The hunt for a Microsoft Silverlight 0-day (securelist.com)

This is both clever and disappointing at the same time.

Wy aren't companies receiving zero day notification pay these people back ? Without it there is no incentive to disclose the bugs to get them fixed. It looks like Google Chrome is more efficient there.