mats: https://aisle.com/blog/cve-2025-10230-the-cvss-100-vulnerability-that-hid-in-samba-for-13-years
asciilifeform: mats: laff if you like ( and asciilifeform has no intention of trying to convince anyone with 'pics or didnt happen') asciilifeform found this very booby in 2012
asciilifeform: (and no, found 0 interesting use for it, and no, had no desire to try to sell it to the reich, and it gathered dust along with other vulns asciilifeform found back when gave a shit)
asciilifeform: fuck the buyers, fuck the reich-serving sellers, and fuck the 'we'll tell microshit/usg/etc 1st and plebes --last' 'fixers'.
mats: why not sell through mp's brokers with a clause about time to live
mats: collect some beer money and ensure it gets burned relatively quickly
asciilifeform: mats: we weren't properly 'in biz' together yet. ( also ftr the fella never offered to broker such sales at any later point, his 'underground connectionz' were imho largely fictional )
asciilifeform: it aint clear to asciilifeform that even today there's any 'hey folx, we're buying vulns for coin and we'll totally not fuck you and laff all the way to the bank' entities
asciilifeform: asciilifeform, ftr, as a matter of principle aint ever giving up a morsel for e.g. 50k$ in taxoladebux, that he knows some blueblood will cash in for $1m
asciilifeform: would rather take it to coffin
asciilifeform: let the bluebloods find their own fucking 0days.
dulapbot: (trilema) 2017-12-24 asciilifeform: also why wouldja 1) help hitler 2) for $ 500 3) that you'd have to suffer from down's syndrome to actually believe will be paid ...?
dulapbot: (trilema) 2017-12-24 asciilifeform: the 3 or 4 people on the planet who can actually SELL 0days , knowing they'll be paid 1) know who they are 2) wouldn't even cough and spit for a mere 500 , esp if paid in taxolade 3) don't deal with 'uber' et al, or any 'responsible-disclosure'-pushing usg.tentacle , not for promises of three kingdoms and five princesses
dulapbot: (trilema) 2017-12-24 asciilifeform: if yer a nobody, and you were to show up with a ~serious~ 0day : you have 1000x chance of getting 'weev'-ed, rather than paid .
mats: i should have expected to replay a ten year old convo
mats: mb ðŸ˜
asciilifeform: well thrd was about a dinosaur bone to start with, neh, lol