ergophobe - 4:26 pm on Jun 25, 2013 (gmt 0)
>> pay "up to" an amount
That's pretty standard for any reward, including information leading to the arrest of a murderer or whatever.
If they turn out to be really cheap about it, they will reap the "benefits", which is to say that people will turn on them and make the situation worse. If they are generous, word will get out and people will really hunt for exploits.
I suppose the great unknown is how many exploits are there? If people start reporting them in massive numbers, it could get too expensive. But if people stop reporting them, it could get expensive.
Now that I think about it, I can see why they hesitated to do something like this. Does anyone know if Google or Apple have similar programs?