AMD has closed a software-update vulnerability after 124 days, but the researcher who found it says the company refused to pay a $10,000 bug bounty even though he followed the disclosure process and cooperated with the fix. The case is a tidy little example of how security programs can look generous on paper and stingy […]


