Comment by angry_octet

I really dislike this notion that because they had privately discovered a bug, they won't pay a bounty. Better to just sell it.