Hi Kyle,

I totally agree with you, that people get motivated by bounties, if there was no bounty the vulnerability could go unfixed for years until some black hat abuses the vulnerability for $$$.

Was the bug you found in the framework that could be re-used elsewhere or was it only UA specific?

I think that public disclosure(agreed with UA) would help the community to make Internet more secure and along with the report it would inspire other starting security researchers to join bug bounties and help to secure the Internet.

Robin