AOA Forums - Dark Reading reports on Black Market bugs!

AOA Forums (http://www.aoaforums.com/forum/)

- Data Security (http://www.aoaforums.com/forum/63-data-security/)

- - Dark Reading reports on Black Market bugs! (http://www.aoaforums.com/forum/data-security/37320-dark-reading-reports-black-market-bugs.html)

Dark Reading reports on Black Market bugs!

Bucks for Bugs

JULY 20, 2006 | The going rate for a good security bug can help an undergrad pay for tuition or a cash-strapped researcher put a down payment on a car. And that's just if he or she sells it to a legitimate security software firm, which pays anywhere from $2,000 to $10,000 a bug.

The black market can be even more lucrative. A bad guy hacker can get $20,000 to $30,000 for a "weaponized" exploit, says David Maynor, senior researcher for SecureWorks. (See Getting Buggy with the MOBB.) "This is something that is pretty much fire-and-forget and wouldn't require much technical expertise to run," Maynor says.

Read it Front page and comment here!

Bugs have value to the Bad Guys. That's a fact of life. If we want to resolve the issue, we need to learn how to develop better software, not get mad at the guys who find them.

What! i could make money if i find bugs! *cha-ching* ;)