Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Thread beginning with comment 354160
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[3]: Comment by sadyc
by sadyc on Fri 20th Mar 2009 17:33 UTC in reply to "RE[2]: Comment by sadyc"
sadyc
Member since:
2005-11-10

There is nothing wrong with using your talents and making money off of it.

Depends on how one uses his talents; thieves also are using their talents to make money and clearly they are doing something wrong.

My point was that a mentality like "I know a way into your machine and I will sell it to the highest bidder" isn't something to applaud.
While this guy's technical skills are respectable, his morale and mentality certainly isn't.
Quite a lot of people have the skills to do bad things, yet they choose to use their skills in more constructive ways.

Reply Parent Score: 2

RE[4]: Comment by sadyc
by Bounty on Fri 20th Mar 2009 17:50 in reply to "RE[3]: Comment by sadyc"
Bounty Member since:
2006-09-18

"I know a way into your machine and I will sell it to the highest bidder"


He didn't sell it to the highest bidder.

"What’s the ballpark value of that Safari bug?

It was probably more than that $5,000 prize I won. It’s much less than the IE 8 vulnerability (exploited separately by Nils) by about a factor of ten. I could get more than $5,000 for it but I like the idea of coming here and showcasing what I can do and get some headlines for the company I work for (Independent Security Evaluators)."

Reply Parent Score: 3

RE[5]: Comment by sadyc
by sadyc on Fri 20th Mar 2009 18:03 in reply to "RE[4]: Comment by sadyc"
sadyc Member since:
2005-11-10

He didn't sell it to the highest bidder.

Right, he held on the bug until the price was worth it.
I'll rephrase my comment:
"I know a way into your machine and I will sell it for the right price".
Still doesn't make it the right approach.

Edited 2009-03-20 18:05 UTC

Reply Parent Score: 1