<story><title>Zero-Day Vulnerability in Microsoft Windows Leaked on Twitter</title><url>https://twitter.com/SandboxEscaper/status/1034125195148255235</url></story><parent_chain><item><author>qeternity</author><text>Earlier tweets from this account seem to indicate they believe MS intentionally sabotaged the process so that they could sell the bugs, including to oppressive governments:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;SandboxEscaper&amp;#x2F;status&amp;#x2F;1034116189373521920&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;SandboxEscaper&amp;#x2F;status&amp;#x2F;103411618937352192...&lt;/a&gt;&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;SandboxEscaper&amp;#x2F;status&amp;#x2F;1034112926045622274&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;SandboxEscaper&amp;#x2F;status&amp;#x2F;103411292604562227...&lt;/a&gt;&lt;p&gt;&lt;i&gt;EDIT&lt;/i&gt; as @dixie_land points out, it appears the author is open to selling indiscriminately.</text></item><item><author>ghostbrainalpha</author><text>&amp;quot;Here is the alpc bug as 0day: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;SandboxEscaper&amp;#x2F;randomrepo&amp;#x2F;blob&amp;#x2F;master&amp;#x2F;PoC-LPE.rar&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;SandboxEscaper&amp;#x2F;randomrepo&amp;#x2F;blob&amp;#x2F;master&amp;#x2F;PoC...&lt;/a&gt; …   I don&amp;#x27;t fucking care about life anymore. Neither do I ever again want to submit to MSFT anyway. Fuck all of this shit.&amp;quot;&lt;p&gt;So is this person upset because Microsoft wouldn&amp;#x27;t patch the bug?  Or that they didn&amp;#x27;t want to pay for the information?&lt;p&gt;Comments seem to reference Apple pays 25k for this type of info.&lt;p&gt;Can anyone with background give some context here?</text></item></parent_chain><comment><author>dixie_land</author><text>I don&amp;#x27;t know how you reached that conclusion. The tweets read to me that the &lt;i&gt;author&lt;/i&gt; is willing to sell to the highest bidder.</text></comment>
<story><title>Zero-Day Vulnerability in Microsoft Windows Leaked on Twitter</title><url>https://twitter.com/SandboxEscaper/status/1034125195148255235</url></story><parent_chain><item><author>qeternity</author><text>Earlier tweets from this account seem to indicate they believe MS intentionally sabotaged the process so that they could sell the bugs, including to oppressive governments:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;SandboxEscaper&amp;#x2F;status&amp;#x2F;1034116189373521920&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;SandboxEscaper&amp;#x2F;status&amp;#x2F;103411618937352192...&lt;/a&gt;&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;SandboxEscaper&amp;#x2F;status&amp;#x2F;1034112926045622274&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;SandboxEscaper&amp;#x2F;status&amp;#x2F;103411292604562227...&lt;/a&gt;&lt;p&gt;&lt;i&gt;EDIT&lt;/i&gt; as @dixie_land points out, it appears the author is open to selling indiscriminately.</text></item><item><author>ghostbrainalpha</author><text>&amp;quot;Here is the alpc bug as 0day: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;SandboxEscaper&amp;#x2F;randomrepo&amp;#x2F;blob&amp;#x2F;master&amp;#x2F;PoC-LPE.rar&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;SandboxEscaper&amp;#x2F;randomrepo&amp;#x2F;blob&amp;#x2F;master&amp;#x2F;PoC...&lt;/a&gt; …   I don&amp;#x27;t fucking care about life anymore. Neither do I ever again want to submit to MSFT anyway. Fuck all of this shit.&amp;quot;&lt;p&gt;So is this person upset because Microsoft wouldn&amp;#x27;t patch the bug?  Or that they didn&amp;#x27;t want to pay for the information?&lt;p&gt;Comments seem to reference Apple pays 25k for this type of info.&lt;p&gt;Can anyone with background give some context here?</text></item></parent_chain><comment><author>mockingbirdy</author><text>&lt;i&gt;Please see &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=17860480&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=17860480&lt;/a&gt; before downvoting.&lt;/i&gt;&lt;p&gt;From her website - &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;sandboxescaper.blogspot.com&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;sandboxescaper.blogspot.com&lt;/a&gt;:&lt;p&gt;&amp;gt; I&amp;#x27;m also transgender. But my transition so far has been really difficult (social isolation, lack of support.. etc), my voice is still really manly and I don&amp;#x27;t really pass at all (which probably weirds people out.. so I would rather say it upfront so I don&amp;#x27;t need to have anxiety about it, I have alot of anxiety issues). I also have not been able to change my name yet, legally its still &amp;quot;Thomas&amp;quot;.&lt;p&gt;- - -&lt;p&gt;w.r.t. the 0-day release: Well that&amp;#x27;s some seriously irresponsible stuff right there.&lt;p&gt;I think she has a tough time (she&amp;#x27;s transgender and doesn&amp;#x27;t have support from her peers). It&amp;#x27;s sad that she hasn&amp;#x27;t found a way to live a happy life although she clearly has serious skills. I hope she&amp;#x27;ll be fine.&lt;p&gt;It&amp;#x27;s just annoying that a lot of users are now at risk, I hope the patches will be installed ASAP.</text></comment>