{"id":7,"date":"2007-01-31T04:13:00","date_gmt":"2007-01-31T09:13:00","guid":{"rendered":"http:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs"},"modified":"2007-01-31T04:13:00","modified_gmt":"2007-01-31T09:13:00","slug":"buying-and-selling-software-bugs","status":"publish","type":"post","link":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs","title":{"rendered":"Buying and Selling Software Bugs"},"content":{"rendered":"

The New York Times has an interesting article<\/a> on how a market exists for software bugs. If you find a new bug in any software (typically a security related issue) you can sell it on the market – either to “legal” buyers like security companies, who do it to plug the holes, or to hackers and other internet criminals who can use the knowledge for identity-theft schemes or spam attacks.<\/p>\n

Excerpt:
\nThe Japanese security firm <\/span>Trend Micro<\/a> said in December that it had found a Vista flaw for sale on a Romanian Web forum for $50,000. Security experts say that the price is plausible, and that they regularly see hackers on public bulletin boards or private online chat rooms trying to sell the holes they have discovered, and the coding to exploit them.
\n<\/span>
\nAnd also:<\/p>\n

\u00e2\u20ac\u0153To find a vulnerability, you have to do a lot of hard work,\u00e2\u20ac\u009d said Evgeny Legerov, founder of a small security firm, Gleg Ltd., in Moscow. \u00e2\u20ac\u0153If you follow what they call responsible disclosure, in most cases all you receive is an ordinary thank you or sometimes nothing at all.\u00e2\u20ac\u009d<\/p>\n

Gleg sells vulnerability research to a dozen corporate customers around the world, with fees starting at $10,000 for periodic updates. Mr. Legerov says he regularly turns down the criminals who send e-mail messages offering big money for bugs they can use to spread malicious programs like spyware. <\/p>\n","protected":false},"excerpt":{"rendered":"

The New York Times has an interesting article on how a market exists for software bugs. If you find a new bug in any software (typically a security related issue) you can sell it on the market – either to “legal” buyers like security companies, who do it to plug the holes, or to hackers … Continue reading Buying and Selling Software Bugs<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[7],"tags":[],"class_list":["post-7","post","type-post","status-publish","format-standard","hentry","category-technology"],"yoast_head":"\nBuying and Selling Software Bugs - Navin Kabra's Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Buying and Selling Software Bugs - Navin Kabra's Blog\" \/>\n<meta property=\"og:description\" content=\"The New York Times has an interesting article on how a market exists for software bugs. If you find a new bug in any software (typically a security related issue) you can sell it on the market – either to “legal” buyers like security companies, who do it to plug the holes, or to hackers … Continue reading Buying and Selling Software Bugs\" \/>\n<meta property=\"og:url\" content=\"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs\" \/>\n<meta property=\"og:site_name\" content=\"Navin Kabra's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2007-01-31T09:13:00+00:00\" \/>\n<meta name=\"author\" content=\"navin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"navin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/technology\\\/buying-and-selling-software-bugs#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/technology\\\/buying-and-selling-software-bugs\"},\"author\":{\"name\":\"navin\",\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/#\\\/schema\\\/person\\\/2278c1c81153e6a72db92cc9bc3cdd8e\"},\"headline\":\"Buying and Selling Software Bugs\",\"datePublished\":\"2007-01-31T09:13:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/technology\\\/buying-and-selling-software-bugs\"},\"wordCount\":235,\"commentCount\":0,\"articleSection\":[\"Technology\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/smritiweb.com\\\/navin\\\/technology\\\/buying-and-selling-software-bugs#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/technology\\\/buying-and-selling-software-bugs\",\"url\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/technology\\\/buying-and-selling-software-bugs\",\"name\":\"Buying and Selling Software Bugs - Navin Kabra's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/#website\"},\"datePublished\":\"2007-01-31T09:13:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/#\\\/schema\\\/person\\\/2278c1c81153e6a72db92cc9bc3cdd8e\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/technology\\\/buying-and-selling-software-bugs#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/smritiweb.com\\\/navin\\\/technology\\\/buying-and-selling-software-bugs\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/technology\\\/buying-and-selling-software-bugs#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/smritiweb.com\\\/navin\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Buying and Selling Software Bugs\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/#website\",\"url\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/\",\"name\":\"Navin Kabra's Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/#\\\/schema\\\/person\\\/2278c1c81153e6a72db92cc9bc3cdd8e\",\"name\":\"navin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5a24efecda3704183f25f7ea3b88db2a80a972c887b9eae64d0dd0e4536c4646?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5a24efecda3704183f25f7ea3b88db2a80a972c887b9eae64d0dd0e4536c4646?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5a24efecda3704183f25f7ea3b88db2a80a972c887b9eae64d0dd0e4536c4646?s=96&d=mm&r=g\",\"caption\":\"navin\"},\"url\":\"https:\\\/\\\/smritiweb.com\\\/navin\\\/author\\\/navin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Buying and Selling Software Bugs - Navin Kabra's Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs","og_locale":"en_US","og_type":"article","og_title":"Buying and Selling Software Bugs - Navin Kabra's Blog","og_description":"The New York Times has an interesting article on how a market exists for software bugs. If you find a new bug in any software (typically a security related issue) you can sell it on the market – either to “legal” buyers like security companies, who do it to plug the holes, or to hackers … Continue reading Buying and Selling Software Bugs","og_url":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs","og_site_name":"Navin Kabra's Blog","article_published_time":"2007-01-31T09:13:00+00:00","author":"navin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"navin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs#article","isPartOf":{"@id":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs"},"author":{"name":"navin","@id":"https:\/\/smritiweb.com\/navin\/#\/schema\/person\/2278c1c81153e6a72db92cc9bc3cdd8e"},"headline":"Buying and Selling Software Bugs","datePublished":"2007-01-31T09:13:00+00:00","mainEntityOfPage":{"@id":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs"},"wordCount":235,"commentCount":0,"articleSection":["Technology"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs#respond"]}]},{"@type":"WebPage","@id":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs","url":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs","name":"Buying and Selling Software Bugs - Navin Kabra's Blog","isPartOf":{"@id":"https:\/\/smritiweb.com\/navin\/#website"},"datePublished":"2007-01-31T09:13:00+00:00","author":{"@id":"https:\/\/smritiweb.com\/navin\/#\/schema\/person\/2278c1c81153e6a72db92cc9bc3cdd8e"},"breadcrumb":{"@id":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/smritiweb.com\/navin\/technology\/buying-and-selling-software-bugs#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/smritiweb.com\/navin"},{"@type":"ListItem","position":2,"name":"Buying and Selling Software Bugs"}]},{"@type":"WebSite","@id":"https:\/\/smritiweb.com\/navin\/#website","url":"https:\/\/smritiweb.com\/navin\/","name":"Navin Kabra's Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/smritiweb.com\/navin\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/smritiweb.com\/navin\/#\/schema\/person\/2278c1c81153e6a72db92cc9bc3cdd8e","name":"navin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/5a24efecda3704183f25f7ea3b88db2a80a972c887b9eae64d0dd0e4536c4646?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5a24efecda3704183f25f7ea3b88db2a80a972c887b9eae64d0dd0e4536c4646?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5a24efecda3704183f25f7ea3b88db2a80a972c887b9eae64d0dd0e4536c4646?s=96&d=mm&r=g","caption":"navin"},"url":"https:\/\/smritiweb.com\/navin\/author\/navin"}]}},"_links":{"self":[{"href":"https:\/\/smritiweb.com\/navin\/wp-json\/wp\/v2\/posts\/7","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/smritiweb.com\/navin\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/smritiweb.com\/navin\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/smritiweb.com\/navin\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/smritiweb.com\/navin\/wp-json\/wp\/v2\/comments?post=7"}],"version-history":[{"count":0,"href":"https:\/\/smritiweb.com\/navin\/wp-json\/wp\/v2\/posts\/7\/revisions"}],"wp:attachment":[{"href":"https:\/\/smritiweb.com\/navin\/wp-json\/wp\/v2\/media?parent=7"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/smritiweb.com\/navin\/wp-json\/wp\/v2\/categories?post=7"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/smritiweb.com\/navin\/wp-json\/wp\/v2\/tags?post=7"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}