How a Google Headhunter’s E-Mail Unraveled a Massive Net Security Hole (2012)

How can someone monetize on a finding like this? This vulnerability easily had a value of millions to Google, Amazon, Yahoo etc, but how could Zachary Harris have made money of his discovery?