← Back to context

Comment by quotemstr

7 hours ago

> Blackhat markets will always be able to pay better.

... than Google?

> Selling to Google though you aren't chancing jail time.

Why would you go to jail for selling a vulnerability? It's free speech.

"Aiding and Abetting" crime is also a crime. Free speech has nothing to do with it.

  • "this vulnerability is being sold for research purposes only and must never be used outside of a tightly controlled research sandbox"

  • Has anyone actually been convicted of abetting a crime by selling a vulnerability, by itself, not conspiring with the buyer to commit a crime using said vulnerability? Not as far as I can see. It would be absurd to jail someone for accurately describing a bug.