Theses less of an ethical issue than what's argued. I have been screwed by 2 different companies over "proper" reporting. They came back and said I didn't qual

Theses less of an ethical issue than what's argued. I have been screwed by 2 different companies over "proper" reporting. They came back and said I didn't qualify for bug bounties. Then they turned around and PATCHED said bugs that didn't qualify for stated bug bounties. The issue isn't "who's the highest bidder" but instead "who will actually pay what they say". And frankly, the whole of infosec is full of holier-thsn-thou's and corporate scamming. I'll sell to who will pay. (NOTE: what I type only applies to closed source and corporate websites. FLOSS gets free and discrete reports. No 0days for FLOSS. I'm just done being screwed by corporate interests who claim to pay and then screw you over.)