Well, it doesn't seem like the last report was a duplicate. The one they failed to recognize as XSS. If they paid for that one there would be no blog post and

Well, it doesn't seem like the last report was a duplicate. The one they failed to recognize as XSS. If they paid for that one there would be no blog post and no name calling.