Zero-day sales not “fair” — to researchers
Two years ago, Charles Miller found a remotely exploitable flaw in a common component of the Linux operating system, and as many enterprising vulnerability researchers are doing today, he decided to sell the information.

Deci daca si tu ai gasit un bug poti sa”ti iei banu gramada pe el…

“The value of the vulnerability is determined by the amount of time that the vulnerability can be used to get a return on investment before it is patched,” Foslof said. “If I’m paying $50,000 for a vulnerability, what am I doing with it? I’m likely not trying to get it patched.”

Deci spor la vanatoare de BUGuri …:)