News for hackers. Stuff that matters.

A comment on Firefox zero-day was used in attack against Coinbase employees, not its users. Parent comment

Re:Firefox zero-day was used in attack against Coinbase empl... by garren on Thursday June 20, 2019 @02:47PM (#20235966)
Do you have a source for that? Google's not giving me anything. I'd definitely like to know more - I can't help but wonder how widespread that kind of behavior is.
[ Parent | on HN ]
Re:Firefox zero-day was used in attack against Coinbase empl... by dboreham on Thursday June 20, 2019 @04:11PM (#20236848)
Locking security bugs from wide internal read access has been SOP everywhere I've worked for decades.
[ Parent | on HN ]
Re:Firefox zero-day was used in attack against Coinbase empl... by laughinghan on Thursday June 20, 2019 @06:24PM (#20238009)
I think they're asking for a source on the specific claim about Microsoft employees selling bugs on the black market, which is what I would also like to see.

I don't need to be convinced that security bugs should be on a need-to-know basis during the responsible disclosure period, that seems obviously prudent. Anyone not working specifically on security can learn about the details at the same time as the wider public.

[ Parent | on HN ]
Re:Firefox zero-day was used in attack against Coinbase empl... by Thorrez on Thursday June 20, 2019 @10:48PM (#20239458)
I don't know anything about that event, but it reminds of me when 20 Apple contractors had a scheme selling Apple user data for $7M.

https://www.nytimes.com/2017/06/09/business/china-apple-pers...

[ Parent | on HN ]
Re:Firefox zero-day was used in attack against Coinbase empl... by inetknght on Thursday June 20, 2019 @03:22PM (#20236346)
No source, but I'd be willing to bet it's very widespread.
[ Parent | on HN ]