Linux is very different issue IMO.<p>1. Customized compilation result different address offsets thus an exploit is not very generic portable.<p>2. Everyone can do a static vulnerability scan for Linux source code, so if there is a hole it's more likely to be well known in the industry<p>Recently series of events with google.cn suggests that this is just a test ground for industrialized 0day farming for closed source software as a strategic weapon.