ladywhohacks
ladywhohacks
ladywhohacks

It's very easy to say that the big companies who have money should run these programs, but even the best companies at doing this do not get it right every time, and are still somewhat held ransom by researchers who threaten to publish the issue to force the company to action.