Vendors don't want the bother of dealing with vulnerbilities and are unlikely to voluntarily pay those who discover them. It is up to researchers to use leverag

Vendors don't want the bother of dealing with vulnerbilities and are unlikely to voluntarily pay those who discover them. It is up to researchers to use leverage to induce vendors to take responsibility for their oversights. Researchers should make the pain of vulnerbilities such that, due to public embarassment and resulting loss of sales, vendors are motivated to compensate.