News for hackers. Stuff that matters.
Re:Hacking Team: a zero-day market case study by tptacek on Sunday July 26, 2015 @01:05PM (#9951556)
I think I agree with you. I see a market for camera bypass bugs as more evidence that the whole market is ethically bankrupt. I've always thought that --- high prices for exploits are premised on the idea that they aren't being fixed by vendors! --- but this is a lurid and disturbing detail.

Of course, it's also possible that, like the Netgear CSRF RCE, this is a bug posted with a high price as a a trial balloon, and nobody actually buys them.

(For what it's worth: I also think the idea that serious enterprises need zero-days to test their security controls is also pretty silly. I know it does happen, but I think the causality is mixed up; I think it happens because the markets exist, not the other way around.)

There are no comments on this comment yet.