Slashdot Mirror
MS Excel exploit on auction
geo_2677 writes "Someone had put up for auction on eBay the details of an exploit in Microsoft Excel according to a recent article on Securityfocus. According to the article Microsoft has confirmed that this vulnerability exists, but in the meantime the original listing on eBay has been pulled. " The now pulled auction, but it does appear that Microsoft has confirmed the vulnerability in an eweek article.
and shame on the moderators as well. This is obviously either a publicity stunt or this guy is just
having some fun and saying fuck you M$ in a very public arena. Did you read this hilarious part?
Special offers:
Microsoft representatives get 10% off the final price. To qualify, you MUST provide @microsoft.com e-mail address and MUST mention discount code LINUXRULZ during checkout.
parent says: phrasing the auction in a way that makes it clear he wants the buyer to do something bad
No, specifically forbidden by auction text, with no winks or smilies or anything ironic.
Your bid indicates that you agree to the following:
1. You may not use this information for malicious or illegal purposes. The information you receive is for educational and
research purposes only.
2. The seller reserves the right to refuse delivery to anyone (a full refund will be issued).
3. The seller will accept no responsibility for anything you do with this information.
4. The seller cannot be held liable under any circumstances.
5. Absolutely no refunds will be provided except for the reason mentioned above.
Parent says: Looking at the motivation this guy has, I can't really see how it can be good.
It calls to attention that a critical vulnerability will go unpatched for months after it has been properly disclosed. That is the way that it can be good.
music lover since 1969
The auction was canceled and I was the high bidder too!
Here's a mirror of the auction.
Joel
Good security is based upon reality and common sense. Common sense is a function of having common knowledge.
Correction: he just sold a keystroke logger.
Actually, a great many auctions start at the minimum in any given currency. One of eBay's listing fees is a proportion of the starting bid.