> The computer security industry has a serious conflict of interest right now. There is major financial motivation for researchers to find and disclose vulnerab

> The computer security industry has a serious conflict of interest right now. There is major financial motivation for researchers to find and disclose vulnerability to exploit brokers (...) > To improve security for everyone we need to find sustainable ways to incentivize researchers to find and disclose issues and to get bugs fixed. We can’t and we shouldn’t rely on researchers giving away their work for free to for-profit vendors. This. Despite that being said (using other words) in some other blogs and reports, this is the main point of bug haunting. People have to eat and live, in the end of the day, and when the dark side pays much more that the brighter one, it's hard to defend that only responsible disclosures will happen. Because, well, it won't work like that.