Re: Trend Micro's Vista "0day exploit auction" claim

[krymson@gmail.com]

Not only that, but the "first" 0day exploit for Vista can put a security 
company on the map as well. That's worth some money to marketing. Ethical? Not 
really their own research? Perhaps...


<-snip->
Anything is possible. Whether or not it's FUD is totally irrelevant IMHO.
Considering Vista officially launched on November 30*, what's the number
of deployed servers at the moment?
How many of these will be business/mission critical (thus "interesting")?

Sure, the "bad guy" paying 50k for the exploit can sit around waiting for
vulnerable vista's to pop up but if they're willing to pay that price they
should get a developer/security researcher, lock him up in a basement with
a server running vista and get (possibly) more (then 1) 0-day exploit(s).

Kr

Roger