Slashdot Mirror

← Back to Stories (view on slashdot.org)

Business Is Booming In the 'Zero-Day' Game

Posted by timothy on from the pat-I'd-like-to-buy-an-exploit dept.

HonorPoncaCityDotCom writes "Nicole Perlroth and David E. Sanger write in the NY Times that all over the world, from South Africa to South Korea, business is booming in zero days. The average attack persists for almost a year before it is detected, according to Symantec, the maker of antivirus software. Until then it can be exploited or 'weaponized' by both criminals and governments to spy on, steal from, or attack their targets. Ten years ago, hackers would hand knowledge of such flaws to Microsoft and Google free in exchange for a T-shirt, but increasingly the market for 0-day exploits has begun to migrate into the commercial space (PDF) as the market for information about computer vulnerabilities has turned into a gold rush. Companies like Vupen charge customers an annual $100,000 subscription fee to shop through its catalog, and then charges per sale to countries who want to use the flaws in pursuit of the kind of success that the United States and Israel achieved three summers ago when they attacked Iran's nuclear enrichment program with a computer worm that became known as 'Stuxnet.' Israel, Britain, Russia, India and Brazil are some of the biggest spenders but North Korea is also in the market, as are some Middle Eastern intelligence services."

4 of 97 comments (clear)

  1. Re:So if 'cyberWar' is actually a thing... by Jmc23 · · Score: -1, Offtopic
    If it is a ridiculous and unnecessary term then why did you use it? Why did you bring up the term first?

    There's got to be a screw loose somewhere! I'd check your logic circuit.

    --
    Don't complain about syntax, grammar, or spelling. There is no.hell like input on android.
  2. Re:So if 'cyberWar' is actually a thing... by Jmc23 · · Score: -1, Offtopic
    So you're saying it was necessary to use it and that instead of being ridiculous it actually sets the context precisely? You sure you haven't got a screw loose for criticizing a word for not being useful for exactly the use you put it to?

    As an aside, I know exactly the greater context this falls under and didn't need some quirky guy with a screw loose spouting inanities about cyber-whatever to get the bigger picture. Just trying to give you a hand with your logic analyzers.

    --
    Don't complain about syntax, grammar, or spelling. There is no.hell like input on android.
  3. Re:So if 'cyberWar' is actually a thing... by Jmc23 · · Score: -1, Offtopic

    Yes irony. That's what it was, irony.

    --
    Don't complain about syntax, grammar, or spelling. There is no.hell like input on android.
  4. Re:So if 'cyberWar' is actually a thing... by Jmc23 · · Score: -1, Offtopic

    You sure? I've got a spare shovel if yours broke.

    --
    Don't complain about syntax, grammar, or spelling. There is no.hell like input on android.