[foepys]

I'm looking forward to Google giving out a $100 reward or even nothing to the researcher.

Like they did to the guy who found the sitemap ranking bug in Google Search where he was able to let others pay for a first page ranking. He only got $1,337 and it took Google 6 months to fix it.

[TomAnthony]

That was me. Google later upgraded the bounty to $5000. :)

Article for those interested: http://www.tomanthony.co.uk/blog/google-xml-sitemap-auth-byp...

[um_ya]

There should be another website where people bid on the bug. If Google cares enough about it, they'll out bid the people that want to exploit it.

[jtbayly]

Lol. A market for vulnerabilities? Pretty sure these exist already. ;)

[_pdp_]

This is a pretty clever idea. :) cuz you know Google makes money from ad bidding.

[politician]

...and ought to store the current bids as search results on Google.