The hacker outlined the specific steps needed to create the vulnerability, and was rewarded for the information