So the author got nothing but a thank you out of it? That's a shame.

At least there was a "thank you".

Some go on to sue such researchers.

Yup, they said thank you and took action only because this was a US-based researcher. Had any Indian dared to do this they'd be in for a world of pain. Not through a lawsuit, but criminal charges.

Typical 'payout' for ""responsible"" disclosure.

[deleted]