Oh, you've done business with them then? Know someone who has?

cmeacham98 a day ago | parent | next [-]

Yes actually, I know someone who did business with them many years ago (before the advent of LLMs), although for a smaller sum than the advertised top payouts (the vulnerability they had was much less important).

Why post these random unsubstantiated claims on HN?

	▲	close04 a day ago \| parent [-]
		> Why post these random unsubstantiated claims on HN? To show everyone the Gell-Mann amnesia effect in action. When HN top karma poster and security professional posts something like this, doubles down, and can’t even be bothered to support it in any way (I’m open to learning and changing my opinion) it completely blurs the line going into social media influencer. Quantity over quality.

▲

parl_match 17 hours ago | parent | prev | next [-]

Yes, I have briefly done business with them as well. We also worked with Bekrar and Vupen briefly. Albeit, it was done through a broker. The second time around, we exited negotiations.

Just because they're exclusive about their clients doesn't mean they're not real. Their impact and effectiveness is a separate topic though. I don't think they're still actively operating or taking new clients, at least.

btw: "Oh, so you've done x?" What a snarky and confrontational way to ask someone something. Especially when it's asserting a well documented company and person is "not real".

▲

tptacek 13 hours ago | parent [-]

Did you get mid-high 5 figures for a serverside vulnerability? I hear the Russians are paying $300k for Postfix! But the UAE might pay $400k through Crowdfense. These numbers are definitely real. How could they not be? They're right there on a web page.

▲

ofjcihen 2 hours ago | parent [-]

Why are you constantly responding to people like this? What makes you think you’re above the rest of HN?

	▲	tptacek 2 minutes ago \| parent [-]
		You apparently work in the field. Do you take these "price lists" seriously?

▲

StrauXX a day ago | parent | prev | next [-]

I do, as a matter of fact.

▲

monster_truck a day ago | parent | prev | next [-]

My lawyer says I can't answer that

▲

jnbcxdrun a day ago | parent | prev [-]

[dead]