SecurityFocus

iDefense Q-1 2007 Challenge Jan 10 2007 05:27PM
contributor (Contributor idefense com) (1 replies)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge Jan 16 2007 05:14PM
Simon Smith (simon snosoft com) (1 replies)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge Jan 16 2007 05:29PM
K F (lists) (kf_lists digitalmunition com) (2 replies)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge Jan 16 2007 06:35PM
Blue Boar (BlueBoar thievco com) (2 replies)

K F (lists) wrote:
> We all know black hats are selling these sploits for <=$25k so why
> should the legit folks settle for anything less? As an example the guys
> at MOAB kicked around selling a Quicktime bug to iDefense but in the end
> we decided it was not worth it due to low pay...
>
> Low Pay == Not getting disclosed via iDefense....

Maybe that's all they are worth to iDefense, since they aren't
monetizing them in the same way blackhats are.

Maybe for some people if they were going to just give them to Microsoft
anyway, a few thousand bucks is worth it.

Me, for example, if I were capable of of finding such vulns, I wouldn't
sell them to the guys writing the drive-by spyware installers. I might
sell it to iDefense or Tippingpoint, though.

BB

[ reply ]

Re: [Full-disclosure] iDefense Q-1 2007 Challenge Jan 16 2007 07:37PM
Simon Smith (simon snosoft com) (2 replies)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge Jan 17 2007 06:33PM
Tim Newsham (newsham lava net) (1 replies)

Re: [_SUSPEKT] - Re: [Full-disclosure] iDefense Q-1 2007 Challenge - Bayesian Filter detected spam Jan 18 2007 09:57PM
Simon Smith (simon snosoft com)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge Jan 16 2007 08:06PM
Blue Boar (BlueBoar thievco com) (1 replies)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge Jan 16 2007 08:17PM
Simon Smith (simon snosoft com)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge Jan 16 2007 07:02PM
K F (lists) (kf_lists digitalmunition com)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge -I WILL BUY FOR MORE Jan 16 2007 06:05PM
Simon Smith (simon snosoft com) (2 replies)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge -I WILL BUY FOR MORE Jan 18 2007 09:22AM
Roman Medina-Heigl Hernandez (roman rs-labs com)

Re: [Full-disclosure] iDefense Q-1 2007 Challenge -I WILL BUY FOR MORE Jan 16 2007 09:19PM
Jim Manico (jim manico net)