News for hackers. Stuff that matters.

A comment on The battle for the world’s most powerful cyberweapon. Parent comment

Re:The battle for the world’s most powerful cyberweapon by lossolo on Saturday January 29, 2022 @08:34PM (#30132801)
Anyone has copy of the answers? Seems that it was interesting but was edited.
[ Parent | on HN ]
Re:The battle for the world’s most powerful cyberweapon by Veserv on Sunday January 30, 2022 @07:52PM (#30143053)
From memory it was approximately:

1a. $2M for something. Maybe a messenger/important app?

1b. $3.5-4M for zero click in default install (sandbox escape + local privilege escalation)

2. $20M for high level individual talent for a firm like NSO with a $250M revenue/$150M expenses.

3. $400k for a senior engineer. $250k-500k spot bonus for a person in the team who finds a zero-click. Some other words.

4. 500% to 1000%. Some other words.

5. 0-2 zero-click on-hand or maybe per year. 1-3 lesser ones in messaging/browsers/etc I think? Some other words.

6. The answer to 5 is sparse enough that statistics do not really apply.

7. 7-15 months.

[ Parent | on HN ]