Re: Trend Micro's Vista "0day exploit auction" claim

[krymson () gmail com]

Not only that, but the "first" 0day exploit for Vista can put a security company on the map as well. That's worth some 
money to marketing. Ethical? Not really their own research? Perhaps...


<-snip->
Anything is possible. Whether or not it's FUD is totally irrelevant IMHO.
Considering Vista officially launched on November 30*, what's the number
of deployed servers at the moment?
How many of these will be business/mission critical (thus "interesting")?

Sure, the "bad guy" paying 50k for the exploit can sit around waiting for
vulnerable vista's to pop up but if they're willing to pay that price they
should get a developer/security researcher, lock him up in a basement with
a server running vista and get (possibly) more (then 1) 0-day exploit(s).

Kr

Roger