[dave333]

Back in the day there were moderate bounties offered ($100s) for finding security holes. It was far more cost effective than organized security review and testing.