One unlocked front door does not equate to a vulnerability allowing anyone to take over your @yahoo.com email account, unless of course in that house there was

One unlocked front door does not equate to a vulnerability allowing anyone to take over your @yahoo.com email account, unless of course in that house there was a file cabinet full of other people's personal information. According to the Google reward program (http://www.google.com/about/appsecurity/reward-program/ http://www.google.com/about/appsecurity/reward-program/), a vulnerability of this type seems to be worth somewhere in the $5,000-$10,000 range. Granted, the security researcher lamenting the lack of Yahoo's appropriate bug bounty program has no right to be righteously indignant about a gift certificate, but it seems clear now that Yahoo knew there was a problem with their bug bounty program and were in the process of fixing it anyway. I have no idea how much money such a vulnerability would be worth on the black market, but I suspect it is more than $12.50. If I am ever in a position fortunate enough to have to make this sort of decision, I can say that I will be keenly interested in keeping these security researchers on my side. That appears to be exactly what Yahoo is doing now, so kudos to them!