[Fuxy]

That sounds like wishful thinking to me.

Realistically companies including Microsoft will pay as little as they can to anybody and if they get such nicely detailed bug reports for free why would they ever pay.

[catshirt]

that's the point. if they were paying to compete with the black market they would be paying more.

[droopybuns]

Is ms paying bounties?

I thought they only reward major exploit mitigation bypass.

So I am not sure whose argument this supports, but I think ms pays bottom dollar ($0) for general vulns.