Great job, Nils. I didn't know Google doubles the reward if it goes to charity.

I wonder why Microsoft doesn't have a similar program. Hotmail just got hacked pretty bad[1], and the hackers were selling the vulnerability for chump change in forums[2]. What if they had an incentive to report it to Microsoft instead?

[1] http://www.vulnerability-lab.com/get_content.php?id=529

[2] http://www.whitec0de.com/new-hotmail-exploit-can-get-any-hot...