Thanks for commenting, daenney. > Shameful? Sure, if you know about the vulnerabilities. Maybe from a non-secure mindset you're right, but my point is about st

Thanks for commenting, daenney. > Shameful? Sure, if you know about the vulnerabilities. Maybe from a non-secure mindset you're right, but my point is about strategies for a security program. And it also has another problem, without prior checks you'll end up paying much more money. Facebook and Google paid millions already, but that amount would be much higher if they didn't check for vulnerabilities in their home. Talking about security strategies, you don't really need to know about the vulnerabilities in order to consider this very act "shameful". It's just that you're lacking due diligence. You shouldn't blindly trust bug hunters as a single mechanism to reduce the number of bugs.