Re:“We found PayPal vulnerabilities and PayPal punished us f...
by ohithereyou on Monday February 24, 2020 @12:07PM
(#22405890)
"Dark web" for things that are not relevant to Five Eyes and NSA when they are relevant. At least in those cases, with good opsec for the "dark web", you can be reasonably sure the company who made the product can't retaliate against you.
So it seems like the real answer in these cases is selling the exploit on the "dark web". I mean why not? The vendor doesn't seem to care about security anyway.