I will be delivering a talk titled "Mostrame la guita! Adventures in buying vulnerabilities" which will provide some transparency into the world of vulnerability purchasing programs. What price ranges are offered on the white, grey and black markets? How do various software vendors compare to one another on response? The talk will share insights, statistics and amusing anecdotes drawn from my experiences, research and history of the TippingPoint Zero Day Initiative vulnerability buying program.
We will also be hosting a fun software auditing contest and offering (alcoholic) drink tickets as prizes. The intentionally vulnerable software will be made available on the first day of the conference and rewards for discoveries can be used on either day. Entries will be accepted through our Zero Day Initiative web portal to give contestants a feel for the ZDI vulnerability life cycle. You compete only with yourself, so no worries on overlapping discoveries. At the end of the second day whoever has found the most bugs in the shortest amount of time will receive a blog shout out, small trophy and a bottle of champagne.
Read on for our humorous contest flier and see you next week.
-pedram
:::::::-. ::: .::.::: :::. :::::::. .::::::.
;;, `';,';;, ,;;;' ;;; ;;`;; ;;;'';;' ;;;` `
`[[ [[ \[[ .[[/ [[[ ,[[ '[[, [[[__[[\.'[==/[[[[,
$$, $$ Y$c.$$" $$' c$$$cc$$$c $$""""Y$$ ''' $
888_,o8P' Y88P o88oo,.__888 888,_88o,,od8P 88b dP
MMMMP"` MP """"YUMMMYMM ""` ""YUMMMP" "YMmMY"
TippingPoint's DVLabs is proud to announce the DVLabs Really Improved Network Collection (DRINC). Utilizing our 104.37 combined years of development experience we are confident we have developed a turn-key solution capable of solving every problem faced by a computer user ever. DRINC will also solve every latency issue you may ever experience, increase your telecommuting synergies and redefine the throughput of your business to business paradigms simply by installing these applications.
::::::::::::::::PRESENTS::::::::::::::::::::::::::::::::::::::
DRINC includes:
- A webserver: Streamlined code to guarantee your pages, blogs and torrent distribution websites stream information faster that you can see. (not valid where prohibited by law)
- The DVLabs Ultimate Security Log Analyzer: If you have analyzed security logs in the past, it may have been a tedious experience. With the DUSLA, you don't just generate reports, you generate ULTIMATE reports.
- Our new DVLabs Enhanced Video codec: Guaranteed to make your videos brighter and more alive. This includes our recent addition of 4D technology to make you feel as if you are actually there. Or were there. Or will be there. It takes your videos through time.
- Browser based enhancements using the latest in ActiveX technologies to interact with your social networking experiences. MySpace, faster. Facebook, faster. Orkut, faster. Even Twitter will be so fast it will seem like only 14 characters.
- Remote Procedure interfaces to ApplicationX: This app is so top secret that the engineers are not even allowed outside or to speak to their loved ones until launch.
88888888888 888 8888888b. 8888888b.
888 888 888 "Y88b 888 Y88b
888 888 888 888 888 888
================ 888 888 888 888 888 888 d88P ================
================ 888 888 888 888 888 8888888P" ================
================ 888 888 888 888 888 T88b ================
888 888 d8b 888 .d88P 888 T88b
888 88888888 88P 8888888P" 888 T88b
8P
"TL;DR: Come join us at the TippingPoint booth at Ekoparty. If you can find a security hole in our setup, we will buy you a drink. Find as many as you want and we'll keep buying. The vulnerable software will be made available on the first day of the conference and rewards for discoveries can be used on either day. Entries will be accepted through our Zero Day Initiative web portal to give contestants a feel for the ZDI vulnerability life cycle. You compete only with yourself, so no worries on overlapping discoveries. At the end of the second day whoever found the most bugs in the shortest amount of time will receive a blog shout out, small trophy and a bottle of champagne.
