upvote

points

by tptacek1 days ago |
comments
upvoteby intheitmines22 hours ago|
next
[-]
Is there anywhere currently buying that you can approach without a pre-existing relationship?
reply
upvoteby StrauXX1 days ago|
prev|
next
[-]
Of course it is. It just no longer exists.
reply
upvoteby tptacek1 days ago|
parent|
[-]
Oh, you've done business with them then? Know someone who has?
reply
upvoteby cmeacham981 days ago|
parent|
next
[-]
Yes actually, I know someone who did business with them many years ago (before the advent of LLMs), although for a smaller sum than the advertised top payouts (the vulnerability they had was much less important).

Why post these random unsubstantiated claims on HN?

reply
upvoteby close0422 hours ago|
parent|
[-]
> Why post these random unsubstantiated claims on HN?

To show everyone the Gell-Mann amnesia effect in action.

When HN top karma poster and security professional posts something like this, doubles down, and can’t even be bothered to support it in any way (I’m open to learning and changing my opinion) it completely blurs the line going into social media influencer. Quantity over quality.

reply
upvoteby parl_match14 hours ago|
parent|
prev|
next
[-]
Yes, I have briefly done business with them as well. We also worked with Bekrar and Vupen briefly. Albeit, it was done through a broker. The second time around, we exited negotiations.

Just because they're exclusive about their clients doesn't mean they're not real. Their impact and effectiveness is a separate topic though. I don't think they're still actively operating or taking new clients, at least.

btw: "Oh, so you've done x?" What a snarky and confrontational way to ask someone something. Especially when it's asserting a well documented company and person is "not real".

reply
upvoteby tptacek10 hours ago|
parent|
[-]
Did you get mid-high 5 figures for a serverside vulnerability? I hear the Russians are paying $300k for Postfix! But the UAE might pay $400k through Crowdfense. These numbers are definitely real. How could they not be? They're right there on a web page.
reply
upvoteby StrauXX1 days ago|
parent|
prev|
next
[-]
I do, as a matter of fact.
reply
upvoteby monster_truck21 hours ago|
parent|
prev|
next
[-]
My lawyer says I can't answer that
reply
upvoteby jnbcxdrun1 days ago|
parent|
prev|
[-]
[dead]
reply
upvoteby ofjcihen1 days ago|
prev|
[-]
Why would you reply with something completely unsubstantiated that anyone in security at that time worth their salt would be able to call you out on and then in subsequent comments call people liars for insisting it did, in fact, exist?

I’m just baffled.

reply
upvoteby dadrian19 hours ago|
parent|
[-]
The pricelist was a marketing stunt.
reply