Reply to post:

Being a whitehat does pay!! Instead of trying to extort money from people, it's a pity more don't take this approach. It's also kudos to Microsoft for paying this person for "fixing" the issue.