Claiming that security researchers are dissatisfied with current remuneration--white-hat chump change or the potential of black-hat broken kneecaps--a Swiss company has launched the first non-black-market auction site for zero-day vulnerabilities.

<A HREF="http://www.eweek.com/article2/0,1895,2156528,00.asp?kc=EWKNLNAV071107STR2">The eBay-like bug market, called Wabisabilabi,</A> launched July 3. Security researchers and vulnerability brokers like the concept of selling vulnerabilities for fair market price just fine, but they also say the auction site has some serious flaws: lack of transparency, lack of ethics in selling vulnerabilities as opposed to just getting vendors to fix their products ASAP and thereby getting users protected ASAP, and lastly, the fact that you can't reveal details about a vulnerability without tipping off researchers on how to find it.