Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Thread beginning with comment 354125
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE: Comment by sadyc
by geleto on Fri 20th Mar 2009 14:52 UTC in reply to "Comment by sadyc"
geleto
Member since:
2005-07-06

Selling bugs/exploits for money is pretty low... He is almost in the same league with virus writers...

I don't think he intends to sell to some criminal organization. Which I am sure he would have no problems doing - for more money too. And selling exploits to the makers of the software - what's wrong with that? He spends a lot of time and efforts to find these exploits. Why should a software company, that makes a lot of money from that software be entitled to get the results of his hard labour for free? That's just like saying that getting paid to develop software is low.

Reply Parent Score: 3

RE[2]: Comment by sadyc
by lurch_mojoff on Fri 20th Mar 2009 15:24 in reply to "RE: Comment by sadyc"
lurch_mojoff Member since:
2007-05-12

And selling exploits to the makers of the software - what's wrong with that?

Nothing. But it needs to be done exactly the opposite way of what he's doing. He should have contacted Apple with the proposition to search for exploitable bugs at whatever terms he has (flat fee, per issue fee, whatever). If they had refused - move on to the next company. What he's doing now is surprisingly similar to extortion. "Boy, Apple, you have a mighty fine browser there. It'd be a shame if something bad happened to it. Care to give me a token of appreciation?"

Reply Parent Score: 4