> I wouldn't be surprised if the NSA or some other government tentacle was paying them not to make whatever they found known.
It looks like your are unsure, so let me clarify.
There really are companies whose only business is to find and sell vulnerabilities to states. (Whether it's exclusive is just a matter of negotiations).
Most US "charity" ends up in Israel too. Best to think of them as if they were an entirely US-funded university you then have to pay to use the services of.
It looks like your are unsure, so let me clarify.
There really are companies whose only business is to find and sell vulnerabilities to states. (Whether it's exclusive is just a matter of negotiations).