The Responsible Disclosure Programme offers a page for those who discover vulnerabilities and will acknowledge your name on their website in exchange for submitting it. This incentive motivated the speaker to submit a vulnerability that allowed the injection of malicious code into a webpage to steal user accounts.