Business Model
I'm curious. How do these Security companies generate revenue?
Do they simply use all their resources trying to find a bug, and then get paid by Microsoft? Or is finding bugs and subsequent "fame" simply a geekish attempt at marketing their specialist consulting services?