[mistrial9]

let's go further .. domain name means visibility and costs money.. so whoever builds and pays for "cipherleaks dot com" intends to make a business out of it..

Let's imagine a worst case scenario, where thousands of highly skilled hours are put into building common infrastructure ("barn raising") among capable people with implied social promises but not cash, and then a second wave ("cattle ranchers") comes in and starts collecting money for CVEs and pushing out any claims for compensation by authors..

this scenario is playing out in the EU (CRA laws) or de-facto in the USA (VC startups) right now.. with the monetization of CVEs , but foot-dragging and long speeches for compensation of OSS engineering. make sense?

[xanathar]

A domain name can be got for 30$/yr more or less.

Vanity is just another explanation, and the hope that the CVE gets "famous" like heartbleed or spectre or meltdown.

Source: I'm the owner of 3 domains (not security related fwiw) but zero businesses.

[squigz]

A .com is $10 or so a year