Hacker News Reader

I guess my point is: if you find a security hole in this service, why would you give it up for $10,000?

Sell it to as many customers as you can find first, and then go to them for the extra $10,000. You get more money than you would have otherwise, and you also save innocent people from being unduly compromised. It's a win-win situation ;)

Kinda makes me hope that the person who does find this vulnerability just publishes:

"I have found a critical vulnerability in this application, which I will demonstrate under NDA to any reporter who requires verification. I will under no circumstances reveal this vulnerability to the vendor or to any other party."

Reply on news.ycombinator.com