Re: Trend Micro's Vista "0day exploit auction" claim

From: krymson@gmail.com
Date: Tue Dec 19 2006 - 16:25:33 EST

('binary' encoding is not supported, stored as-is) Not only that, but the "first" 0day exploit for Vista can put a security company on the map as well. That's worth some money to marketing. Ethical? Not really their own research? Perhaps...

<-snip->
Anything is possible. Whether or not it's FUD is totally irrelevant IMHO.
Considering Vista officially launched on November 30*, what's the number
of deployed servers at the moment?
How many of these will be business/mission critical (thus "interesting")?

Sure, the "bad guy" paying 50k for the exploit can sit around waiting for
vulnerable vista's to pop up but if they're willing to pay that price they
should get a developer/security researcher, lock him up in a basement with
a server running vista and get (possibly) more (then 1) 0-day exploit(s).

Kr

Roger

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:28 EDT