, SecurityFocus 2006-04-05
Vancouver, CANADA--Vulnerability researchers, software makers, and security companies that buy information about software flaws found little common ground during a panel discussion on Wednesday debating the merits of vulnerability-purchasing programs.

Matthew Murphy
And yes... dealing with third-parties is certainly a safer revenue source than going to vendors asking for money for vulnerability reporting... :-)...
[ more ]