Maybe Gary should create an alter ego, provide them with a zero day, and take their money.

And the bug could be “coincidentally” fixed later that day…

This is a pretty sad state of affairs. Pidgin has been around for ages. I used to use it on my n900 back in the day - that and gpodder really opened my eyes to how powerful open source could be at a young age.

How do we solve this potentially criminal misallocation of funds? Something is fundamentally wrong with the priorities in this industry if pidgin is worth more dead (unsecure) than alive (properly maintained).

I have a suggestion for a solution but you're not going to like it