Comment by urxvtcd

How isn’t a knowledgeable person incentivized to find vulnerabilities but not disclose them?