We regret to say that its true, we've shut down the Exploit Acquisition Program. The reason for the shutdown was that it was taking our buyers too long to complete a single transaction and it wasn't fair to the researchers. While we'd expect a single transaction to take no more than a month, the average transaction time for our buyer was 4 months. The last transaction that we attempted took 7 months at which point the issues were silently patched and the transaction was dead. As it stands right now, we can't justify asking anyone to wait that long to move a single item. So until the end players learn how to move faster, the high price bug brokering market just isn't viable.
There were two articles that were written regarding our Exploit Acquisition Program. One of the articles was written by Computerworld and the other was Darkreading. Something that is worthy of note though is that there seems to have been some miscommunication. During the interview I did not claim that we had brokered an item for $200,000.00. What I did say was that I have heard of very specific and rare items being sold for that much. In all reality the average sale price for exploits seems to range between $10,000.00 and $20,000.00.
Sunday, March 16, 2008
Subscribe to:
Posts (Atom)