full-disclosure - Exploits Selling / Buying

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon Jun  6 21:43:44 2005
From: stan.bubrouski at gmail.com (Stan Bubrouski)
Subject: Exploits Selling / Buying

I think a couple questions about this would definately prudent:

1) What do you have to gain from this?
2) How do we know your not just selling the exploits to
DDoSers/Spammers/Extortionists?
3) Are you just going to keep exploits sold to you private so you can
sell them to felons and and offer zero benefit to the community
what-so-ever?
4) Why do people need to connect to IRC to find out info about this if
you have a website you could easily post it on?

And on a side note your site is shady and so is this idea.  I only
hope nobody falls for this and I wonder if there is any liability
here.

-sb

On 6/6/05, Alexander Hristov <joffer@...il.com> wrote:
> Hello list,
> 
> We would like to announce a new service to the security community at
> securityfocus ,
> its about buying new,private exploits.
> So if you are looking to profit from your findings - the place is
> irc.exploits.cx the main chan is #exploits , details can be found on
> the /motd or you could just ask in the main channel.
> 
> Our IRC network also supports ssl - irc.exploits.cx port: 9999
> 
> 
> We're looking forward to see you online!
> 
> 
> best regards,
> exploits.cx staff
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>