Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
eBay pulls vulnerability auction
Robert Lemos, SecurityFocus 2005-12-09

Online auction giant eBay shut down the bidding for a vulnerability in Microsoft's Excel spreadsheet program on Thursday, saying that the sale of flaw research violates the site's policy against encouraging illegal activity.

Comments Mode:
eBay pulls vulnerability auction 2005-12-10
Dancho Danchev
I had a chat with Dave Endler, director of security research @ TippingPoint a week before this happened, take a look if interested!

The concept, given the monetization of vulnerability research, is just getting popular I think!

http://www.astalavista.com/index.php?section=directory&linkid=5703...

[ more ]  [ reply ]
eBay pulls vulnerability auction 2005-12-10
Anonymous (2 replies)
Quoth the article:

> "The listing was immediately reviewed and pulled from the site for violating our policy against

promoting illegal activity--hacking," England said in an e-mail to SecurityFocus.

So `illegal´ means here ``whatever MS doesn't like´´, right? What puts me off is that even y...

[ more ]  [ reply ]
Re: eBay pulls vulnerability auction 2005-12-11
Anonymous
>Look: a bread knife can be put to good as well as >to bad uses. Still, the bread knife isn't illegal >/per se/. Killing someone with it is, of course.

>Knowledge about flaws is all the same. You nay >use this knowledge to avoid security holes, to >fix the product or (GASP!) to avoid the product ...

[ more ]  [ reply ]
Re: eBay pulls vulnerability auction 2005-12-11
Anonymous
put simply:

microsoft to ebay, take it off or else.

ebay, ok.

So much for independents in the securities business. If microsoft wanted the info, buy it yourselves instead of locking the guy out. How much can we trust security firms when there's no real independent sources of confirmation. Micr...

[ more ]  [ reply ]
eBay made the right move 2005-12-10
Mike
I have to side with eBay- selling this kind of info is not only wrong (in my opinion) but is a liability issue for them.

Mike

http://www.quicktrivia.com

...

[ more ]  [ reply ]
eBay pulls vulnerability auction 2005-12-10
FunkyNerd
If the posting of such vulnerabilties really is illegal, then why doesn't MS move to purchase the vulnerability and utilise this, and the contact with the vulnerability vendor as evidence upon which to build a legal case, thus also "legitimately" taking ownership of the vulnerability?...

[ more ]  [ reply ]
I love it!!! 2005-12-11
janice (1 replies)
Rotfl

0.01$ , and that's all Microsoft products worth!!

The guy is so funny!!Yes that's correct.That's all

it worth.

This giant will crush some day that's for sure.

I don't know why it takes them so long to respond

to a vuln report?What does Billy tell them?

"Hey boss , these worthless hack...

[ more ]  [ reply ]
Re: I love it!!! 2005-12-12
Josh (1 replies)
No kidding. The days of the "evil empire" are marked. When a company has to resort to buying politicians to "tweak" laws you know they have a crappy product and system design. Most people still use windows because they don't know anything else exists, but thats changing VERY fast. Before long *n...

[ more ]  [ reply ]
Re: Re: I love it!!! 2005-12-12
Joe (1 replies)
Janice and Josh, dont be stupid and dont jump on the band wagon....

[ more ]  [ reply ]
Re: Re: Re: I love it!!! 2005-12-18
Anonymous (1 replies)
Agree'd with Joe.

Really, how old are you two?

Using terms like "Rotfl" and "pwns".... you're acting like 13 year old Counter Strike players. Those terms are funny in there, but in the real world, it makes you both look like retards....

[ more ]  [ reply ]
Re: Re: Re: Re: I love it!!! 2005-12-19
Anonymous
While I do agree with your comment to the acronyms like rotfl and so forth, the idea behind the post is to let these people that are blinded by MS that there are other products out there other than MS. Don't get me wrong, MS has changed the business world forever, they have provided solutions not on...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus