Is it ethical to sell zero day exploits?

[GabiCRX]

Content source

http://blog.emsisoft.com/2014/11/11/is-it-ethical-to-sell-zero-day-exploits/?ref=newsbox_ticker141112&utm_source=software&utm_medium=newsbox&utm_content=ticker141112&utm_campaign=newsbox_ticker141112

"Zero day flaws are the application vulnerabilities that nobody knows about until it’s too late. They’re the things like Heartbleed, or Shellshock, or most recently POODLE that allow hackers and attackers to execute malicious code on machines that aren’t theirs. They’re also the things like Sandworm and Operation Snowman: previously unknown entry points into a PC through end user software that allow malware writers to infect their victims in new and often unprotected ways.

Zero days are dangerous because once they are announced users literally have “zero days” to apply a patch. Once a zero day is made public, you can already assume it’s being exploited by cybercriminals in the wild. For this reason, the biggest concern in the world of zero day research is never an issue of when – as bugs will always be discovered. Much more pertinent is the uneasy question of how."

Continue here:
http://blog.emsisoft.com/2014/11/11...icker141112&utm_campaign=newsbox_ticker141112