[mothered]

And for a final question, does anyone know if Comcast rewards people for finding exploits? I've called them several times but they typically just give the run around or redirect me to a tech agent.

And what did the tech agent have to say?

If you call them and say (for example) "I've Identified a vulnerability that could potentially expose and compromise customer credentials", judging by their response, you'll have some Indication whether they do/do not offer rewards.