Re: And for the negative take on this...
>now we've heard that several bugs, some major, can be found at United with only a few hours expended. Perhaps that is one of the 'facts' they should have embargoed?
Nope. The point is to encourage people to find and report the bugs. If people think its easy, they're more likely to have a go. The trick is to make the bounty worth more than selling the flaw. Lucky for United, even high-value mileage probably doesn't cost them much. Win-win.