btw this would be much attractive if your friend was displaying his prices as iDEFENSE does because that is easy to say I buy exploits, then how many ? depending of the severity ? does he buys only exploits with an old or 0day or unpublished discovery ? etc
I doubt he can pay more than iDEFENSE anyway
