Stories
Slash Boxes
Comments

SoylentNews is people

posted by n1 on Thursday November 19 2015, @06:02AM   Printer-friendly
from the cost-of-doing-business dept.

THE TRADE IN the secret hacker techniques known as “zero day exploits” has long taken place in the dark, hidden from the companies whose software those exploits target, and from the privacy advocates who revile the practice. But one zero-day broker is taking the market for these hacking techniques into the open, complete with a full price list.

In an unprecedented move Wednesday, the zero-day broker startup Zerodium published a price chart for different classes of digital intrusion techniques and software targets that it buys from hackers and resells in a subscription service to customers that include government agencies. The list, which details the sums it pays for attack methods that effect[sic] dozens of different applications and operating systems, represents one of the most detailed views yet into the controversial and murky market for secret hacker exploits. “The first rule of [the] 0days biz is to never discuss prices publicly,” Zerodium CEO Chaouki Bekrar wrote in a message to WIRED prior to revealing the chart. “So guess what: We’re going to publish our acquisition price list.”

http://www.wired.com/2015/11/heres-a-spy-firms-price-list-for-secret-hacker-techniques/


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Thursday November 19 2015, @06:12AM

    by Anonymous Coward on Thursday November 19 2015, @06:12AM (#265270)

    The actual data is in an image that is designed to be pretty, and therefore practically unparsable.

  • (Score: 2) by FatPhil on Thursday November 19 2015, @07:21PM

    by FatPhil (863) <{pc-soylent} {at} {asdf.fi}> on Thursday November 19 2015, @07:21PM (#265458) Homepage
    It's readable enough to see that the product my company produces is on their list of targets. At least our unit tests pass Valgrind analysis, so I think we're safe. We've even tried using those intelligent fuzzers, and after a whole weekend found nothing of interest at all. So, the gauntlet is down...
    --
    Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves