Corporations that built all the weak systems should take some responsibility and cough up the cash. Cisco devices are among those, as are most major manufacturers. This really doesn't need to be an America-typical "but if no one sees it why should we give anything" story. It's common sense and supporting this & similar ventures (Spamhouse?) should not need some complicated cost benefit calculation for a company making tens of billions in profit each year. If you really want one, a single headline along the lines of "Old Cisco devices vulnerable" should pay the bill sufficiently.
