> This is not a bug bounty program. We make no offer of reward or compensation for identifying issues. But at our discretion, we may still choose to thank you
Cool. I guess no whitehat will ever tell them anything.
Batter than immediately and zealously trying to prosecute people I guess.