# content
@yosh@toot.yosh.is @jamey@toot.cat @halcy@icosahedron.website Not to be too dark, but hasn't this been true for a while? I'm sure I could find places on the net to buy (or pay people to find) exploits already, and probably roughly as fast. There are a lot of projects/servers or there with less than stellar security, after all. It almost feels like the bigger change is how much it is now public knowledge you can pay for exploits, rather than whether or not you could already.

# source.content
[@yosh@toot.yosh.is](https://toot.yosh.is/users/yosh) [@jamey@toot.cat](https://toot.cat/users/jamey) [@halcy@icosahedron.website](https://icosahedron.website/users/halcy) Not to be too dark, but hasn't this been true for a while? I'm sure I could find places on the net to buy (or pay people to find) exploits already, and probably roughly as fast. There are a lot of projects/servers or there with less than stellar security, after all. It almost feels like the bigger change is how much it is now public knowledge you can pay for exploits, rather than whether or not you could already.