Spamming the white hat security bug program won't get him an answer, because he's not reporting a security flaw.