Full, anonymous, and public disclosure is fine, however selling exploits is not. The problem is when you sell exploits to software maintainers whom have no inte

Full, anonymous, and public disclosure is fine, however selling exploits is not. The problem is when you sell exploits to software maintainers whom have no interest in fixing the bug, but instead are interested in purchasing the silence of the exploit developer.