full-disclosure - 0-day for sale on ebay

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20051210172216.GB8772@sivokote.iziade.m$>
Date: Sat Dec 10 17:19:35 2005
From: guninski at guninski.com (Georgi Guninski)
Subject: 0-day for sale on ebay

On Fri, Dec 09, 2005 at 12:36:17PM -0500, security curmudgeon wrote:
> .... But the auction 
> was pulled late Thursday after discussions between Microsoft and eBay 
> Inc.
>

so it is ok for cert to sell 0days.
it also ok for idefense to buy 0days and sell info to clients.

but is not ok to make auctions for 0days on ebay [1]

as the fairy tale says "justice for all".

[1] status of making auctions on chinese forums or irc is unknown

-- 
where do you want bill gates to go today?