In case people haven't noticed, Google has announced a reward program for this (last year, in fact):
https://www.google.com/about/appsecurity/patch-rewards/ ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org