+1 At best, a bounty program gives me the incentive to look more closely at a particular website / application. But I've submitted plenty of vulnerability repo

+1 At best, a bounty program gives me the incentive to look more closely at a particular website / application. But I've submitted plenty of vulnerability reports to companies that don't have bounty programs. What this bounty really means: if you like finding and responsibly reporting security vulnerabilities, you now have one more reason to spend time doing so on Facebook.