If companies are going to keep trying to get out of paying bounties for insane vulnerabilities like this, white hat researchers will just move onto something el

If companies are going to keep trying to get out of paying bounties for insane vulnerabilities like this, white hat researchers will just move onto something else, leaving the bounties to be paid out by the black market. Bounties aside, contacting his employer is a disgusting move.