Paying for security vulnerabilities
Verisign
It would seem that not only are hackers having auctions that allow anyone to purchase found exploits, but other companies are offering money for finding exploits. I would hope that Verising is doing this for more altruistic means than that hackers.
Is this a bad thing? Hey, if someone wants to pay others to find security holes that can then be patched thereby saving us all from a lot of grief, great.