7 ms·
Of course it is. It just no longer exists.
by StrauXX 2mo ago
Of course it is. It just no longer exists.
- tptacek 2mo agoOh, you've done business with them then? Know someone who has?
- jnbcxdrun 2mo ago[dead]
- cmeacham98 2mo agoYes actually, I know someone who did business with them many years ago (before the advent of LLMs), although for a smaller sum than the advertised top payouts (the vulnerability they had was much less important). Why post these random unsubstantiated claims on HN?
- close04 2mo ago> Why post these random unsubstantiated claims on HN? To show everyone the Gell-Mann amnesia effect in action. When HN top karma poster and security professional posts something like this, doubles down, and can’t even be bothered to support it in any way (I’m open to learning and changing my opinion) it completely blurs the line going into social media influencer. Quantity over quality.
- StrauXX 2mo agoI do, as a matter of fact.
- monster_truck 2mo agoMy lawyer says I can't answer that
- parl_match 2mo agoYes, I have briefly done business with them as well. We also worked with Bekrar and Vupen briefly. Albeit, it was done through a broker. The second time around, we exited negotiations. Just because they're exclusive about their clients doesn't mean they're not real. Their impact and effectiveness is a separate topic though. I don't think they're still actively operating or taking new clients, at least. btw: "Oh, so you've done x?" What a snarky and confrontational way to ask someone something. Especially when it's asserting a well documented company and person is "not real".
- tptacek 2mo ago[flagged]
- ofjcihen 2mo agoWhy are you constantly responding to people like this? What makes you think you’re above the rest of HN?
- tptacek 2mo agoYou apparently work in the field. Do you take these "price lists" seriously?
- ofjcihen 2mo agoThey can be and they can not be depending on what you’re selling. But that’s besides the point. You straight up argued that one isn’t real in the most asinine way you could. Even if you were right that would be ridiculous. The fact that you’re wrong and have multiple people telling you you are makes it even worse. I’ve seen you replying in snide comments whenever someone disagrees with you before. Your status as…whatever you are doesn’t give you carte to treat randoms like they’re beneath you.
- tptacek 2mo agoI'm noticing you didn't answer my question.
- ofjcihen 2mo agoI did explicitly answer your question, yes. This is how all of these sites work. You would not get 500k for every exploit obviously. You would get that (or more) for great exploits. I’m noticing you haven’t addressed anything I mentioned at all. Is that just acceptance that it’s the truth or are you just having a bad day? Edit: Actually, let me add that for a 0click exploit on mobile devices that leads to root level permissions you’re very likely sitting on millions of dollars.