No experience with Valve but are not alone in being cheap: I submitted the bug where you I proved you could make predictions about a password in Microsoft just

No experience with Valve but are not alone in being cheap: I submitted the bug where you I proved you could make predictions about a password in Microsoft just by using ctrl + arrow keys. It wouldn't have been much anyway but I wouldn't have been surprised if they sent me some swag or something - instead I was surprised about how short the thank you mail was ;-) (They said it wasn't a security issue but at least it was fixed in the next release :-P) Edit: I later found a reliable way to run the encryption tools the correct way with the tooling in Azure Information Protection that still leaves the files unencrypted (so simple it can happen by accident, that's how I found it, useful for data exfiltration with plausible deniability) and besides the integration of information protection in Sharepoint is so extremely broken that depending on how you log in, SharePoint will easily serve you the files unprotected. Between not finding the correct way the report it and the very "meh" feeling on my first find I only tried to report those onve or twice and then gave up.