The bigger picture is vendors can't impose rules on what security researchers do on their free-time if they are not willing to pay for the bugs the researchers

The bigger picture is vendors can't impose rules on what security researchers do on their free-time if they are not willing to pay for the bugs the researchers find and report. Hence the reference to the registry entry: "HKCU\Microsoft\Windows\CurrentVersion\Security and changing the "OurJob" boolean value to FALSE." Look up "no more free bugs" for more info. (Edit: A URL http://trailofbits.com/2009/03/22/no-more-free-bugs/ http://trailofbits.com/2009/03/22/no-more-free-bugs/)