity offering the bounty could say, only software released before this day is available. Though malicious contributors can very certainly guess that there will be other future bug bounties too.)

I believe sometime ago there was new surrounding backdoored crypto also on the low-level side of things there was a secret rootkit in Street Fighter that allowed for an EOP

https://github.com/FuzzySecurity/Capcom-Rootkit

https://www.blackhat.com/docs/eu-17/materials/eu-17-Filiol-B...

[ Parent | on HN ]
Re:Rewards of Up to $500K Offered for FreeBSD, OpenBSD, NetB... by rv77ax on Friday June 29, 2018 @12:17PM (#17425405)
Impossible. Our ego is too high to allow bug in our code.
[ Parent | on HN ]
Re:Rewards of Up to $500K Offered for FreeBSD, OpenBSD, NetB... by lowry on Friday June 29, 2018 @01:31PM (#17426032)
Higher than a pile of banknotes that together make half a million dollars? I doubt that.
[ Parent | on HN ]