Simon Smith
20/01/07, 15:01
Just wanted to let everyone know that I've updated the blog to reflect new
changes. You can see the changes at http://snosoft.blogspot.com.
On 1/18/07 2:27 PM, "Simon Smith" <simon@snosoft.com> wrote:
> Oh,=20
> About your ROI question, that varies per buyer. I am not usually told
> about why a buyer needs something as that's none of my business.
>=20
> On 1/18/07 4:22 AM, "Roman Medina-Heigl Hernandez" <roman@rs-labs.com>
> wrote:
>=20
>> Simon Smith escribi=F3:
>>> Amen!
>>> KF is 100% on the money. I can arrange the legitimate purchase of m=
ost
>>> working exploits for significantly more money than iDefense, In some ca=
ses
>>> over $75,000.00 per purchase. The company that I am working with has a
>>> relationship with a legitimate buyer, all transactions are legal. If yo=
u're
>>=20
>> <naive>
>>=20
>> I was wondering which kind of (legal) enterprises/organizations would pa=
y
>> $75000 for a simple (or not so simple) exploit.
>> - governmental organizations (defense? DoD? FBI? ...)
>> - firms offering high-profiled pen-testing services?
>> - ... ?
>>=20
>> What about the ROI for such investment?
>>=20
>> </naive>
>>=20
>> Regards,
>> -Roman
>>=20
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>=20
>=20
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
changes. You can see the changes at http://snosoft.blogspot.com.
On 1/18/07 2:27 PM, "Simon Smith" <simon@snosoft.com> wrote:
> Oh,=20
> About your ROI question, that varies per buyer. I am not usually told
> about why a buyer needs something as that's none of my business.
>=20
> On 1/18/07 4:22 AM, "Roman Medina-Heigl Hernandez" <roman@rs-labs.com>
> wrote:
>=20
>> Simon Smith escribi=F3:
>>> Amen!
>>> KF is 100% on the money. I can arrange the legitimate purchase of m=
ost
>>> working exploits for significantly more money than iDefense, In some ca=
ses
>>> over $75,000.00 per purchase. The company that I am working with has a
>>> relationship with a legitimate buyer, all transactions are legal. If yo=
u're
>>=20
>> <naive>
>>=20
>> I was wondering which kind of (legal) enterprises/organizations would pa=
y
>> $75000 for a simple (or not so simple) exploit.
>> - governmental organizations (defense? DoD? FBI? ...)
>> - firms offering high-profiled pen-testing services?
>> - ... ?
>>=20
>> What about the ROI for such investment?
>>=20
>> </naive>
>>=20
>> Regards,
>> -Roman
>>=20
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>=20
>=20
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/