If it's actually _as_ insecure as you say, why not collect your $1000? You'd make it back even more with gained reputation of your status as a security expert.

Instead, I'm inclined to believe you just can't.