Security threats Toolkit
Story: Court case shines light on security ethics
"At present, no software companies provide financial rewards for those who report valid vulnerabilities to them. " Dan your just wrong... Doh!
http://www.mozilla.org/security/bug-bounty.html
The Mozilla Security Bug Bounty Program is designed to encourage security research in Mozilla software and to reward those who help us create the safest Internet clients in existence. Reporters of valid critical security bugs will receive a $500 (US) cash reward and a Mozilla T-shirt.
Full Talkback thread






