There was a blog post on HN recently about a guy's experience reporting an issue to Google and they got a similar dismissive WONTFIX in robotic corp-speak. Secu

There was a blog post on HN recently about a guy's experience reporting an issue to Google and they got a similar dismissive WONTFIX in robotic corp-speak. Security researchers should have a direct hotline to actual employees (engineers) interested in solving security issues, not be forced to raise tickets for morons who want to close them immediately because they don't care enough to investigate. I'd wager that a lot of people don't even bother reporting unless there's a potential reward because of this kind of treatment.