Going back to that not worth the payment clause bro. That part of the agreement states they reserve the right to not pay you a dime, but take the work you did anyway. WebKit exploits probably won't be worth a lot anyway, considering 11.0+ we've only got userland for browserhaxIf people really want money they could always just submit webkit bugs.