Re:Hacking Team: a zero-day market case study
by jschwartzi on Sunday July 26, 2015 @02:00PM
(#9951721)
For $80k I could probably hire someone for a few months to discover one for me. Why would I buy one on the open market if that's the case? As a bonus, hiring someone may produce more than one 0day.
[ Parent
| on HN ]
Re:Hacking Team: a zero-day market case study
by nickpsecurity on Sunday July 26, 2015 @02:21PM
(#9951768)
I agree. Yet, governments regularly buy zero-days for five to six digits instead of hiring someone to produce it for them. As I told Thomas, I doubt they'd get $80k for it but there should be someone with more money & need than tech talent that might buy it. That's the vulnerability broker business in a nutshell. The other end is integration with the attack tools that the company licenses. Combine them for the overall, value proposition.