From the article " The launch of the latest hacking challenge comes less than a month after researchers at Trend Micro discovered Vista flaws being hawked on underground sites at $50,000 dollars a pop". But if you tell the "good guys" about a vulnerability you MIGHT get $8,000, and a fix for the vulnerability would quickly follow. Also all the submitted vulnerability code would have to be tested and no doubt there will be a few "red herrings" in there resulting in a lot of time-wasting. So maybe Microsoft are right to have reservations about this.