[bambax]

I don't agree with you that "selling this on the black market poses no moral questions"; this gives access to Google's production servers, which can really harm Google in very bad ways. Unless Google has done specific very bad things to you and you want retribution, why would you do that to them?

But I agree with you that $10,000 doesn't sound like much, for such an exploit, and for a company like Google.

Edit: corrected typo "$10" -> $10k.

[paulgb]

It's $10,000, not $10. Detectify is based in Europe where they use . to group digits.

[bambax]

Yeah, it was a typo; I meant $10k, which does seem quite low, no?