[iwar] Exploits Contributor Program (fwd)

From: Fred Cohen (fc@all.net)
Date: 2002-08-20 21:30:31


Return-Path: <sentto-279987-5222-1029904233-fc=all.net@returns.groups.yahoo.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 [204.181.12.215] by localhost with POP3 (fetchmail-5.7.4) for fc@localhost (single-drop); Tue, 20 Aug 2002 21:31:08 -0700 (PDT)
Received: (qmail 17272 invoked by uid 510); 21 Aug 2002 04:28:55 -0000
Received: from n4.grp.scd.yahoo.com (66.218.66.88) by all.net with SMTP; 21 Aug 2002 04:28:55 -0000
X-eGroups-Return: sentto-279987-5222-1029904233-fc=all.net@returns.groups.yahoo.com
Received: from [66.218.67.192] by n4.grp.scd.yahoo.com with NNFMP; 21 Aug 2002 04:30:33 -0000
X-Sender: fc@red.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-8_1_0_1); 21 Aug 2002 04:30:32 -0000
Received: (qmail 24515 invoked from network); 21 Aug 2002 04:30:32 -0000
Received: from unknown (66.218.66.217) by m10.grp.scd.yahoo.com with QMQP; 21 Aug 2002 04:30:32 -0000
Received: from unknown (HELO red.all.net) (12.232.72.152) by mta2.grp.scd.yahoo.com with SMTP; 21 Aug 2002 04:30:32 -0000
Received: (from fc@localhost) by red.all.net (8.11.2/8.11.2) id g7L4UVV22310; Tue, 20 Aug 2002 21:30:31 -0700
Message-Id: <200208210430.g7L4UVV22310@red.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL3]
From: Fred Cohen <fc@all.net>
X-Yahoo-Profile: fcallnet
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Tue, 20 Aug 2002 21:30:31 -0700 (PDT)
Subject: [iwar] Exploits Contributor Program (fwd)
Reply-To: iwar@yahoogroups.com
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, hits=0.0 required=5.0 tests=DIFFERENT_REPLY_TO version=2.20
X-Spam-Level: 

Greetingz,

iMoolah is pleased to announce the official launch of its Exploits
Contributor Program (ECP). The ECP pays contributors very well for
the advance and exclusive notification of exploit code and malicious
code.

iMoolah belives you might find our terms for contributing to the ECP
very attractive. The following provides answers to some basic
questions about the program:

Q. How will it work?
A. iMoolah understands the majority of security researchers are paid
peanuts for publishing security research, and $400 for a fully
working unpublished exploit just doesn't cut it; rather, it could be
for any of a number of motivations, including the following:

 * MONEY MONEY MONEY MONEY MONEY. Everyone's in it for a quick buck.
 * Other more boring reasons that have nothing to do with moolah.

The ECP is for those who may or may not want to have their research
made public to the Internet community, but who would definitely like
to be paid for doing the work.  The compensation will depend, among
other things, on the following items:

 * The kind of information being shared (i.e. local or root exploit)
 * The amount of detail and analysis provided
 * The potential severity level for the information shared
 * The types of applications, OSes, and other software/hardware
affected
 * Verification by iMoolah
 * The level of exclusivity for data granted to iMoolah
 * Number of users of the affected application

We don't want anything worth less than US$1000, and we won't pay you
anything less either.  And if you've got something really good, we'll
give you much more than that.  Who said you have to stay poor?

Q. Who should contribute to the ECP?
A. The ECP is open to any individual, security research group or
other entity.  That means YOU and your buddies.

Q. Why are you launching this program?
A. Many services charge clients for access without paying the
original contributor. Under the iMoolah program, the contributor is
compensated, iMoolah verifies the issue, and we only let the public
know if you want us to.

Q. Who gets the credit?
A. The contributor is always credited for discovering the exploit
information.

Q. When can I contribute?
The ECP is active. You are welcome to begin contributing today.

To learn more, go to http://imoolah.hotusa.org/. If you have
questions or would like to sign up as a contributor to the ECP,
please contact us at ecp@imoolah.hotusa.org.

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Send FREE Holiday eCards from Yahoo! Greetings.
http://us.click.yahoo.com/lbFSMD/ZQdDAA/Ey.GAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2002-10-01 06:44:32 PDT