Comment by sdwr

> Some guy is poking around our system looking for exploitable weaknesses. Should we tell him to go away?

> Nah, let's pay him instead!

is a solution, but obviously can't be the solution. From a distance, white hat "vulnerability disclosures" start to look like a protection racket.