This should go in your next hiring post. "Who we're looking for: Somebody with the chops to dig into code that has passed professional inspection and do horrible, horrible things to it. Someone who can find a stack overflow in document.write. Someone like you, because if you can program we will teach you these and other dark arts. The last stack overflow in Firefox was found by a 12 year old. Are you going to let yourself lose to a 12 year old?"

Sidenote: I think I have a guess based on a prior conversation, but for the edification of HNers: $3,000 is how many orders of magnitude below the market worth of that vulnerability?