Bidding for bugs?

Iria · Jul 26, 2005, 10:08 PM

TippingPoint's new Zero Day Initiative has some security researchers seeing dollars in their eyes. There now is another place to go to with information on security vulnerabilities, aside from underground buyers that is. TippingPoint and rival iDefense may end up bidding against each other for details on bugs.

"We will see a legal market appear to trade vulnerability information. If a good price comes out from the competition between the actors of this market, it will definitely attract more people to legal security research," Gael Delalleau, a security researcher in France who has contributed the iDefense program, told CNET News.com.

TippingPoint is celebrating the launch of the Zero Day Initiative at the Black Hat Briefings security event in Las Vegas on Wednesday. The company has not disclosed how much it will pay for flaws, iDefense also does not disclose what it offers.
__________
Read More / Source: Security Blog (News.com)

Jul 26, 2005, 10:08 PM	#1
Iria DriverHeaven Extreme Member Join Date: Apr 2004 Posts: 7,275 Rep Power: 87	Bidding for bugs? TippingPoint's new Zero Day Initiative has some security researchers seeing dollars in their eyes. There now is another place to go to with information on security vulnerabilities, aside from underground buyers that is. TippingPoint and rival iDefense may end up bidding against each other for details on bugs. "We will see a legal market appear to trade vulnerability information. If a good price comes out from the competition between the actors of this market, it will definitely attract more people to legal security research," Gael Delalleau, a security researcher in France who has contributed the iDefense program, told CNET News.com. TippingPoint is celebrating the launch of the Zero Day Initiative at the Black Hat Briefings security event in Las Vegas on Wednesday. The company has not disclosed how much it will pay for flaws, iDefense also does not disclose what it offers. __________ Read More / Source: Security Blog (News.com)