[api]

There are probably fewer than 1000 people in the world capable of finding these kinds of vulnerabilities. Sounds about right to have 10 at Intel.

[ghettoimp]

Out of curiosity, where would the others be?

[erk__]

Universities, three letter agencies and private or government actors. At least I would guess that, maybe also a bunch at anti virus developers.