Re: 0-day exploit..do i hear $1000?

[security curmudgeon <jericho () attrition org>]

> +If I was truly a sell-out, why the hell would I release my tools and
> +research to the world?  It would be worth more to me as exclusive
> +proprietary intellectual property used as a service to paying customers.
>
> RFP, the way I see this business is like this. You do your job, try to do it
> better that the dude next door, build cutting edge technology, release it to
> the public (as its stupid to think that no-one else will get it anyhow) and use
> it to get your company name out there, while you contributing to the industry
> as a whole. Does that mean selling out? I hope not.

Can you quote one time where RFP releases a tool/paper etc, and mentions
his real name or company name?

When you fail to do that, rethink this part of your argument.

It is the same with Attrition.org and our mirror. Yes, we could have
profited from it, used it to get security work, or whatever else. But that
isn't why we sunk so much time and effort into it.